Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
File: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft (raw, json)
Hash identifier: Kuas09jYJ95GCupG+ioElGKD+kvzbJ6wGyuh9dcxZF4=
Subject key identifier: F6:81:DB:16:30:63:EF:06:D6:37:07:32:0F:04:49:A3:98:85:38:FF
Authority key identifier: 3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D
Certificate issuer: /CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
Certificate serial: 019CACB53D07E05B41CA41B64CA609069D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
Manifest number: 13EF
Signing time: Mon 02 Mar 2026 04:01:24 +0000
Manifest this update: Mon 02 Mar 2026 04:01:24 +0000
Manifest next update: Tue 03 Mar 2026 04:01:24 +0000
Files and hashes: 1: Bo58gylRbQlTZmOuABRX3XagLXc.roa (hash: aJoWe70kAi++zILuYJYv5N6he0X6TdzYHN+WF4rakhQ=)
2: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl (hash: TG7yW1jxJn+/f6DuwwzAPyEwMfb24q6D+ToZQDNsaik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:3d:07:e0:5b:41:ca:41:b6:4c:a6:09:06:9d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
Validity
Not Before: Mar 2 04:01:24 2026 GMT
Not After : Mar 3 04:01:24 2026 GMT
Subject: CN=f681db163063ef06d63707320f0449a3988538ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:91:6e:6d:1a:0f:0f:63:76:a9:32:e5:68:30:
29:16:66:7c:a0:8e:ed:95:49:71:0d:58:9e:4c:57:
4d:b1:00:8d:38:6d:f5:99:a3:bd:34:fa:cb:6e:b7:
81:e2:be:98:32:3f:45:0f:d4:46:74:77:b0:c6:49:
d3:81:06:aa:2a:27:f7:32:f9:d4:58:5e:4e:eb:42:
ce:a9:f6:cf:bb:66:0a:87:b7:80:17:7d:c2:ac:7c:
ef:1f:a6:b3:03:bb:33:b4:e1:13:fe:b1:6f:a8:a6:
72:63:de:16:ff:56:81:0f:73:62:5c:d2:49:a0:b0:
c1:23:16:09:97:db:5b:eb:34:fe:81:61:97:97:0d:
32:03:9d:60:44:e9:68:49:6c:92:0f:7b:5f:3d:10:
8d:79:7f:08:29:2f:ec:3c:d4:df:89:bf:3e:10:a8:
3e:f5:9a:50:8f:ef:e0:37:06:96:17:60:a7:d4:7e:
b6:5c:32:77:9f:69:66:0b:c4:31:81:ff:21:bc:3c:
b2:96:ed:23:56:3d:7f:bb:6a:3a:b3:b0:b2:2a:c0:
74:38:49:42:d0:10:7e:68:b3:a4:b0:27:20:bd:d8:
89:1c:2f:29:af:4b:8f:60:3a:42:47:89:6f:89:04:
03:78:07:ba:2b:cd:75:a2:ca:23:59:3c:4e:c9:ec:
df:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:81:DB:16:30:63:EF:06:D6:37:07:32:0F:04:49:A3:98:85:38:FF
X509v3 Authority Key Identifier:
keyid:3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a2:9b:f5:34:dc:0d:bd:50:71:40:8e:33:49:9a:4f:56:15:
c5:b5:8e:e8:4b:4f:7e:01:03:bf:0f:73:92:e5:d6:10:04:66:
ee:97:f1:e7:58:0b:b5:fe:8b:51:e8:8d:d0:ce:4a:f5:b5:2c:
64:1d:d6:28:13:64:1b:b1:91:e7:da:e1:73:cb:1c:d5:71:8d:
7b:dc:42:a6:45:85:4f:1a:be:43:23:cf:72:6c:35:3a:89:38:
7e:43:85:8c:0d:57:16:e7:9c:f6:e9:3e:a6:6b:c1:63:d1:ff:
e1:59:b4:90:15:6c:84:9f:2a:fc:69:7c:65:d4:a8:55:e0:39:
6e:e7:27:86:c7:10:b8:35:e0:8d:d1:4e:05:24:25:b9:57:97:
8c:af:52:86:af:65:36:a6:a2:f7:2e:97:a0:f3:70:46:cf:99:
08:86:f2:32:b8:83:c5:bd:1b:99:c3:33:bf:ef:98:8f:45:27:
45:10:ea:a9:1c:b0:3e:06:22:14:49:a3:24:33:b9:c2:69:be:
00:aa:1f:5b:fd:f7:5e:9b:da:84:02:6b:3b:b0:92:98:4f:c1:
42:16:5b:ed:21:50:7e:f6:c3:5e:c6:02:d4:4b:42:2b:97:f4:
d7:d5:6a:28:d8:d2:75:9f:4c:55:5a:62:44:6c:38:1f:6e:8c:
ab:9e:3a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:21:00 2026 by rpki-client