Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
File: OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json)
Hash identifier: m2jHdS8xKr23hjHi20kphpX6q58okyPae9t2sopwGzQ=
Subject key identifier: F4:1F:A5:85:CF:14:AE:4E:73:D3:B1:9A:5F:68:36:6F:F4:94:A6:B6
Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Certificate serial: 019CACB511F16969D65FD1472D70AA3D85F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
Manifest number: 14DA
Signing time: Mon 02 Mar 2026 04:01:13 +0000
Manifest this update: Mon 02 Mar 2026 04:01:13 +0000
Manifest next update: Tue 03 Mar 2026 04:01:13 +0000
Files and hashes: 1: 5HgfHalD9LWYJGG7XKJSoxARVl0.roa (hash: swKgBTrDTDtZaOuFjLNTyyxaRwCSohp8AB3ouBvQWOI=)
2: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: czuC9XORvZay2rM1BXacYi3OHGfP28YxB5YFBNxWyNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:11:f1:69:69:d6:5f:d1:47:2d:70:aa:3d:85:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Validity
Not Before: Mar 2 04:01:13 2026 GMT
Not After : Mar 3 04:01:13 2026 GMT
Subject: CN=f41fa585cf14ae4e73d3b19a5f68366ff494a6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:d4:44:9a:9d:4b:3e:63:e3:2c:1c:31:3e:
5a:4b:3c:b9:52:75:89:90:cf:b8:9d:9f:d1:f1:b8:
dc:3f:1e:57:22:77:4a:d7:3f:92:05:de:62:fd:e8:
56:f1:51:1d:0f:4a:78:06:a8:6e:33:3c:7d:7e:0d:
24:12:f3:74:75:f1:9c:ac:04:1e:56:8a:e6:64:12:
0e:52:c6:15:d4:b4:98:82:ce:7f:c8:7b:87:2d:55:
70:0f:df:39:a0:fe:59:4f:7d:9d:20:21:ac:00:2e:
0a:86:a9:a6:c5:4b:74:e2:71:09:32:70:51:fd:4b:
66:0c:f4:e0:a0:a9:1c:f2:6e:33:5f:88:d2:97:31:
ff:63:ca:c6:39:df:6a:95:35:5a:47:39:f0:73:f2:
82:66:d9:7d:0f:fa:fb:b9:8f:67:b7:e0:33:9c:3d:
c8:c2:98:74:78:56:5c:a6:e4:21:1f:eb:9d:ad:05:
ca:b6:d4:71:9a:bb:2c:7e:16:b9:53:24:3a:48:ed:
9b:91:a1:3f:3f:46:f7:1f:2f:e8:3e:85:a2:e3:29:
e9:5a:8a:49:16:f0:cd:0f:79:36:d4:6c:15:ef:8b:
ec:67:59:a6:94:19:d2:c3:54:0b:a5:31:09:89:0a:
5c:32:d7:9d:0a:cb:bb:f9:2b:48:ab:4a:c9:7a:c8:
44:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1F:A5:85:CF:14:AE:4E:73:D3:B1:9A:5F:68:36:6F:F4:94:A6:B6
X509v3 Authority Key Identifier:
keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:56:b6:a6:e0:7d:19:2f:04:24:1d:73:21:66:33:c2:3c:6d:
89:8d:21:f5:0b:06:75:70:90:1c:69:f1:01:81:a3:42:55:6b:
38:ff:b3:90:eb:1a:81:2d:9d:bf:3b:dd:19:d5:4b:03:6e:a6:
10:29:51:10:c4:9d:e6:10:19:c9:e8:e2:ad:07:a6:f2:66:59:
51:8c:5e:a7:4d:34:b7:64:de:c1:3d:1f:df:9d:31:12:6a:46:
dd:d5:14:c0:48:ca:44:b5:80:2f:0e:35:69:87:af:89:f7:af:
26:93:36:80:6b:92:e4:23:bf:44:97:33:d4:83:55:7e:17:0e:
e9:2b:80:a4:d8:cb:8c:b1:6e:ed:09:b3:7f:0d:fc:d9:3f:93:
45:2a:5c:3d:60:84:86:28:6e:28:07:f5:c2:2b:d8:f2:1c:e3:
ea:9f:7d:54:2f:2e:9b:86:5d:9c:b6:ca:2d:33:e8:cf:d7:ce:
2f:d9:86:72:bf:a3:aa:d7:df:6a:ff:f1:3e:11:45:a2:94:bb:
84:d7:90:b8:aa:6e:11:a6:c8:23:24:23:75:f9:a5:5a:42:68:
92:74:a3:3b:cc:c7:0e:17:eb:90:22:9f:55:26:0e:c1:00:40:
d5:f2:07:9b:6f:ee:6c:13:a2:6a:aa:23:e8:db:4a:3b:b2:27:
0f:88:6c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:08:20 2026 by rpki-client