Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
File: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft (raw, json)
Hash identifier: ElpE+DAO9LdT/zVIOfr0oSlt9oCIHIii5aQl5tlLdHM=
Subject key identifier: 17:0E:8F:33:F2:86:C3:80:F9:57:2E:74:9A:45:6C:11:8C:A0:E1:8B
Authority key identifier: 3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
Certificate issuer: /CN=3afb9f43a46f059827a9dec366d1496d66089134
Certificate serial: 019EBF5AFB532C471E7145C96AF18FE4FC98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
Manifest number: 018E
Signing time: Sat 13 Jun 2026 05:01:11 +0000
Manifest this update: Sat 13 Jun 2026 05:01:11 +0000
Manifest next update: Sun 14 Jun 2026 05:01:11 +0000
Files and hashes: 1: 6tfL7A5QJDSI_Y55TqUNwh3A628.asa (hash: 0PnmZojaOL/sDpXqZikBUmwmF7Qen3eJCXfg4rlV4OA=)
2: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl (hash: tMOLdVtJKp3JWyAXDsgSS61ZoFPLiS4jyrf8y90xywY=)
3: eXB07PVnY6Up_99lPUFWjhQLh-0.roa (hash: +mrAOWzB21eb5SMCX4Zqqp/WLs5+1iRRt5G6w5MsOts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:fb:53:2c:47:1e:71:45:c9:6a:f1:8f:e4:fc:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afb9f43a46f059827a9dec366d1496d66089134
Validity
Not Before: Jun 13 05:01:11 2026 GMT
Not After : Jun 14 05:01:11 2026 GMT
Subject: CN=170e8f33f286c380f9572e749a456c118ca0e18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:58:65:7f:46:d8:e6:ea:cb:e0:b0:4c:03:
9d:fe:89:38:59:fe:34:b5:96:1f:1d:d3:93:f7:59:
3b:55:e9:90:4c:83:59:9e:6d:00:87:27:20:01:00:
37:cf:2a:b9:31:34:55:39:4b:2a:75:bc:d3:8f:e9:
92:79:d1:24:60:2a:76:84:06:a0:95:1c:be:8f:2c:
2a:7a:1a:fe:71:35:10:18:25:0a:64:04:74:e4:5a:
f7:e4:19:03:57:f3:4c:fd:0c:9a:42:ec:37:4e:1e:
73:ad:47:c5:e3:cc:4c:a7:c5:1a:07:e6:ed:e7:85:
9e:c8:b3:21:25:ba:cd:98:5d:69:50:27:49:ef:38:
04:d8:b7:07:64:5a:8e:00:6b:ee:95:c2:47:a5:0c:
19:1b:21:91:c9:49:79:ca:c5:39:12:82:ad:da:6d:
b9:97:a4:8b:6f:b7:a1:9d:1f:1f:75:61:58:0e:61:
a3:ee:31:70:c0:70:03:21:62:16:17:9f:79:e0:d6:
46:40:e1:73:1c:06:a9:fc:56:08:5f:00:e6:41:88:
05:cd:bb:c7:ec:ca:8c:e0:e6:6e:e7:ef:09:64:3b:
f0:1a:11:5e:6f:ab:a8:99:43:1b:74:01:0f:a4:ea:
00:d1:17:57:db:c4:7d:93:ee:f6:32:2a:c7:88:39:
c2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0E:8F:33:F2:86:C3:80:F9:57:2E:74:9A:45:6C:11:8C:A0:E1:8B
X509v3 Authority Key Identifier:
keyid:3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2f:2d:75:3c:6c:41:5d:2a:23:8d:ca:f7:4e:14:6e:bc:df:
a3:3a:42:fc:5d:bc:9d:51:f4:c7:4a:ae:c8:5f:1c:43:c4:6c:
a6:1d:1c:e4:23:df:dd:65:12:19:bc:27:5c:28:50:0f:bc:47:
9b:4e:25:23:ce:3f:67:1a:e5:dd:49:0e:5a:64:d2:c5:35:c4:
d7:58:42:36:82:61:f5:f9:ef:42:32:3a:9f:4e:50:d9:1d:41:
30:86:09:22:68:9a:6e:a9:a9:ea:5c:84:34:8a:76:43:7f:f2:
65:6a:42:72:c9:7c:a9:a3:2c:66:1a:8b:6f:59:23:e2:c5:38:
7e:c1:c4:a9:32:3f:b1:19:80:c7:c6:fa:2c:a8:8b:9a:74:e7:
e4:3d:64:2c:24:ef:ec:a3:cd:25:b4:d9:48:01:ad:a5:42:73:
cf:71:ef:df:e4:9e:d6:a6:dd:44:ef:db:0f:51:e4:59:1c:b5:
3a:cb:99:70:c4:2c:fb:a8:cf:0a:54:cd:6e:55:eb:1b:27:86:
3d:97:d5:d5:70:64:aa:ed:cb:05:89:0e:65:be:58:28:cc:fb:
36:e5:a0:07:da:4a:a2:3d:a1:a4:02:44:e2:11:f7:79:c5:7d:
de:09:ae:dc:1c:dd:43:aa:9f:86:3e:e1:f0:77:ba:6b:45:12:
f2:11:c8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:34:15 2026 by rpki-client