Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
File: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft (raw, json)
Hash identifier: 8yebxWoUzTM4G8BxP2pcMoPfU8NBlqPEVDoQXL4kbsU=
Subject key identifier: 00:E1:CA:8A:FA:10:5D:BA:DF:A5:84:58:FB:08:40:E7:18:6C:25:72
Authority key identifier: 3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D
Certificate issuer: /CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
Certificate serial: 019D284DDFD91C07DC0FC55BC74F8D9B4E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
Manifest number: 142F
Signing time: Thu 26 Mar 2026 04:01:25 +0000
Manifest this update: Thu 26 Mar 2026 04:01:25 +0000
Manifest next update: Fri 27 Mar 2026 04:01:25 +0000
Files and hashes: 1: Bo58gylRbQlTZmOuABRX3XagLXc.roa (hash: aJoWe70kAi++zILuYJYv5N6he0X6TdzYHN+WF4rakhQ=)
2: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl (hash: ZaAJx8XMTudP5Qi2jBnMxmLM3fY3v73mjgxznF47QsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:df:d9:1c:07:dc:0f:c5:5b:c7:4f:8d:9b:4e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
Validity
Not Before: Mar 26 04:01:25 2026 GMT
Not After : Mar 27 04:01:25 2026 GMT
Subject: CN=00e1ca8afa105dbadfa58458fb0840e7186c2572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:96:5f:58:ab:98:92:e9:a6:28:7d:11:96:57:
91:8f:b7:f0:34:b6:45:30:ac:f7:92:ac:6e:be:24:
d1:b0:31:70:f0:8d:3a:f2:a0:74:44:e0:8a:56:d0:
dc:19:87:90:a0:46:db:c0:0e:4a:16:66:0a:06:32:
be:ea:cb:75:07:15:20:6c:5d:cd:47:c0:c8:71:76:
e7:67:8c:ea:21:c4:87:68:7e:28:fb:fe:81:c4:5e:
cc:54:51:d0:83:12:6d:3b:ef:4d:6a:0f:a7:cc:a1:
22:c8:01:44:be:a0:cb:ac:f2:0c:8c:41:4e:0a:7a:
cd:43:d1:27:dd:90:6e:67:0d:9c:3d:85:8e:91:09:
b3:0d:e6:c0:a3:57:18:5d:dc:86:60:eb:47:d4:27:
41:e0:a1:84:61:01:04:79:ad:28:17:d3:e5:8f:b2:
0c:f8:09:11:c7:3d:4d:4b:b0:43:bd:12:9e:80:4c:
64:47:1f:52:58:4e:17:19:12:ca:3d:df:84:e0:d0:
c5:a6:a1:c5:ff:7d:75:57:d1:61:40:e7:b1:af:c6:
c9:52:14:00:7b:97:4f:81:b7:f4:c5:05:9a:49:77:
aa:f8:d0:f3:b1:33:b4:f9:5e:07:1f:68:19:4c:87:
8e:57:4b:fa:0e:cc:23:19:96:ac:29:3f:41:6c:26:
16:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E1:CA:8A:FA:10:5D:BA:DF:A5:84:58:FB:08:40:E7:18:6C:25:72
X509v3 Authority Key Identifier:
keyid:3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:09:d4:fa:76:ef:8e:35:fc:43:8b:6c:d9:72:9e:6c:d8:9d:
5f:0f:72:9e:3d:de:c9:29:1d:db:bc:e8:31:07:55:1c:fd:b7:
3f:2b:3d:65:1a:da:ff:98:2f:b3:f0:a2:b5:a6:25:3d:5c:ee:
2e:fd:58:01:08:fb:1a:2e:c9:9c:89:25:39:95:61:af:9b:dd:
76:cc:01:e7:00:3b:9d:9b:58:72:9b:04:4f:c7:cb:f6:0f:b0:
55:a6:b9:7e:b1:00:e7:2c:2a:37:f4:5e:ed:22:70:1c:25:ea:
ec:4f:ae:33:1d:84:78:23:b6:04:7b:22:c7:a6:f0:c2:a9:77:
97:c1:39:b1:e0:19:2d:b5:bc:a7:b7:dc:0e:46:c7:77:3a:36:
76:a0:fc:37:6e:59:00:88:a1:0c:af:91:cd:bb:ee:1b:35:20:
43:9d:ca:40:96:a2:7f:e0:f2:a7:5e:03:90:6e:4b:6a:63:6a:
03:17:21:e4:85:72:e0:98:41:d0:4c:d4:50:4d:75:93:82:a7:
a8:7d:11:02:0b:6f:69:c1:0a:13:32:af:90:2b:be:5b:d3:4f:
fa:3a:70:47:73:9f:9f:1d:18:ee:8f:60:13:69:06:de:39:4a:
07:67:62:25:d0:38:7f:e4:db:89:ca:81:71:dd:1d:8a:0b:32:
0f:15:71:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:22:26 2026 by rpki-client