Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.mft
File: OvT97X4Qu-r0tDALBAPwzsJSyV4.mft (raw, json)
Hash identifier: oObr6K3oGbxbhBldOqdc1zu4iv/lVHqab1b/6lHOepc=
Subject key identifier: 46:95:A1:FF:3C:BB:CB:E8:8D:EB:39:64:5F:8A:AF:5F:A3:C0:0D:78
Authority key identifier: 3A:F4:FD:ED:7E:10:BB:EA:F4:B4:30:0B:04:03:F0:CE:C2:52:C9:5E
Certificate issuer: /CN=3af4fded7e10bbeaf4b4300b0403f0cec252c95e
Certificate serial: 01A0C47BD3A61A589E46B29ADC535E400F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvT97X4Qu-r0tDALBAPwzsJSyV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.mft
Manifest number: 85
Signing time: Mon 21 Sep 2026 15:00:44 +0000
Manifest this update: Mon 21 Sep 2026 15:00:44 +0000
Manifest next update: Tue 22 Sep 2026 15:00:44 +0000
Files and hashes: 1: 8fT9pmNi0IQqPN8nu263PPhOOjg.roa (hash: Ujw8ZbOAWSYdEG4uqqRQEENNRaNYjONTO1BAYHKWs+c=)
2: OvT97X4Qu-r0tDALBAPwzsJSyV4.crl (hash: NYoO1vW4Os8CQGNpkzqeZJ+2/M3RPvk/+5IkaCpMeIE=)
3: df7iaJQLWuMKkjAOiXAC6Z4nko8.roa (hash: C/7lssJNPjMIGGjDfXe7RzVQ6k3TBnKs7T8bCHpVh1s=)
4: sFOU4J6G7f8bb8tQb6zHbVorZC0.roa (hash: rg6UFAng9V//tNkBw2WXQqdjewrPo6dIE9fDaq+wzM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvT97X4Qu-r0tDALBAPwzsJSyV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:d3:a6:1a:58:9e:46:b2:9a:dc:53:5e:40:0f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af4fded7e10bbeaf4b4300b0403f0cec252c95e
Validity
Not Before: Sep 21 15:00:44 2026 GMT
Not After : Sep 22 15:00:44 2026 GMT
Subject: CN=4695a1ff3cbbcbe88deb39645f8aaf5fa3c00d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5e:cd:dd:54:d8:1c:5a:19:1c:8c:b6:e2:4e:
ff:35:48:27:b9:d4:cb:f4:77:2a:25:d3:35:f4:82:
94:aa:0c:02:a9:5e:3a:a2:4e:36:a4:2a:5d:a0:1a:
4f:6e:c6:b2:2c:79:cb:4c:69:86:4f:bf:bf:75:12:
f1:4b:35:36:c2:bc:ef:db:66:9b:e3:ff:b2:52:8a:
ae:9f:33:a8:70:11:e0:17:4f:20:79:4f:e8:3d:16:
c9:58:8e:ed:e8:92:33:4b:3c:04:29:5e:73:d0:7d:
78:7f:e7:ef:d9:52:02:52:f8:2b:46:61:86:de:4c:
8d:fe:18:7e:fe:9b:fc:72:e4:48:bc:83:ca:89:ac:
cd:48:7b:96:3b:e1:5b:fc:cd:c8:84:19:91:0d:1b:
b1:68:8d:f2:e1:2f:99:0e:a1:03:10:68:4e:91:d3:
5e:52:19:a4:e8:52:0b:55:c5:04:b2:be:19:0c:21:
94:a5:3a:80:26:d4:21:15:5b:84:01:bf:4a:3e:9e:
b6:9e:a0:b1:6a:4d:3c:6d:68:62:2c:60:51:40:e5:
b5:43:3f:2a:b5:4e:3a:2e:63:3a:1b:5a:a8:9f:fd:
15:2b:89:a3:16:2c:7b:7d:85:3b:bc:d5:13:08:a7:
3b:d9:02:60:28:01:fd:dd:f0:4c:12:27:80:e1:67:
3a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:95:A1:FF:3C:BB:CB:E8:8D:EB:39:64:5F:8A:AF:5F:A3:C0:0D:78
X509v3 Authority Key Identifier:
keyid:3A:F4:FD:ED:7E:10:BB:EA:F4:B4:30:0B:04:03:F0:CE:C2:52:C9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvT97X4Qu-r0tDALBAPwzsJSyV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7c:80:b6:3e:cb:88:b6:c3:e6:99:07:f8:e9:48:4b:7e:25:
25:03:24:24:cb:b5:ee:2c:26:41:84:45:9d:fc:8b:f1:06:ee:
f5:98:f5:a4:a3:f8:5b:7d:78:94:ab:23:a0:6a:33:61:64:84:
0e:32:c6:f6:48:84:fe:8c:78:cf:0d:e8:53:e1:ed:f3:4a:a2:
45:86:5b:4a:81:4f:cd:89:4f:a5:28:ce:76:9f:a3:7f:f0:07:
62:6f:9e:a7:f9:d8:ab:6f:43:4f:6f:9a:31:9a:13:67:97:2d:
8e:ce:9d:a3:2c:60:20:8d:1d:7a:f3:8a:f8:d7:41:d5:24:b5:
c8:8d:47:41:0f:a1:d9:99:51:e7:ea:f8:9f:b8:99:8b:d9:78:
bf:53:1c:ab:39:83:0c:4b:be:4b:68:ce:0b:1e:2d:df:ee:e3:
50:af:4f:35:58:ba:be:e8:ae:3a:23:92:e0:70:be:3e:0b:dd:
cd:dd:28:f0:f2:d6:46:83:bd:61:df:45:ea:c3:a2:76:f2:23:
63:0b:e7:c8:80:96:c5:1b:8e:f5:1c:f2:1b:66:93:fb:30:77:
25:36:1d:69:09:db:8f:50:af:8b:c1:90:a4:b6:cb:69:c6:ab:
41:de:2b:04:7b:70:32:37:ea:4e:6c:8a:a4:88:7a:05:b2:7b:
b1:95:70:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:57:05 2026 by rpki-client