Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
File: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json)
Hash identifier: EJ2adR2efrkFfJnAXElxYc87CNHXs1s3tWgd9sYmsdU=
Subject key identifier: 8B:90:65:1A:39:83:ED:59:2E:DC:39:B8:B3:1C:45:A3:E1:A7:F0:26
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Certificate issuer: /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial: 01A0D83C0E1044290692B1213D7DB7212616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
Manifest number: 0FC9
Signing time: Fri 25 Sep 2026 11:03:29 +0000
Manifest this update: Fri 25 Sep 2026 11:03:29 +0000
Manifest next update: Sat 26 Sep 2026 11:03:29 +0000
Files and hashes: 1: fs8d2893qiZikthsq_-JlA6ljMA.roa (hash: ZrsMMWfWT5ZYVuIhEglHV6ViI9TadV+uTXWR+dIXLo4=)
2: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: nmizMO+hFqQrBo+Scv/Pn8iDKj66edVUi59ubx8ZR4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3c:0e:10:44:29:06:92:b1:21:3d:7d:b7:21:26:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Validity
Not Before: Sep 25 11:03:29 2026 GMT
Not After : Sep 26 11:03:29 2026 GMT
Subject: CN=8b90651a3983ed592edc39b8b31c45a3e1a7f026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:0a:6f:98:44:c6:32:58:32:12:3f:3f:6d:
7a:7a:72:0b:5c:bc:b3:e8:c7:4f:57:03:2f:b5:1a:
8c:66:b0:6f:82:ff:c3:81:56:e5:d3:27:14:9f:0c:
d4:18:db:3b:43:b0:72:a8:32:c0:2d:c0:56:2d:fc:
29:35:2e:16:16:ab:21:af:7a:29:65:60:3a:5f:c2:
c3:ad:9a:69:2d:bc:ef:08:ca:44:e6:bd:8c:42:f3:
b0:dd:f5:75:47:ee:57:0c:c6:dc:6b:57:84:5b:fa:
8d:86:7c:d6:60:5c:b4:15:5b:da:8e:12:ec:40:60:
ef:2a:ec:d2:84:36:fc:3f:6c:0b:43:bc:e0:47:0c:
3e:d8:5a:d3:2c:2d:3e:33:1a:ae:1d:a9:40:c0:4b:
c8:a2:96:3a:05:f9:fa:b7:a4:f8:6a:58:69:22:34:
03:58:5f:dd:c3:d1:4a:f1:4c:58:d2:28:e0:3d:db:
34:64:c0:63:6a:69:28:77:4a:85:95:b9:e2:17:5d:
ae:0f:f2:84:2a:12:03:af:8f:60:11:15:c6:3c:c4:
2b:3a:3f:09:24:d0:c3:1f:c5:2a:b8:6f:22:27:de:
25:9d:29:38:6e:46:6e:1a:0c:05:d4:85:cd:61:26:
c5:f7:9b:be:24:61:c3:9a:5d:60:9a:67:2a:c6:04:
48:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:90:65:1A:39:83:ED:59:2E:DC:39:B8:B3:1C:45:A3:E1:A7:F0:26
X509v3 Authority Key Identifier:
keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:51:66:48:2d:23:59:64:af:e6:95:e0:ba:08:25:02:ae:c9:
ba:dc:d9:aa:4b:cc:ee:f4:14:fe:c3:cf:31:79:e7:25:96:ad:
6e:2a:22:cb:d0:4c:30:b7:36:aa:d0:7c:27:d9:2e:70:cc:de:
1a:a1:40:f9:f2:11:52:ac:80:a4:c2:c6:91:29:02:14:8c:25:
10:26:dc:5d:31:99:cd:6f:db:0d:b3:f1:d4:c1:26:54:9a:fc:
07:17:b0:26:a9:d7:62:42:b9:61:c0:41:ca:ae:c3:eb:03:34:
83:80:be:6f:e9:3e:6a:e8:eb:71:85:31:df:65:61:1c:1f:6f:
86:64:f8:13:c6:7c:d6:46:51:a7:de:d4:80:5b:77:35:78:5c:
e1:2c:9d:26:bd:ef:01:74:d0:8a:09:c1:48:3b:30:19:41:85:
5e:b4:19:6f:27:15:8d:5e:6a:f7:8d:a7:c1:7c:ae:28:f6:98:
e5:ac:32:b3:c5:16:6d:4f:92:f7:0b:27:60:d5:00:7d:f5:31:
36:bc:cd:07:f2:dc:2b:b4:d8:eb:0b:4f:15:63:78:f9:00:7a:
51:98:85:34:89:27:f2:98:e2:34:65:1c:9d:37:0b:67:7e:8a:
db:0e:8b:33:69:56:be:34:65:27:1c:21:e6:73:34:6c:75:07:
95:af:52:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:07:42 2026 by rpki-client