Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
File: OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json)
Hash identifier: NOzpEP1Y0BVP28rBXjvHW37EELQESywCuKuSDV2sL4s=
Subject key identifier: 50:65:58:69:FE:54:C0:5D:86:7A:AA:F6:EA:09:B4:AB:A4:19:FB:1B
Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Certificate serial: 01A10701AC077DE8C59E7A80F8A334A7E543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
Manifest number: 171B
Signing time: Sun 04 Oct 2026 13:01:52 +0000
Manifest this update: Sun 04 Oct 2026 13:01:52 +0000
Manifest next update: Mon 05 Oct 2026 13:01:52 +0000
Files and hashes: 1: 5HgfHalD9LWYJGG7XKJSoxARVl0.roa (hash: swKgBTrDTDtZaOuFjLNTyyxaRwCSohp8AB3ouBvQWOI=)
2: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: AUFp3jG5SdnQ50mdNZzL0Oke2ih7oxCKUFmXNIHMgxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:01:ac:07:7d:e8:c5:9e:7a:80:f8:a3:34:a7:e5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Validity
Not Before: Oct 4 13:01:52 2026 GMT
Not After : Oct 5 13:01:52 2026 GMT
Subject: CN=50655869fe54c05d867aaaf6ea09b4aba419fb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:62:14:60:3a:f4:ec:24:84:71:12:94:41:5c:
c8:00:23:d9:44:38:91:b4:09:15:30:51:48:e6:8e:
ba:a2:99:a3:a0:cd:d5:36:bf:b6:32:58:c8:85:85:
40:f7:33:ed:86:82:11:62:68:d7:ab:11:6d:69:5d:
68:d8:a3:f9:49:89:19:3a:ed:e5:1a:e9:ec:f4:13:
51:17:11:7f:ea:f5:23:2b:ad:d1:7d:bc:80:ab:28:
ff:36:f7:4b:d1:fb:f4:a0:10:7a:b3:e8:08:7f:22:
7a:ed:36:43:ff:4f:ff:ab:20:94:c6:a6:2d:f0:47:
b3:94:6e:d3:45:be:e6:23:e2:4b:5d:6a:86:cc:c6:
09:0b:16:6e:fb:39:2a:45:c8:9d:de:d9:9c:43:ce:
f8:a2:e2:9b:6c:e4:42:58:ad:93:9c:73:e0:5a:fc:
cf:a5:17:3f:fe:28:e7:9a:35:3a:c2:22:e7:81:68:
97:d7:84:e9:85:73:90:2f:a7:38:28:ce:fe:68:22:
c3:cb:a1:1b:f6:ce:85:7f:04:7c:e1:85:cc:64:25:
9d:bb:86:ad:31:a3:59:86:ab:f3:72:d8:c9:1e:06:
67:78:3c:3d:1c:a5:58:94:0c:81:e7:13:3b:e1:06:
dc:d4:ca:e9:d6:a8:34:15:08:ba:c4:2c:75:2a:87:
23:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:65:58:69:FE:54:C0:5D:86:7A:AA:F6:EA:09:B4:AB:A4:19:FB:1B
X509v3 Authority Key Identifier:
keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3a:f9:90:b7:bb:7e:d2:a1:dd:fc:c3:c8:a5:52:0d:41:b5:
9e:1c:a8:c7:10:62:10:49:26:1f:df:af:81:3b:87:d0:90:6d:
c2:86:6d:cb:f1:bd:6c:e4:cf:b4:00:84:cf:d2:04:c1:22:d2:
10:26:95:0b:71:ea:a6:f4:59:b1:e0:4b:fc:1d:81:b7:03:2e:
53:df:cc:56:e0:ce:7a:c7:d0:7a:7b:81:c1:87:1a:ee:b9:1b:
33:62:6d:bc:07:d3:91:28:03:a2:72:10:ac:31:8a:f8:90:96:
78:da:1f:69:6d:b9:1a:c9:aa:58:57:1f:a4:57:85:54:1d:2a:
23:c2:3c:14:8c:3e:b1:16:4d:6e:fc:25:81:4b:bd:d5:32:2c:
16:1d:8d:5f:2e:4d:07:b0:f1:ce:9d:dc:3d:90:d9:06:7b:d1:
b4:ad:04:94:51:08:0a:39:06:6e:94:6e:b4:b2:5b:03:27:37:
7e:3a:a9:47:6a:ec:94:be:5c:fb:d1:af:3a:9d:c8:c0:d5:df:
5e:c5:66:71:25:16:7e:66:8b:e3:b4:b6:cf:72:8e:e4:c3:44:
0c:e9:14:66:98:87:7e:15:a5:7c:65:35:5e:17:f9:71:e2:f0:
c9:b3:9e:e0:ec:c8:d6:df:50:40:54:28:81:53:d0:66:1c:06:
72:94:a0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:26:39 2026 by rpki-client