Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
File: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json)
Hash identifier: HsZaK5Srd9GugnJNyPPc658Fp3DQl8+1R+Ul4CqQfQs=
Subject key identifier: 9D:E3:EE:DA:51:53:2A:EF:FB:24:26:00:4A:51:A0:2E:2B:E1:C6:A7
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Certificate issuer: /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial: 01A0CCA3B1A935309BC3C70FC7A73BA488A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
Manifest number: 0FC3
Signing time: Wed 23 Sep 2026 05:01:14 +0000
Manifest this update: Wed 23 Sep 2026 05:01:14 +0000
Manifest next update: Thu 24 Sep 2026 05:01:14 +0000
Files and hashes: 1: fs8d2893qiZikthsq_-JlA6ljMA.roa (hash: ZrsMMWfWT5ZYVuIhEglHV6ViI9TadV+uTXWR+dIXLo4=)
2: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: qqEjkYLgsHbig4tNSN4/vJA+fmV13x7Po0S/qM8BZWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:b1:a9:35:30:9b:c3:c7:0f:c7:a7:3b:a4:88:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Validity
Not Before: Sep 23 05:01:14 2026 GMT
Not After : Sep 24 05:01:14 2026 GMT
Subject: CN=9de3eeda51532aeffb2426004a51a02e2be1c6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:32:8a:1d:c8:34:21:bc:9b:30:6e:27:de:
df:23:ab:82:3e:91:e3:e9:b8:18:89:ff:ed:a9:12:
92:7d:6d:b1:07:85:51:23:d1:2c:b4:a0:0e:ab:74:
ef:d1:bd:43:44:6c:c1:36:ea:e7:b6:0a:6b:78:34:
25:02:4d:30:45:36:87:76:58:1c:5b:78:a9:90:9e:
1b:83:ff:4e:66:4b:7c:37:a7:0a:20:fa:e4:b9:21:
5d:90:cd:7b:6f:f9:80:b9:ab:fd:47:6f:f8:d3:fa:
4b:0f:67:61:98:7f:59:71:29:cd:0e:75:68:fe:d3:
0a:54:5a:2c:32:97:0d:69:bd:fa:7f:f3:6f:99:aa:
0d:a1:c9:e3:1c:2a:30:08:4a:17:7c:ca:e0:9e:9e:
37:be:c2:a5:1e:50:a5:8e:94:82:28:7f:ab:f2:2b:
0e:a2:7d:db:b1:be:f6:46:ae:31:08:2a:d5:e8:2b:
43:d0:09:90:56:e1:f1:44:1e:16:cd:3c:fa:9c:fc:
3c:bc:fe:93:2c:6c:d7:34:b6:8c:fd:0c:1b:c1:89:
a9:40:e0:4f:be:d1:7c:f2:d4:3e:cc:75:5c:17:f2:
86:7a:a1:ed:1a:cc:8b:3a:ac:0e:75:75:3c:7b:8d:
f2:6c:2f:15:6f:61:7a:f9:c0:2b:2f:4f:c4:95:62:
47:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E3:EE:DA:51:53:2A:EF:FB:24:26:00:4A:51:A0:2E:2B:E1:C6:A7
X509v3 Authority Key Identifier:
keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:17:28:80:76:4a:79:d2:42:82:b1:9c:fd:cc:d8:18:b3:3d:
2c:79:3d:43:e0:fc:22:3a:1f:1d:54:0f:96:19:06:66:27:d5:
56:cd:d9:9a:91:c9:70:e3:95:1c:88:57:92:77:d9:fb:7c:9a:
95:51:77:1f:5c:57:58:8b:70:fd:0b:07:55:6e:c3:d3:0f:77:
f6:0d:4b:9d:b4:af:17:5a:83:18:dd:86:81:e4:4f:e6:18:2c:
57:b9:34:8a:8b:d5:a1:a9:09:83:b7:0e:c8:1c:53:1e:c8:25:
39:05:38:41:09:47:3d:ed:b6:9c:ec:61:90:4e:17:bb:97:84:
67:fe:6a:8d:b4:36:57:f9:46:c1:59:96:82:b8:15:5d:15:de:
2c:13:c5:50:77:6a:2b:d9:05:aa:be:1f:78:42:b1:d9:d1:7e:
5a:4b:ce:75:08:c3:11:3c:bd:00:26:fe:3b:54:50:77:dc:d7:
f9:88:5c:45:ee:3b:f9:bd:4a:d2:a7:99:ea:e2:3b:6d:21:6a:
21:ca:32:c8:13:5c:cb:4c:74:08:8e:19:50:7a:c2:08:c7:3b:
33:86:ff:92:e4:85:62:78:6b:19:94:2f:09:2e:dc:9c:ca:81:
17:43:13:5d:fa:11:52:8c:50:c5:e5:df:5e:6d:a6:a0:45:38:
97:9f:35:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:25:29 2026 by rpki-client