Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
File: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft (raw, json)
Hash identifier: 7DoHRZNnZ2h2eGhuOFrsdIRrwuahjruelwvhpimS26I=
Subject key identifier: 6C:BA:63:E9:2C:04:AD:78:14:4E:65:EC:9C:E7:FA:AC:3A:35:8D:A2
Authority key identifier: 3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
Certificate issuer: /CN=3afb9f43a46f059827a9dec366d1496d66089134
Certificate serial: 019DA52FD30024508A2D45B809D898CCF55B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
Manifest number: FB
Signing time: Sun 19 Apr 2026 10:01:07 +0000
Manifest this update: Sun 19 Apr 2026 10:01:07 +0000
Manifest next update: Mon 20 Apr 2026 10:01:07 +0000
Files and hashes: 1: 6tfL7A5QJDSI_Y55TqUNwh3A628.asa (hash: 0PnmZojaOL/sDpXqZikBUmwmF7Qen3eJCXfg4rlV4OA=)
2: MoR6SkpnvsZ5xUQbC_xT6iFdNJA.roa (hash: 3qsvfMfu5j45cYgKSYmM4TYZxxauxXv6UP44ZBS48lA=)
3: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl (hash: le1oKMYPPln7vk8nsnYdt7xeTN60rr3QdjrVTTtRwzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:d3:00:24:50:8a:2d:45:b8:09:d8:98:cc:f5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afb9f43a46f059827a9dec366d1496d66089134
Validity
Not Before: Apr 19 10:01:07 2026 GMT
Not After : Apr 20 10:01:07 2026 GMT
Subject: CN=6cba63e92c04ad78144e65ec9ce7faac3a358da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ac:b4:bd:99:91:d3:a2:5e:e2:1c:0f:8a:9b:
a2:29:f5:2d:20:4a:f8:3b:9d:35:3d:db:60:e2:33:
fd:35:62:7f:96:89:fa:b6:dc:34:62:6f:81:d7:a5:
00:50:46:c5:ce:66:7c:cf:0a:dd:e5:ca:9c:5d:31:
e4:24:8d:97:a0:47:d7:24:41:7b:07:b4:80:24:8d:
9c:a6:2a:74:99:ac:0b:e6:25:c7:fb:44:1c:f7:da:
82:b6:62:9b:c7:9b:40:d5:5a:1e:8d:14:4c:0b:25:
58:1d:89:a2:44:b5:20:2c:28:c9:6a:6c:5f:e2:13:
08:4b:48:0d:00:c9:e4:1c:25:73:7d:3a:d9:12:8a:
75:05:da:6e:29:31:a7:af:98:30:8b:34:3d:dd:7f:
ab:9d:72:2b:24:66:03:a9:15:26:5a:0f:0b:5c:81:
69:ae:6c:74:a6:2b:42:14:92:51:4d:25:62:19:41:
d1:07:4d:42:b8:4e:58:5d:75:6e:e5:4b:ff:aa:05:
e0:d4:23:58:f3:8c:32:a6:b5:5e:90:99:ae:3b:1f:
10:5b:63:8d:9a:70:8d:3b:ad:64:5f:ba:1b:8d:33:
f9:fa:4b:f7:3c:b5:7b:82:93:ba:2c:10:80:73:30:
41:e1:5a:d9:63:2c:cb:6d:dc:7d:20:f1:19:7f:37:
f8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BA:63:E9:2C:04:AD:78:14:4E:65:EC:9C:E7:FA:AC:3A:35:8D:A2
X509v3 Authority Key Identifier:
keyid:3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fd:f5:51:bf:6a:c7:68:22:f9:2a:2a:db:01:59:b6:76:ff:
7a:dc:1e:2b:f5:82:49:b2:7b:5a:75:8f:f6:49:a0:40:03:a9:
7c:62:a2:a9:5e:61:ce:8a:df:ef:26:9d:d0:b8:8f:3c:8d:3c:
1b:b8:20:b1:5f:85:40:ac:40:18:01:2e:ea:e6:21:38:7d:15:
54:9e:3b:0a:5f:02:47:9f:17:b2:a6:53:af:d5:0a:93:83:d2:
54:49:de:a9:a4:62:aa:59:7e:7f:f0:4b:bd:ae:c9:47:0d:85:
9e:b8:36:c5:03:73:0c:ad:60:7d:2b:a0:55:d6:8e:30:4f:6d:
e8:1c:9b:e9:74:6a:28:19:8e:92:03:bb:fa:2d:50:b6:26:01:
91:f6:61:dd:80:22:46:94:8c:85:c1:03:b2:01:c9:d8:6b:ea:
02:7a:87:00:79:85:47:2d:5d:cc:3e:43:28:83:3e:f9:63:d2:
19:09:a0:2b:51:76:a4:33:dd:86:d0:47:0b:a4:fe:7d:bc:25:
e7:d8:d3:17:de:c2:cc:06:c3:5d:4e:b3:32:f7:b6:ca:e8:0a:
83:91:9f:d6:e9:f8:45:f9:cb:5a:39:2e:8b:f6:f0:1c:56:45:
31:b4:b5:e7:91:16:37:da:03:a6:3c:41:ba:19:01:37:72:c1:
54:b4:fa:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:12:09 2026 by rpki-client