Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
File: ov7n60DFpFQ5UC658zG-_qxPjQw.mft (raw, json)
Hash identifier: YP13fvQ5Xe6TI9BPri8i3eYtslFzQ2igFtzDkbVrGYs=
Subject key identifier: CC:2A:03:A7:38:79:6D:2C:63:5D:50:87:E9:72:A3:69:26:88:46:6C
Authority key identifier: A2:FE:E7:EB:40:C5:A4:54:39:50:2E:B9:F3:31:BE:FE:AC:4F:8D:0C
Certificate issuer: /CN=a2fee7eb40c5a45439502eb9f331befeac4f8d0c
Certificate serial: 019CACB49378B28D0E7C58F05216EB19CB07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
Manifest number: 0162
Signing time: Mon 02 Mar 2026 04:00:41 +0000
Manifest this update: Mon 02 Mar 2026 04:00:41 +0000
Manifest next update: Tue 03 Mar 2026 04:00:41 +0000
Files and hashes: 1: iJct27IBYh-gAfl6eu5h4aNgM3U.roa (hash: 6ohSO1sfqYBcO+vPtXlYywNN/BR02DeUS7d8lZX/S7c=)
2: ov7n60DFpFQ5UC658zG-_qxPjQw.crl (hash: Ezu+LE8UE9ftF7LtAobBSgiPQrA9KWtGl3Vg0Q+Qe/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:93:78:b2:8d:0e:7c:58:f0:52:16:eb:19:cb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2fee7eb40c5a45439502eb9f331befeac4f8d0c
Validity
Not Before: Mar 2 04:00:41 2026 GMT
Not After : Mar 3 04:00:41 2026 GMT
Subject: CN=cc2a03a738796d2c635d5087e972a3692688466c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0b:7c:da:09:43:59:ad:da:38:4f:37:b6:79:
04:d0:52:3d:37:63:60:3e:55:2d:46:91:2a:67:54:
6d:4f:90:fe:4f:b8:dc:cb:5d:c5:d1:7c:2f:a6:26:
b0:9d:fd:ac:19:f8:d2:4b:b3:76:21:9c:85:39:cb:
05:5a:70:35:00:ed:c5:34:f9:11:55:f9:62:68:8c:
cd:c5:17:84:4d:21:54:0c:5a:c7:6a:cb:4f:a6:21:
26:2f:f2:17:6c:49:02:c0:25:7e:28:34:a8:66:61:
93:b9:0f:72:9e:b9:20:24:eb:45:a3:09:f0:34:fb:
d3:5c:14:e2:38:7c:9e:24:ca:7e:2d:4c:5f:44:11:
bd:43:53:44:f8:db:b6:10:47:cb:2b:1a:ab:4c:8e:
80:7d:30:6c:63:32:56:a2:10:33:13:fe:fc:5c:6f:
0a:07:9b:b9:8e:fc:58:63:dc:0b:71:36:d0:ac:73:
35:da:04:85:e2:23:0b:f2:f8:67:27:2b:1a:91:ab:
0e:31:d8:18:ef:d9:78:db:b6:17:c9:49:9f:e5:1d:
92:b1:a4:e0:0e:07:8d:91:2a:65:6c:e7:31:44:d5:
0b:6f:6c:3e:78:91:ff:b6:e9:3d:8d:0d:f2:2a:bd:
0b:89:ba:5a:33:29:3d:98:ca:ef:b6:a9:a1:96:5f:
0c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2A:03:A7:38:79:6D:2C:63:5D:50:87:E9:72:A3:69:26:88:46:6C
X509v3 Authority Key Identifier:
keyid:A2:FE:E7:EB:40:C5:A4:54:39:50:2E:B9:F3:31:BE:FE:AC:4F:8D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:56:8d:23:a1:4f:5e:77:68:1c:17:43:ce:e2:45:7f:1a:35:
f7:75:8e:c4:6e:49:e9:b4:63:60:90:bc:0e:a3:2e:04:0a:1d:
87:b0:11:6a:14:b5:88:c6:d0:6b:38:a0:c1:f6:de:ff:71:c0:
2e:69:cd:68:ea:b6:4e:32:05:46:0a:8d:67:95:75:7f:2c:ad:
72:cf:31:11:d1:03:29:12:42:75:c4:6d:26:ee:ce:d7:94:7c:
26:97:aa:d2:73:d3:1c:9e:71:62:bf:ef:98:b9:4a:b9:27:da:
45:0b:72:ce:fa:45:cf:4d:3e:29:78:64:5f:8f:18:19:ae:db:
9d:17:b9:e1:33:e2:6c:9a:2c:4b:e7:5c:7d:27:7d:bb:0e:70:
8a:12:80:19:81:0c:d7:82:64:e1:2e:c9:46:79:0f:1b:20:bd:
01:20:ed:b0:8d:b3:bd:d7:9c:51:aa:93:c0:50:36:d6:49:e0:
96:93:cb:84:b6:a4:46:6b:0f:e6:80:d6:06:b9:a4:da:3a:ba:
18:79:bb:e3:9a:9d:76:c2:3b:81:88:07:70:7b:48:b2:24:87:
b8:d5:c0:4a:52:ed:5d:6d:dc:ee:96:42:d7:c2:9e:55:a4:04:
94:43:89:99:73:6b:65:23:6c:c2:6a:12:bc:76:84:a6:f0:23:
54:16:35:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:38:33 2026 by rpki-client