Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
File: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json)
Hash identifier: IHl4BN4elDoiwJGxcfyUOI0Af6RDSVqbL9Bc0WBXx+A=
Subject key identifier: 0A:15:85:0A:14:8D:1E:B8:F8:9F:B3:96:EF:68:AA:AE:DF:40:AF:3A
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Certificate issuer: /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial: 019CAC46F97A66BC1202EF9274BF51A258A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
Manifest number: 0DA0
Signing time: Mon 02 Mar 2026 02:00:58 +0000
Manifest this update: Mon 02 Mar 2026 02:00:58 +0000
Manifest next update: Tue 03 Mar 2026 02:00:58 +0000
Files and hashes: 1: fs8d2893qiZikthsq_-JlA6ljMA.roa (hash: ZrsMMWfWT5ZYVuIhEglHV6ViI9TadV+uTXWR+dIXLo4=)
2: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: N8XcD/a+SoOocFchPf1x8Wa99Rly7zSxncn+2KjUWwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:f9:7a:66:bc:12:02:ef:92:74:bf:51:a2:58:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Validity
Not Before: Mar 2 02:00:58 2026 GMT
Not After : Mar 3 02:00:58 2026 GMT
Subject: CN=0a15850a148d1eb8f89fb396ef68aaaedf40af3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:88:0c:aa:ae:55:68:d2:77:b6:bf:54:49:
7a:7c:54:2b:b7:dc:17:e4:72:67:c7:32:2c:e1:3d:
8a:89:05:51:0b:51:06:d8:e2:b9:7a:fb:56:59:9c:
8b:7b:80:5c:d2:38:02:ea:6e:08:ad:32:27:1f:4f:
44:7e:0b:46:2c:65:10:e2:a3:5a:d8:ad:77:d2:19:
78:eb:7c:b9:24:40:be:af:3f:39:2a:81:8e:1c:b7:
93:60:bb:e6:c8:5b:4d:45:c4:19:b1:78:57:7b:40:
f1:7f:e8:c0:66:e4:14:c8:34:51:37:29:6e:9a:32:
bd:a6:84:ac:7c:38:ee:07:d8:4a:7a:7e:9d:30:45:
1c:c5:6f:26:53:d9:f3:cd:dd:24:32:22:14:19:20:
f5:e4:2a:3d:2a:50:8f:62:9f:f6:75:ab:99:30:2f:
7a:c7:56:a6:ea:af:55:9f:7e:87:a6:76:1d:00:c1:
7c:ff:8f:7c:ff:7b:6e:57:0d:9b:f5:5a:6f:1f:48:
00:f5:51:1d:77:88:31:d6:bb:7b:d8:fa:65:e7:32:
63:d6:84:fc:a8:e3:67:06:a9:ca:6d:43:05:02:70:
01:d4:e9:23:98:81:9c:e6:57:53:ae:dc:cd:65:60:
9b:42:3d:f5:ed:20:bc:b7:0d:1d:19:7f:0d:b6:05:
6a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:15:85:0A:14:8D:1E:B8:F8:9F:B3:96:EF:68:AA:AE:DF:40:AF:3A
X509v3 Authority Key Identifier:
keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a2:2e:87:46:65:74:67:94:c0:80:f0:fc:5d:6d:32:92:85:
bb:e9:6c:d7:4d:f2:c6:11:af:10:af:1c:8b:54:66:5b:09:26:
cd:af:d3:4c:cf:63:a1:17:34:0c:d4:8e:5e:4f:dd:7f:d0:41:
6d:06:3f:32:76:47:ae:33:7e:81:93:01:13:68:11:2f:e1:7b:
4f:d1:ac:49:26:86:26:c2:0e:bc:45:f3:33:44:9a:7a:be:89:
97:a5:f1:77:0d:b4:91:12:b9:70:61:00:fa:47:1d:9b:bd:f0:
2a:53:50:91:08:97:f0:cb:74:24:1c:de:0e:5f:d5:94:64:df:
04:d8:bc:60:8b:7c:35:44:f1:42:32:a9:9b:73:a5:e3:5c:07:
d5:30:f7:8a:37:b3:47:19:aa:68:05:66:fa:0e:b5:c8:66:34:
1d:ec:6a:35:06:e5:63:bc:5b:61:2b:77:27:c2:a8:8b:53:a6:
33:91:de:8f:f5:74:29:14:c2:3c:bc:39:a8:d5:11:30:e9:c9:
ae:37:c3:83:75:ea:b1:30:a8:77:8b:0b:62:2f:05:c5:a0:f4:
d3:30:0f:7e:44:8e:82:cb:be:9e:69:14:4a:4c:3f:89:ec:ae:
c2:24:b7:22:e3:54:50:ab:b8:e0:50:12:39:66:4e:b5:2d:9e:
4c:2d:cc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:48 2026 by rpki-client