Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
File: OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft (raw, json)
Hash identifier: D3/FhavYp+kNOYeAhKG32xylJirqUS+kwZT0KMn8dDM=
Subject key identifier: 8E:12:83:48:CD:2E:A5:09:36:79:FE:E8:31:8C:F2:32:F5:BB:64:6B
Authority key identifier: 3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A
Certificate issuer: /CN=3af1507fda4e704828c7e03caf626456aafc5b1a
Certificate serial: 019CADC7710E8B43BE21F54B81A6411D2C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
Manifest number: 1773
Signing time: Mon 02 Mar 2026 09:00:54 +0000
Manifest this update: Mon 02 Mar 2026 09:00:54 +0000
Manifest next update: Tue 03 Mar 2026 09:00:54 +0000
Files and hashes: 1: JarLaEzkDzbmZJJ38af3qQLqeXM.roa (hash: PZ9i3KgsocU0Ak3wOk/fU4TiIXG7bFd+0z1g3xOW5fo=)
2: OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl (hash: BJxlvtP9/wH6nsMbzf+gX30yvO9lQq0s3wimiviPisE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:71:0e:8b:43:be:21:f5:4b:81:a6:41:1d:2c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af1507fda4e704828c7e03caf626456aafc5b1a
Validity
Not Before: Mar 2 09:00:54 2026 GMT
Not After : Mar 3 09:00:54 2026 GMT
Subject: CN=8e128348cd2ea5093679fee8318cf232f5bb646b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:cc:90:fc:d4:04:b4:90:36:53:b7:24:89:
b2:d5:18:69:f6:32:b1:b5:2a:6c:2f:ce:5f:b5:c6:
74:d6:fe:45:c3:52:a5:88:5a:12:a6:00:23:43:1e:
48:02:2c:fd:18:4c:6f:8d:84:0b:b8:83:ea:3c:77:
1a:76:96:38:2c:71:ad:b8:6c:2a:14:e9:d7:e5:c1:
8a:26:cd:97:49:af:82:7c:5e:e4:d8:74:a6:e4:fd:
92:23:96:04:93:e0:4b:8a:fc:5f:07:9f:5f:0a:72:
eb:8d:86:aa:da:2d:4a:c0:94:fc:2f:31:a0:e7:c0:
07:5e:d8:7f:05:3a:a2:d6:3b:73:d4:74:6a:3c:ed:
93:8e:d5:9d:73:57:c9:9d:11:39:a0:59:c6:be:70:
48:f7:89:ea:35:b2:d8:9f:70:70:0e:f1:76:e1:55:
f7:a0:cf:a2:70:ff:f1:2b:83:fc:ca:40:c6:05:56:
df:75:4c:e0:0f:62:67:40:63:5f:77:30:1e:c8:92:
91:6c:d8:21:30:d2:4c:a0:c9:b3:e6:f1:fe:dd:97:
db:9f:69:c9:6e:68:84:5a:92:2e:4e:a0:da:20:84:
1e:50:f7:eb:79:84:6a:11:4a:a0:8c:d8:59:7a:c5:
31:0d:45:ce:0d:43:f4:a0:0e:98:34:15:e4:3d:8a:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:12:83:48:CD:2E:A5:09:36:79:FE:E8:31:8C:F2:32:F5:BB:64:6B
X509v3 Authority Key Identifier:
keyid:3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:55:c6:27:0f:ed:31:39:42:b5:2c:cb:83:ea:53:95:bb:04:
74:3e:2a:b6:a8:ac:02:cd:b5:03:3b:6d:0f:15:c1:c8:18:87:
9a:49:81:3d:13:6f:4d:87:ca:63:64:8f:e1:87:79:0f:e1:d7:
b3:76:45:ab:f4:91:f9:3c:76:31:36:f8:9c:b1:c0:1e:06:9f:
88:6c:36:dd:3c:00:05:8e:a5:5a:e3:47:03:a1:39:18:7c:c7:
b0:99:07:fe:c1:34:aa:1b:61:52:94:ea:e5:84:4f:7c:d3:9b:
43:4d:1f:64:c6:79:34:a5:28:d4:b8:42:3d:f7:82:f2:99:14:
f7:39:8b:3f:c4:03:0c:ad:e2:37:04:b6:62:c4:9d:bb:4b:28:
88:82:cd:24:ff:c5:68:61:5a:b5:51:81:1c:2f:e5:a0:b2:9a:
1e:43:28:2d:bc:c6:e6:4f:2e:1a:29:72:48:6c:64:af:6a:bf:
70:ab:25:5a:54:be:58:fd:31:89:8f:cb:10:b2:cb:45:0e:07:
ca:1d:a2:85:a5:f2:fa:1f:8e:cf:57:bf:03:42:72:fb:3c:a5:
32:a6:c8:c3:30:26:81:f7:a0:ee:33:1b:b4:fb:c0:c4:4d:71:
2c:32:35:58:19:8a:13:ed:15:ad:9c:7b:f8:93:8f:d7:3e:72:
61:50:ec:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:28 2026 by rpki-client