Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
File: OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft (raw, json)
Hash identifier: TuwsyHOaArxrbeC8X7ucIwhsHZ4TQS+hKLP4wqZ4nU0=
Subject key identifier: DD:45:B7:AF:9A:1C:22:59:FB:9B:96:64:B0:8D:7F:EB:93:43:68:B9
Authority key identifier: 3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A
Certificate issuer: /CN=3af1507fda4e704828c7e03caf626456aafc5b1a
Certificate serial: 019D9B50772E6BA82EBC0613659581FDFF88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
Manifest number: 17EE
Signing time: Fri 17 Apr 2026 12:00:35 +0000
Manifest this update: Fri 17 Apr 2026 12:00:35 +0000
Manifest next update: Sat 18 Apr 2026 12:00:35 +0000
Files and hashes: 1: JarLaEzkDzbmZJJ38af3qQLqeXM.roa (hash: PZ9i3KgsocU0Ak3wOk/fU4TiIXG7bFd+0z1g3xOW5fo=)
2: OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl (hash: IpPpqB+QvHl2FtWZowYZ6SlPDpoH/CL9oqfmYfmVZsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:77:2e:6b:a8:2e:bc:06:13:65:95:81:fd:ff:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af1507fda4e704828c7e03caf626456aafc5b1a
Validity
Not Before: Apr 17 12:00:35 2026 GMT
Not After : Apr 18 12:00:35 2026 GMT
Subject: CN=dd45b7af9a1c2259fb9b9664b08d7feb934368b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:da:93:23:6d:26:41:9c:39:4b:37:ea:65:0e:
35:74:9e:7d:d1:3b:47:9f:e7:b6:75:50:a2:df:85:
b3:26:1f:a1:36:6c:67:53:64:d5:ba:87:38:18:18:
9c:8c:19:3f:7a:b1:31:e2:17:7a:16:6e:b0:25:6c:
3c:b5:19:0f:d6:e2:9f:95:c1:ff:9c:ee:bb:d5:b2:
a7:dd:e9:03:02:07:7a:29:1f:30:8a:40:b3:75:89:
4f:ff:f2:19:ea:bf:c7:cf:b6:3a:f6:9e:44:cb:b7:
36:91:6a:53:5a:c3:56:5c:ee:4b:dd:54:76:d4:17:
0f:47:c6:f9:63:f7:f3:55:a4:da:96:7a:ad:84:aa:
a3:c1:2c:5f:fc:4e:6c:6e:df:76:52:19:46:94:79:
d1:76:4c:e1:f3:79:4e:b2:56:92:11:a2:36:ad:14:
ed:7c:47:6b:2e:35:e3:33:d8:6d:fc:5d:c4:78:13:
86:86:60:b2:ca:cf:dd:77:62:ba:14:9b:60:23:1c:
95:72:76:ce:ce:f9:d2:3e:e4:e0:d5:b6:b1:0a:bf:
df:1e:5c:0a:3b:2b:d3:9a:0a:d0:29:5f:06:b7:72:
97:04:f1:59:93:dc:7e:72:d2:a0:8b:0e:8d:88:f3:
23:4e:f5:d6:17:df:82:34:69:5e:a9:bb:10:78:c6:
5d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:45:B7:AF:9A:1C:22:59:FB:9B:96:64:B0:8D:7F:EB:93:43:68:B9
X509v3 Authority Key Identifier:
keyid:3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:63:f2:e2:e6:08:cf:93:7c:5d:6a:99:10:5f:53:8d:cb:88:
66:bb:d8:d6:80:e4:3a:91:0b:08:5f:19:8c:50:15:28:ee:87:
aa:7f:2f:3f:b6:da:76:e6:c3:bb:44:da:24:4a:42:d5:79:1e:
fa:1b:5e:43:ea:df:45:ed:d6:69:aa:07:02:41:50:2d:6b:a0:
d8:6d:13:2c:ad:09:47:be:97:84:31:f2:af:b6:e0:6a:b3:7f:
58:d1:8d:3d:85:82:8d:29:0d:62:64:69:58:db:b0:90:0a:ef:
c5:59:d5:f3:2d:9a:90:7a:92:64:6a:73:99:00:9c:41:a5:99:
26:e2:83:1b:84:94:60:24:6d:46:e0:d7:48:b8:00:bd:ca:76:
7d:6c:5d:d3:25:19:e9:01:8a:37:69:22:0d:1c:bb:a0:d2:37:
a7:17:26:7c:bb:9a:b1:e9:1e:29:3d:a9:11:de:f8:bb:93:af:
98:80:9f:22:23:ab:c9:64:7d:de:d3:99:06:f2:ca:ae:e8:a1:
9b:d7:83:e7:b1:43:33:8b:54:ae:af:e4:21:e2:66:d6:1f:aa:
b0:b9:c0:8e:0f:10:e6:b2:1c:ec:d4:e7:ed:3b:98:60:f6:f1:
a3:f4:76:b6:31:3b:a1:48:c7:e9:a0:3d:2c:9d:62:1c:df:75:
65:92:31:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:10:54 2026 by rpki-client