Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
File: OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json)
Hash identifier: Ub7K8ev02oTJdf5OzWKdgKQWP2qkYsKqz+a5Z4yy6cA=
Subject key identifier: 64:07:B0:D8:8A:97:96:9D:F3:27:F1:F3:C1:23:16:99:8D:FA:FC:D8
Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Certificate serial: 019D9A3E2A0EC97F54F4687BF0D48742314E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
Manifest number: 1555
Signing time: Fri 17 Apr 2026 07:00:58 +0000
Manifest this update: Fri 17 Apr 2026 07:00:58 +0000
Manifest next update: Sat 18 Apr 2026 07:00:58 +0000
Files and hashes: 1: 5HgfHalD9LWYJGG7XKJSoxARVl0.roa (hash: swKgBTrDTDtZaOuFjLNTyyxaRwCSohp8AB3ouBvQWOI=)
2: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: YU31+JCP5nHlCOM57WAbdbvvVakxA8hwgvlqmiN1TX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:2a:0e:c9:7f:54:f4:68:7b:f0:d4:87:42:31:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Validity
Not Before: Apr 17 07:00:58 2026 GMT
Not After : Apr 18 07:00:58 2026 GMT
Subject: CN=6407b0d88a97969df327f1f3c12316998dfafcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:49:0b:76:0d:b8:ad:7d:66:85:90:f9:15:
17:99:f8:50:46:0e:a9:3d:f0:ec:3b:f7:c7:03:38:
57:d8:b7:b6:11:92:cd:83:7c:0c:f9:de:4c:4a:88:
e5:00:2d:dc:7f:89:9e:d2:a2:a3:c8:c7:2e:1d:68:
ce:d7:3d:d3:b6:3c:52:ae:37:97:a4:ec:3d:0c:af:
d1:78:7f:32:4b:88:6f:39:c5:20:ab:ac:0f:47:1a:
f3:d0:e8:21:6c:fb:1c:b7:e6:a3:85:22:c8:c1:c0:
2c:38:c3:d6:8e:30:0c:10:58:f8:a9:6d:01:d1:f1:
21:53:c0:9f:ec:5a:56:98:e5:1c:df:b3:6a:ab:c0:
b5:7d:86:26:d6:49:08:6b:61:7f:89:18:fa:85:6f:
89:d5:56:d2:cf:09:c9:d8:55:88:c7:0c:f2:fa:f5:
84:41:2b:31:3f:92:90:3c:44:7a:8a:5c:6f:97:ac:
b6:a2:48:6a:c9:ef:21:ed:2e:82:40:63:40:e7:01:
d8:f0:64:e9:57:18:52:5b:6b:0b:68:41:7b:31:ff:
af:f5:6b:25:48:85:f4:06:e7:86:c9:bb:58:ed:44:
85:77:b2:85:80:07:8c:de:13:d5:74:73:de:74:3a:
f1:36:1f:0d:a8:02:ef:dd:9d:8e:ce:bd:46:c2:68:
17:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:07:B0:D8:8A:97:96:9D:F3:27:F1:F3:C1:23:16:99:8D:FA:FC:D8
X509v3 Authority Key Identifier:
keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:94:01:c4:44:8a:bc:03:dd:b4:39:d1:41:1c:1b:cf:24:28:
62:43:9b:86:8e:8f:46:1f:1d:bc:86:08:32:d0:2a:d3:01:b1:
cb:2f:5c:10:6b:71:4a:ec:26:92:a2:d4:4b:98:24:88:43:e4:
87:44:20:bb:a3:9b:54:29:2f:ec:5f:d7:4d:4a:7f:04:31:2c:
9c:53:6e:12:39:79:33:e8:73:94:53:07:7a:b3:13:e0:88:6b:
0a:02:1f:0f:6b:7c:48:b2:e7:d4:f0:96:59:95:20:d5:b9:90:
8e:a4:29:86:3b:a3:9f:b6:13:c3:b6:03:ba:be:23:45:fc:8e:
f7:33:77:ed:56:2b:b7:67:b7:d6:b6:91:96:20:9e:5a:5c:50:
76:50:99:7e:58:df:48:21:a9:3b:8c:52:a5:4d:c9:34:49:30:
cb:ec:40:6b:e7:86:89:35:fc:30:41:01:a0:9d:4b:fc:53:aa:
26:31:8d:6c:40:ad:7a:90:72:4d:03:4a:75:37:44:f2:6f:93:
26:21:d4:ef:4e:2c:89:8a:a4:c5:94:43:00:df:72:ce:6d:66:
9a:4b:c1:1d:e8:20:d4:99:b5:ae:7b:62:70:63:b7:76:c5:97:
64:2b:70:bf:ab:59:95:45:23:0f:5e:32:e0:33:c3:ab:0e:70:
06:9f:91:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPioOyX9U9Gh78NSHQjFOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZmEyZmMwNmUxYWE5MTM1YzI2MzFiNzNiZWNjNTk1N2Iw
MjNhOTMwHhcNMjYwNDE3MDcwMDU4WhcNMjYwNDE4MDcwMDU4WjAzMTEwLwYDVQQD
Eyg2NDA3YjBkODhhOTc5NjlkZjMyN2YxZjNjMTIzMTY5OThkZmFmY2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvONJC3YNuK19ZoWQ+RUXmfhQRg6p
PfDsO/fHAzhX2Le2EZLNg3wM+d5MSojlAC3cf4me0qKjyMcuHWjO1z3TtjxSrjeX
pOw9DK/ReH8yS4hvOcUgq6wPRxrz0OghbPsct+ajhSLIwcAsOMPWjjAMEFj4qW0B
0fEhU8Cf7FpWmOUc37Nqq8C1fYYm1kkIa2F/iRj6hW+J1VbSzwnJ2FWIxwzy+vWE
QSsxP5KQPER6ilxvl6y2okhqye8h7S6CQGNA5wHY8GTpVxhSW2sLaEF7Mf+v9Wsl
SIX0BueGybtY7USFd7KFgAeM3hPVdHPedDrxNh8NqALv3Z2Ozr1GwmgXBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQHsNiKl5ad8yfx88EjFpmN+vzYMB8GA1UdIwQY
MBaAFDr6L8BuGqkTXCYxtzvsxZV7AjqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84OTkyMTgtMmExOS00ZDBmLTlmMWUt
ZWYzOGU4Y2UzM2QxLzEvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi84OTkyMTgtMmExOS00ZDBmLTlmMWUtZWYzOGU4Y2UzM2Qx
LzEvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATpQBxESK
vAPdtDnRQRwbzyQoYkObho6PRh8dvIYIMtAq0wGxyy9cEGtxSuwmkqLUS5gkiEPk
h0Qgu6ObVCkv7F/XTUp/BDEsnFNuEjl5M+hzlFMHerMT4IhrCgIfD2t8SLLn1PCW
WZUg1bmQjqQphjujn7YTw7YDur4jRfyO9zN37VYrt2e31raRliCeWlxQdlCZfljf
SCGpO4xSpU3JNEkwy+xAa+eGiTX8MEEBoJ1L/FOqJjGNbECtepByTQNKdTdE8m+T
JiHU704siYqkxZRDAN9yzm1mmkvBHegg1Jm1rnticGO3dsWXZCtwv6tZlUUjD14y
4DPDqw5wBp+R3Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:14:30 2026 by rpki-client