Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
File: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json)
Hash identifier: cW75QXvOGOzp9WyBiimncC+6MZaBSR1xk8z07R6aY9g=
Subject key identifier: 02:22:DA:21:25:B0:D3:16:9C:64:F5:80:E6:1D:40:C5:77:0C:82:10
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Certificate issuer: /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial: 019D27E0104E7F6BED9CC2547BDBB89D427A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
Manifest number: 0DE0
Signing time: Thu 26 Mar 2026 02:01:28 +0000
Manifest this update: Thu 26 Mar 2026 02:01:28 +0000
Manifest next update: Fri 27 Mar 2026 02:01:28 +0000
Files and hashes: 1: fs8d2893qiZikthsq_-JlA6ljMA.roa (hash: ZrsMMWfWT5ZYVuIhEglHV6ViI9TadV+uTXWR+dIXLo4=)
2: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: CAKu5EKPBpBVqCySJygzxA8xzbi13YL5RwIgRPWHV7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:10:4e:7f:6b:ed:9c:c2:54:7b:db:b8:9d:42:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Validity
Not Before: Mar 26 02:01:28 2026 GMT
Not After : Mar 27 02:01:28 2026 GMT
Subject: CN=0222da2125b0d3169c64f580e61d40c5770c8210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8d:96:3f:8d:7d:f8:9f:3b:e4:5c:bc:14:d3:
99:56:fb:53:76:fa:cd:6b:3f:94:0f:42:57:13:a8:
cd:07:b3:4a:e6:09:77:75:4c:2d:e2:d1:4f:86:9f:
a7:e9:c5:af:1e:55:d0:87:53:00:d1:34:e7:03:b3:
cd:64:4c:cd:a3:bf:cf:bf:fb:b3:f7:f7:4e:5d:a1:
f1:a7:52:17:b0:09:be:5e:00:fa:ce:f3:4c:af:b2:
0d:76:8c:7f:41:e0:be:71:a8:f6:dc:da:1d:21:0c:
46:55:b9:ba:88:a5:8a:18:57:d7:aa:51:35:34:8e:
16:14:d1:17:52:c7:5c:c8:ad:e5:22:ca:bd:65:87:
cf:f0:d8:24:03:66:95:fc:6a:c6:2f:98:85:e3:95:
fd:5c:05:a2:b4:02:10:03:e6:65:ea:5f:5b:99:57:
a6:61:16:6c:36:b1:73:3f:32:b8:31:16:0e:f2:6d:
c2:69:9d:37:44:32:71:e7:20:2b:02:36:a1:9c:27:
e9:b7:3d:f6:70:dd:53:86:6c:f9:94:46:7f:44:c8:
15:2f:40:fd:15:ba:00:a9:9b:a3:1f:ba:54:0b:86:
bd:f9:e2:33:cd:58:b1:c4:2f:94:48:1a:d3:c5:f1:
5c:ca:83:fc:b8:6d:d6:bc:84:e7:33:02:3d:17:98:
e5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:22:DA:21:25:B0:D3:16:9C:64:F5:80:E6:1D:40:C5:77:0C:82:10
X509v3 Authority Key Identifier:
keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b4:08:48:00:d4:39:bb:69:12:08:18:20:03:e0:e5:a0:45:
7b:d6:db:bc:33:b2:63:8a:a1:1a:e7:95:2e:a6:4e:a3:ff:21:
2d:4e:b3:19:b9:c2:e1:52:23:4a:18:51:f3:12:b2:33:e7:51:
9b:32:02:67:3b:16:7a:6e:6a:75:0a:99:74:66:86:b4:4f:f8:
2a:8b:98:b7:77:0e:da:eb:59:d5:42:31:1d:fc:40:87:22:2c:
be:35:c6:7a:e4:1b:e5:13:75:a2:59:f0:57:79:94:c6:2e:77:
b1:e5:2e:17:72:d6:1f:22:09:9e:f7:f8:88:b4:44:fc:9c:81:
31:b3:ac:52:67:d7:50:95:ac:61:12:01:88:42:ba:79:fc:c5:
12:78:ef:62:73:66:67:00:b6:50:5f:01:d3:0a:3f:e3:cf:dd:
8b:ee:12:a8:8b:e8:90:3a:5f:98:06:7a:b5:b8:86:7f:2c:06:
83:af:1d:fb:a8:a5:d1:50:a9:59:f0:77:9b:02:e2:e0:6a:4b:
2c:eb:bc:77:1a:3f:f1:f6:d2:34:05:6b:63:f2:c4:14:68:90:
27:ab:90:41:b0:f9:36:7b:c9:2e:b8:d2:33:12:6a:6e:f6:c4:
f1:3e:29:22:d8:05:84:f8:c6:e6:08:42:8a:af:18:bc:f4:40:
75:c2:b2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:17 2026 by rpki-client