Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
File: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft (raw, json)
Hash identifier: mti/hdmJLJaZUsdxegzIUivmpxf1a15dTepeDZWFrV0=
Subject key identifier: 3B:DC:74:E3:C4:4A:64:1D:D0:56:F9:18:04:10:54:E3:D6:30:B9:67
Authority key identifier: 3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
Certificate issuer: /CN=3afb9f43a46f059827a9dec366d1496d66089134
Certificate serial: 019FA9ABC33F8AA7477CEFC63FDEC51AAF04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
Manifest number: 0208
Signing time: Tue 28 Jul 2026 17:00:33 +0000
Manifest this update: Tue 28 Jul 2026 17:00:33 +0000
Manifest next update: Wed 29 Jul 2026 17:00:33 +0000
Files and hashes: 1: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl (hash: 0fUJBBn/AKqXTiSNyXTw0hFpBBpDQYDK/2d7AYEJJJQ=)
2: QKGqa5eFo_oefy2Fr910iRpsrO4.asa (hash: 2SH0Sp2vvwFpjaphIT/+Ub3omKUkgbjxDQhKCOfnuyg=)
3: eXB07PVnY6Up_99lPUFWjhQLh-0.roa (hash: +mrAOWzB21eb5SMCX4Zqqp/WLs5+1iRRt5G6w5MsOts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:c3:3f:8a:a7:47:7c:ef:c6:3f:de:c5:1a:af:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afb9f43a46f059827a9dec366d1496d66089134
Validity
Not Before: Jul 28 17:00:33 2026 GMT
Not After : Jul 29 17:00:33 2026 GMT
Subject: CN=3bdc74e3c44a641dd056f918041054e3d630b967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c9:fa:bc:ee:66:ef:1c:24:92:5c:9e:4c:55:
ee:40:bc:b1:76:e8:f7:d1:8b:69:02:27:a2:40:0b:
4b:91:40:9c:a9:1e:ec:bb:60:d5:5f:27:5a:2b:03:
bb:9f:2f:68:ec:f3:1d:bb:e3:d8:1f:98:7c:5c:cf:
25:20:98:de:dd:0c:b0:c8:de:3c:c6:8a:93:d1:57:
e2:60:c5:56:80:b1:c6:ff:82:d9:0b:62:16:71:d4:
53:f9:40:8b:e8:1f:bf:54:0e:25:c1:8a:df:71:47:
89:01:60:ca:6a:c3:e0:2b:45:b1:1d:09:05:8f:16:
d6:88:06:d8:97:0c:86:48:96:51:dc:a8:b9:f9:4a:
bb:f1:ad:8c:f1:2b:43:f9:f1:27:4e:70:ea:49:59:
a7:1f:c2:fe:c6:1b:a3:52:79:dd:d4:32:71:8d:73:
85:58:62:d7:78:b8:db:fe:c6:e5:28:ed:ec:20:97:
9a:8e:4e:e3:88:1c:81:ce:c3:24:aa:18:7a:5c:d9:
70:fe:5a:53:21:0c:2f:7b:98:bf:57:3a:ba:d5:a8:
3c:9b:85:f7:08:5e:21:ad:32:db:2a:5f:57:54:de:
bd:fd:63:43:fa:ec:a6:37:5e:b2:f6:79:52:c3:88:
69:c5:6c:5d:34:c2:c0:23:75:54:b6:4e:55:e6:fe:
c8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DC:74:E3:C4:4A:64:1D:D0:56:F9:18:04:10:54:E3:D6:30:B9:67
X509v3 Authority Key Identifier:
keyid:3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d3:09:a2:25:41:af:47:1f:c8:ab:59:00:cf:7d:c7:0c:83:
97:0e:ce:2b:9d:c3:3f:96:94:06:99:d4:9b:ec:c7:ec:99:10:
cc:e9:99:43:8f:48:67:b8:d9:ea:e6:49:f5:bf:89:78:d8:66:
02:52:98:bd:99:e9:40:aa:e2:30:9d:dd:53:69:f7:98:0e:f6:
54:53:7f:f1:ea:96:70:30:5f:3b:79:d5:17:3c:5a:15:3b:38:
54:cb:c8:b8:29:a9:8e:4f:ff:48:05:50:e5:17:c8:73:a5:f9:
0d:e1:75:73:78:a3:d7:a6:d8:9c:96:5b:33:21:cd:6c:cd:01:
bd:b9:4a:8e:f0:4d:e4:ac:4c:6c:76:89:ca:e4:2d:ab:8c:b8:
10:d6:25:db:f0:fa:b0:db:80:8c:5d:79:2a:a4:78:d9:3d:14:
91:13:96:b0:c5:f0:0c:b1:38:db:9c:23:07:05:0c:84:56:40:
7b:60:da:24:8c:cc:8c:82:b0:18:60:12:1f:a1:93:ba:76:ff:
f5:4c:ab:10:ef:1b:79:4a:2a:87:2b:63:41:a3:12:d1:4a:f5:
38:d1:64:1c:bb:20:ef:d9:8d:49:75:78:bc:19:22:6c:d8:92:
de:b8:02:1b:eb:53:00:0e:2c:62:50:df:85:60:9b:39:69:17:
fe:29:93:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:39:55 2026 by rpki-client