Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
File: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft (raw, json)
Hash identifier: NyNHgAajFGF3ugOrySfoUhfoflchh0MQjIINlkUTIEo=
Subject key identifier: 9F:D9:27:F6:6A:CD:E0:DF:4A:12:2A:79:DA:23:1E:D4:2E:A5:5C:A5
Authority key identifier: 3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
Certificate issuer: /CN=3afb9f43a46f059827a9dec366d1496d66089134
Certificate serial: 019CA8338B29CAD77B9DF1301D02A7C217AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
Manifest number: 78
Signing time: Sun 01 Mar 2026 07:01:15 +0000
Manifest this update: Sun 01 Mar 2026 07:01:15 +0000
Manifest next update: Mon 02 Mar 2026 07:01:15 +0000
Files and hashes: 1: 6tfL7A5QJDSI_Y55TqUNwh3A628.asa (hash: 0PnmZojaOL/sDpXqZikBUmwmF7Qen3eJCXfg4rlV4OA=)
2: MoR6SkpnvsZ5xUQbC_xT6iFdNJA.roa (hash: 3qsvfMfu5j45cYgKSYmM4TYZxxauxXv6UP44ZBS48lA=)
3: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl (hash: T3/1gq1joT7qINzo6ijtgZMi/SViSw3mvKc8HFJxDSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:33:8b:29:ca:d7:7b:9d:f1:30:1d:02:a7:c2:17:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afb9f43a46f059827a9dec366d1496d66089134
Validity
Not Before: Mar 1 07:01:15 2026 GMT
Not After : Mar 2 07:01:15 2026 GMT
Subject: CN=9fd927f66acde0df4a122a79da231ed42ea55ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:55:7b:e0:cc:40:ad:6b:1c:0e:9c:17:e7:d3:
ef:5a:8b:b2:76:11:6f:cf:4c:a4:e0:c3:24:d6:89:
d6:41:1d:83:64:96:c7:ad:b1:74:e3:f5:8f:56:ff:
85:a4:94:bd:95:8f:11:e5:be:53:be:0c:ec:74:1b:
f4:d3:80:c6:39:60:32:c0:29:11:64:c8:04:77:99:
06:8f:c6:f3:22:40:ed:39:67:66:62:78:fa:3e:01:
9a:e1:47:e9:dc:69:15:7a:01:9c:a7:80:9c:25:43:
8b:a1:2f:a2:21:34:fa:83:14:6d:b9:d0:4c:06:df:
c6:f3:66:a5:89:a7:b4:4c:20:ed:fe:0a:2f:47:1b:
06:23:29:de:06:76:4d:76:bd:73:43:5b:97:eb:c5:
85:90:99:65:a1:86:60:1a:57:55:71:41:88:4a:80:
cb:ef:2d:42:dc:55:1d:81:d0:7f:ec:ae:eb:0c:e6:
df:69:92:ed:0e:f9:45:9c:a7:52:15:92:30:d6:5b:
95:52:5e:cb:7a:70:84:35:36:e8:46:5f:d0:c9:ee:
fe:39:a6:e8:e6:1e:33:e8:fc:0a:45:ec:61:da:a8:
cb:65:ca:9d:73:4e:e6:ef:dd:24:cc:3e:63:f1:4d:
27:cd:07:04:ac:39:9d:31:80:45:94:56:a2:9e:f3:
d0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D9:27:F6:6A:CD:E0:DF:4A:12:2A:79:DA:23:1E:D4:2E:A5:5C:A5
X509v3 Authority Key Identifier:
keyid:3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:15:3a:43:75:4b:63:12:3b:f7:bd:be:a1:43:5a:d4:d1:6e:
74:9d:1f:17:3e:8b:7a:e4:99:24:25:54:3c:f5:19:7d:b3:08:
1e:51:dd:a2:5e:00:85:97:71:d9:d8:3d:0d:71:b7:86:51:7e:
09:39:1b:a2:2c:82:f9:5f:8d:8c:84:28:37:47:26:96:bb:a4:
a6:92:10:e8:0d:2e:03:97:74:f4:41:9e:df:60:82:6f:f5:bf:
ea:2b:e8:dc:41:0d:20:cd:98:cc:fc:29:95:6c:49:73:62:f7:
6d:40:58:c3:e7:bd:98:76:49:dc:34:df:eb:f1:2c:81:3d:84:
b3:2e:b7:c8:d9:62:f3:1d:b6:cf:37:07:9e:57:cb:0f:00:92:
76:ef:32:ca:e0:65:7b:84:30:52:fa:a7:6b:ab:24:49:ec:7c:
ec:a1:e1:3c:81:8e:d7:b0:15:ee:a2:00:93:f1:58:f5:3f:27:
b1:c7:e6:ed:e0:2a:59:5b:f0:c4:91:48:ed:a3:9f:5a:b7:f4:
3c:8e:21:b6:49:e3:fe:c3:59:51:a4:65:87:1c:14:51:5c:27:
2e:c8:82:29:55:47:10:c3:34:9b:e7:d9:3c:b2:a5:f4:5e:2c:
7b:5d:34:0f:4d:0c:2d:1a:c5:38:5a:a9:91:82:ae:5a:2c:ad:
ab:73:6e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:24 2026 by rpki-client