Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
File: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft (raw, json)
Hash identifier: HO/DvpDD1Sq+jzCUsS3VfC1wUNlYGxerWrSYLUrlKtc=
Subject key identifier: 8D:F9:E4:F7:3C:D5:8A:1C:5E:03:D4:2C:88:55:D6:65:92:5F:74:89
Authority key identifier: 3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
Certificate issuer: /CN=3afb9f43a46f059827a9dec366d1496d66089134
Certificate serial: 01A0C77CBE817D6E4D08EF35CC621E0AB8C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
Manifest number: 029C
Signing time: Tue 22 Sep 2026 05:00:36 +0000
Manifest this update: Tue 22 Sep 2026 05:00:36 +0000
Manifest next update: Wed 23 Sep 2026 05:00:36 +0000
Files and hashes: 1: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl (hash: njnOtjs4edDG+WgK8V8gFlw5gRr9tNqFSXGL3YoKsHk=)
2: QKGqa5eFo_oefy2Fr910iRpsrO4.asa (hash: 2SH0Sp2vvwFpjaphIT/+Ub3omKUkgbjxDQhKCOfnuyg=)
3: eXB07PVnY6Up_99lPUFWjhQLh-0.roa (hash: +mrAOWzB21eb5SMCX4Zqqp/WLs5+1iRRt5G6w5MsOts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:be:81:7d:6e:4d:08:ef:35:cc:62:1e:0a:b8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afb9f43a46f059827a9dec366d1496d66089134
Validity
Not Before: Sep 22 05:00:36 2026 GMT
Not After : Sep 23 05:00:36 2026 GMT
Subject: CN=8df9e4f73cd58a1c5e03d42c8855d665925f7489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:f2:13:88:04:2b:75:11:05:bd:83:77:48:
8f:ac:ad:bb:a4:23:d6:50:4d:9d:d5:e6:03:35:a4:
45:7b:7e:56:d5:39:7d:fa:10:58:f5:c6:d4:63:f6:
90:c4:89:ba:3c:38:82:a1:0b:d5:63:f9:4e:c5:e5:
ea:92:1c:f7:af:a4:ad:d5:80:f8:23:a3:aa:2d:df:
9f:ac:27:82:1c:67:50:44:26:91:b3:58:7c:eb:ae:
6c:a8:b7:d3:06:fe:a4:51:2c:7f:d7:3e:ff:1e:d0:
97:e9:b9:1d:6e:4d:61:5a:4c:22:3c:35:ec:64:4a:
81:d7:c8:df:57:a5:e2:c9:76:e0:52:ca:d9:66:f2:
e6:cb:ad:38:6d:39:f5:ed:2f:9a:74:25:e4:ac:02:
5e:0e:95:57:4b:42:a3:24:79:33:e6:32:53:6f:92:
7a:a3:82:47:27:c7:0d:f6:f7:f2:1c:54:35:87:a4:
9c:64:48:26:36:fc:04:19:63:1b:c9:fa:85:d6:11:
b3:7a:81:5d:22:99:2c:19:f7:2f:64:5e:f2:ed:c4:
35:88:be:87:5f:89:c4:6f:8a:47:e8:63:20:73:27:
1d:9c:cc:19:5f:b9:39:f9:63:49:91:2e:57:d3:4c:
3c:20:31:dd:86:0c:39:b2:ce:1a:08:cb:a5:fc:ff:
86:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F9:E4:F7:3C:D5:8A:1C:5E:03:D4:2C:88:55:D6:65:92:5F:74:89
X509v3 Authority Key Identifier:
keyid:3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:aa:66:4c:ae:0d:d9:be:c1:fe:ce:55:1a:21:2f:a0:b9:7e:
22:49:63:f8:b1:9a:4f:10:7c:f1:39:d1:8b:c0:63:60:05:6b:
b6:bf:c9:95:fd:11:13:94:10:0e:9a:f7:16:71:00:9e:dc:2c:
dc:2e:ba:a8:d4:9d:0e:9f:ce:19:e3:39:24:ff:ac:56:66:70:
57:83:85:1d:41:1f:81:d2:6a:0c:21:0b:41:16:fd:4a:0d:73:
aa:8e:e0:26:08:39:13:71:7a:75:66:90:d8:ae:2b:f4:ca:45:
2f:0c:e1:9b:19:86:73:80:67:df:06:cf:a9:e9:ca:d4:ec:55:
90:e0:3c:10:ea:2d:35:7a:0f:ea:e2:e9:3d:53:62:e0:ec:7c:
e9:79:72:57:3e:ff:c4:40:70:8e:d6:70:ef:65:bf:f9:09:c1:
18:a8:c8:4f:d7:6c:a8:a1:c5:27:ce:ff:a4:b4:16:01:f3:13:
be:2a:d9:ae:59:26:10:d1:21:8b:55:e6:3b:2c:72:d5:9f:27:
9e:ec:07:39:30:1f:ed:1d:51:74:d2:73:65:b2:9f:37:3e:b8:
60:27:c9:15:d8:6c:32:83:8c:10:9a:d3:d7:5e:a7:f2:47:cb:
83:a6:88:4d:06:d6:24:b0:20:3d:3a:b8:ec:de:64:0c:49:48:
72:a2:4e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:11:25 2026 by rpki-client