Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
File: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json)
Hash identifier: ZSIbXPjUQ3nd98P5jaVm+K+RpLpmZ38bwAWHEs12dBw=
Subject key identifier: DE:93:32:8D:CA:BF:EE:6A:77:0B:4B:94:BD:B2:56:8A:14:0D:07:A5
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Certificate issuer: /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial: 01A0D64C6BBDFEF03144182CDA9FBBAF27EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
Manifest number: 0FC8
Signing time: Fri 25 Sep 2026 02:02:07 +0000
Manifest this update: Fri 25 Sep 2026 02:02:07 +0000
Manifest next update: Sat 26 Sep 2026 02:02:07 +0000
Files and hashes: 1: fs8d2893qiZikthsq_-JlA6ljMA.roa (hash: ZrsMMWfWT5ZYVuIhEglHV6ViI9TadV+uTXWR+dIXLo4=)
2: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: Owxoj5e30mokm01NmAB01Q7erAbts1Egp6YAqOv+/34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4c:6b:bd:fe:f0:31:44:18:2c:da:9f:bb:af:27:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Validity
Not Before: Sep 25 02:02:07 2026 GMT
Not After : Sep 26 02:02:07 2026 GMT
Subject: CN=de93328dcabfee6a770b4b94bdb2568a140d07a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:28:5d:61:db:5a:08:84:57:80:7d:ac:82:a4:
f9:1a:17:f7:68:4e:6f:c0:12:e6:d7:ca:43:58:55:
c0:37:e5:2d:23:74:b7:05:64:25:79:c5:dc:e6:e0:
81:10:cd:6a:cb:b6:ab:6b:35:79:67:da:c0:85:06:
12:5f:aa:22:c5:78:2a:0f:46:7d:07:13:7c:76:16:
74:68:df:59:a4:35:b2:88:be:c8:83:2d:0c:74:67:
26:a3:33:4e:1f:3b:f1:42:e8:6c:3f:b6:3f:62:cb:
dc:82:a5:53:cf:82:1c:54:01:41:e7:92:a0:17:d3:
39:23:0a:fe:60:c3:cd:6c:89:f2:56:70:30:9c:ce:
2c:a7:80:91:d0:a3:1b:b0:43:0e:0e:ac:65:aa:77:
d3:84:6c:8e:53:6a:6b:50:2a:70:69:1c:db:36:74:
9d:ce:d9:18:82:0c:a6:01:be:a1:cd:ab:85:7b:b7:
60:5b:45:53:83:cc:de:0c:9b:84:ab:e4:f8:ec:f7:
41:ff:5b:5e:6b:e7:71:8b:e5:82:66:f3:6e:15:51:
aa:e3:f0:3c:6d:40:bf:97:30:cc:c2:5e:aa:d5:05:
35:0b:bd:85:c4:21:51:6a:fd:7c:3e:f9:4e:07:59:
5b:73:d2:70:c0:1f:31:9d:06:44:67:2f:44:ca:07:
28:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:93:32:8D:CA:BF:EE:6A:77:0B:4B:94:BD:B2:56:8A:14:0D:07:A5
X509v3 Authority Key Identifier:
keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:70:d3:1a:5e:d1:62:bd:35:b5:3b:f3:3d:88:d1:f0:00:df:
1a:7f:db:8f:7b:63:cb:2c:0a:a6:98:e5:b5:f7:97:52:13:3b:
94:70:27:ab:9d:4b:c2:44:5d:39:be:71:2d:02:2e:b2:7b:52:
27:36:70:95:5d:89:8a:bf:0e:ee:b0:d6:3d:c1:ae:79:6a:4e:
4f:f8:ac:ff:5d:3a:0e:b7:79:60:2a:fc:9f:a1:16:ae:d2:1e:
3b:64:54:dc:9f:63:3b:1d:f3:9c:ac:e3:91:bb:4c:31:92:b5:
b0:65:97:5a:ac:97:96:63:26:24:6f:d8:e3:f1:27:9c:db:d1:
a6:f6:9a:a1:f3:e8:a8:95:44:50:f3:4e:0c:67:2b:17:a3:3b:
57:1f:13:84:9f:1b:01:43:ee:02:ed:17:e7:00:eb:fb:38:70:
6d:b0:2d:d2:aa:a7:69:93:38:49:1f:fc:e4:c4:64:44:af:57:
fd:b5:30:fe:5a:41:3b:8b:6d:3e:c8:ec:e7:48:90:5e:54:b2:
94:7d:50:99:a0:22:bf:56:f6:07:d9:e8:0d:27:dc:fe:f4:38:
71:aa:4c:cf:30:24:fe:5b:2b:9d:c4:4e:55:67:f1:74:8b:62:
60:a3:c2:ef:ba:2e:30:b1:13:f1:90:d6:43:c2:34:e5:12:8f:
6e:ae:35:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:22:12 2026 by rpki-client