Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
File: ovl077UOcpyeAVqLwrbCsGGd_IQ.mft (raw, json)
Hash identifier: BJOVrojOCVbxawCVj6p2jRjZL404JWYh0DQ7KhI+uJ4=
Subject key identifier: 9E:74:44:9B:22:D2:7A:38:C5:C7:8D:49:55:3A:04:F5:73:D7:28:08
Authority key identifier: A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
Certificate issuer: /CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Certificate serial: 019CAC7E4F3F756AB7BE47A3B34D4EC56647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
Manifest number: 0D12
Signing time: Mon 02 Mar 2026 03:01:24 +0000
Manifest this update: Mon 02 Mar 2026 03:01:24 +0000
Manifest next update: Tue 03 Mar 2026 03:01:24 +0000
Files and hashes: 1: UNrxa7mNWshV_JbrB0BZ0cpuOEk.roa (hash: Eo6ANkMPIflh/NyGmKlWOHkmfnD61QM+DTkeJS9gQ+g=)
2: ovl077UOcpyeAVqLwrbCsGGd_IQ.crl (hash: 0RVDGlVaClCQNoHoW+IJgW1QXBwWQICXhMAon0xhUW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:4f:3f:75:6a:b7:be:47:a3:b3:4d:4e:c5:66:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Validity
Not Before: Mar 2 03:01:24 2026 GMT
Not After : Mar 3 03:01:24 2026 GMT
Subject: CN=9e74449b22d27a38c5c78d49553a04f573d72808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:94:3d:c9:aa:aa:f6:90:de:a0:b9:e4:8c:a2:
11:f3:4c:76:ae:2c:f1:24:7a:09:ac:1e:71:e6:ca:
07:6a:da:8c:2e:f9:d7:06:21:db:c8:0c:af:41:1e:
dc:02:f9:45:32:1c:66:43:67:f5:f2:1c:d5:32:b8:
ce:39:ce:fc:2d:1d:c2:5f:ff:34:42:70:44:53:a7:
99:c1:db:ce:70:f1:40:b5:49:95:a5:7f:c5:b0:52:
cb:a9:58:96:a1:96:ac:39:37:74:d0:2b:8a:94:63:
98:14:07:ce:3b:de:d8:07:3d:5c:ea:7b:11:d5:ff:
3e:39:c4:09:a5:b5:fe:e0:14:b3:e6:f1:ba:37:33:
8c:ae:88:f3:04:81:13:a6:e0:f4:82:eb:84:67:e8:
64:7a:bd:4a:82:76:2b:eb:71:7a:8a:39:e5:b8:b9:
1d:3f:76:e3:5f:a4:66:bf:24:07:4f:b9:ea:75:e2:
73:5f:07:5a:7d:f5:45:43:59:53:a6:68:a7:e6:e3:
3f:c5:44:8b:b8:97:4f:75:38:7f:54:53:9e:f1:e9:
2c:63:ce:fa:8a:9f:2b:48:e7:fd:6b:32:65:92:13:
95:19:87:37:3e:44:63:9a:49:2d:60:a9:27:73:2b:
58:ab:9f:7f:33:91:97:24:5f:97:76:ed:c9:92:7f:
db:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:74:44:9B:22:D2:7A:38:C5:C7:8D:49:55:3A:04:F5:73:D7:28:08
X509v3 Authority Key Identifier:
keyid:A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:18:d8:ef:59:a4:5d:48:3b:21:20:60:e7:45:3d:78:b6:82:
1d:91:1c:ad:41:91:64:21:a3:31:d5:b8:9f:02:3c:ba:a6:6e:
39:06:61:b1:d9:6e:e7:6f:b9:19:6f:5a:f4:ed:6c:96:85:bf:
b5:f8:a7:33:3c:cb:5c:2a:fd:b0:f8:01:f3:bf:08:ee:80:08:
9f:18:21:37:48:b6:b0:60:ab:79:49:67:ea:41:b0:d3:6a:d3:
11:bd:2d:5c:05:2d:2d:49:e2:65:79:06:a8:e5:d9:f6:c8:d0:
ef:1e:d8:6b:62:d5:e8:ce:70:f1:ca:8a:06:d2:22:27:da:9c:
91:1f:69:e9:3a:d9:54:6c:e8:df:31:5b:7e:49:90:6e:ee:5b:
d3:7b:ec:0a:47:3a:32:5f:b8:7d:84:ee:c1:c2:41:33:71:79:
5f:56:15:63:c0:f8:84:bd:ba:03:8e:02:eb:4d:15:1d:b8:72:
74:4e:83:41:a4:a6:65:1b:db:22:f8:a5:3d:53:e6:87:62:54:
c1:ef:9e:97:3b:4b:66:b0:ce:01:2f:b6:8f:12:78:98:26:35:
eb:16:57:19:ef:15:b9:7e:2a:6e:4d:9d:32:7d:f7:96:82:72:
5b:a1:e1:a4:1f:4d:76:f0:6a:d4:58:f0:8e:b6:af:37:bb:44:
f6:61:fb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:22:01 2026 by rpki-client