Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
File: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft (raw, json)
Hash identifier: AL6li7UyHUELX65WXIiUMTKzUrFpMcaGCT52JwFr82o=
Subject key identifier: 24:B5:62:16:90:C8:AF:A5:4F:71:A2:24:76:2A:A6:DD:FC:56:FC:20
Authority key identifier: 3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D
Certificate issuer: /CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
Certificate serial: 019D9A3DE690BE938CD371B3AA204B7FF157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
Manifest number: 146A
Signing time: Fri 17 Apr 2026 07:00:41 +0000
Manifest this update: Fri 17 Apr 2026 07:00:41 +0000
Manifest next update: Sat 18 Apr 2026 07:00:41 +0000
Files and hashes: 1: Bo58gylRbQlTZmOuABRX3XagLXc.roa (hash: aJoWe70kAi++zILuYJYv5N6he0X6TdzYHN+WF4rakhQ=)
2: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl (hash: ZR1zv2SfrUzn3LK9EnGlr+YkH3V+q9k1jKydOIIw8y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e6:90:be:93:8c:d3:71:b3:aa:20:4b:7f:f1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
Validity
Not Before: Apr 17 07:00:41 2026 GMT
Not After : Apr 18 07:00:41 2026 GMT
Subject: CN=24b5621690c8afa54f71a224762aa6ddfc56fc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:23:e9:8a:a9:aa:cf:99:ff:f3:09:32:89:17:
49:32:66:4b:6a:1d:6e:8a:54:f0:f8:a0:aa:4f:15:
58:16:22:92:1b:ee:46:30:42:e8:9d:6a:79:93:40:
97:80:62:bb:53:7d:78:22:54:f2:25:a6:14:fc:42:
bb:5b:ba:ae:40:4f:32:7f:0c:33:47:50:6e:03:99:
a0:1a:8c:d1:9e:6c:76:a1:ff:b2:18:cc:70:d0:4a:
d3:67:48:af:59:fc:15:48:69:19:08:8d:21:ee:ae:
df:cc:d1:52:83:ac:10:25:19:d0:66:96:5d:5f:ba:
39:9f:c9:d8:a6:20:6e:15:27:04:0a:0d:6d:88:8c:
93:cf:d4:5b:90:58:ec:76:5d:ee:c7:17:88:0f:7b:
2b:30:ff:0a:87:32:1d:56:fd:6d:bf:8f:96:b2:9f:
56:92:13:13:ae:b3:ec:7b:09:d7:6d:92:cd:77:a2:
cf:a0:af:53:fa:f8:76:61:22:15:27:71:e6:9e:0f:
39:77:9f:f8:2c:18:24:4a:bb:7b:43:b9:17:23:61:
03:e6:77:33:cd:2f:af:f0:ad:ee:f6:6c:05:8e:93:
b3:a8:a4:51:12:2b:2c:f5:93:8d:2b:a8:f9:8a:97:
58:cd:88:fc:84:4d:49:1e:92:5b:af:34:0a:b5:03:
dd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B5:62:16:90:C8:AF:A5:4F:71:A2:24:76:2A:A6:DD:FC:56:FC:20
X509v3 Authority Key Identifier:
keyid:3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:59:79:20:e0:fc:be:a9:15:a8:b4:28:38:40:6d:c8:6c:4d:
5d:cf:28:87:61:88:5e:9b:0d:78:c4:6f:a4:ca:99:f5:dc:d8:
3f:bf:49:4a:70:62:2a:33:f8:8c:09:ce:08:39:d0:69:e8:4c:
e9:d1:91:87:a2:76:de:96:bb:05:81:0e:f7:a1:92:5c:82:fe:
83:46:5e:b0:bb:02:d6:dc:a2:f3:2e:7f:00:d8:cb:a2:99:9c:
d0:24:3f:2b:ae:49:cb:2a:64:91:b2:9e:51:cb:40:e2:4a:59:
de:5b:4e:10:ed:28:0a:5a:28:32:7e:e5:2f:53:60:5c:5e:06:
31:d3:4e:2b:ac:c8:fe:9e:14:7d:9d:39:96:84:01:66:4d:5d:
bb:05:84:f1:69:8e:d7:97:b0:81:6b:f2:f1:24:d5:cf:0d:34:
74:61:38:59:ae:47:fc:8a:5a:d9:dc:ba:70:f2:2d:cb:99:85:
21:36:b3:85:e9:7a:77:c2:18:ea:32:d8:48:d3:ce:61:58:9e:
a4:18:a7:42:cf:20:d3:14:b6:58:15:e0:de:e9:94:04:74:5b:
37:af:c8:28:4d:7b:32:fa:22:67:bd:7a:ce:53:a6:63:2a:c0:
a8:12:46:65:7d:dd:41:60:18:f1:1b:3c:e9:b2:82:45:51:76:
55:c5:7c:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPeaQvpOM03GzqiBLf/FXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjllYThiZGMzNzFiNWE2NjA0MjAwYzUxNzE3ODk3ZDYw
YzdkM2QwHhcNMjYwNDE3MDcwMDQxWhcNMjYwNDE4MDcwMDQxWjAzMTEwLwYDVQQD
EygyNGI1NjIxNjkwYzhhZmE1NGY3MWEyMjQ3NjJhYTZkZGZjNTZmYzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCPpiqmqz5n/8wkyiRdJMmZLah1u
ilTw+KCqTxVYFiKSG+5GMELonWp5k0CXgGK7U314IlTyJaYU/EK7W7quQE8yfwwz
R1BuA5mgGozRnmx2of+yGMxw0ErTZ0ivWfwVSGkZCI0h7q7fzNFSg6wQJRnQZpZd
X7o5n8nYpiBuFScECg1tiIyTz9RbkFjsdl3uxxeID3srMP8KhzIdVv1tv4+Wsp9W
khMTrrPsewnXbZLNd6LPoK9T+vh2YSIVJ3Hmng85d5/4LBgkSrt7Q7kXI2ED5ncz
zS+v8K3u9mwFjpOzqKRREiss9ZONK6j5ipdYzYj8hE1JHpJbrzQKtQPdLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCS1YhaQyK+lT3GiJHYqpt38VvwgMB8GA1UdIwQY
MBaAFDr56ovcNxtaZgQgDFFxeJfWDH09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZucWk5dzNHMXBtQkNBTVVYRjRsOVlNZlQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MmM2ZmItMDkzMS00NDJjLWFiZTUt
YWE4OTgxMzg5OTRjLzEvT3ZucWk5dzNHMXBtQkNBTVVYRjRsOVlNZlQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi84MmM2ZmItMDkzMS00NDJjLWFiZTUtYWE4OTgxMzg5OTRj
LzEvT3ZucWk5dzNHMXBtQkNBTVVYRjRsOVlNZlQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFl5IOD8
vqkVqLQoOEBtyGxNXc8oh2GIXpsNeMRvpMqZ9dzYP79JSnBiKjP4jAnOCDnQaehM
6dGRh6J23pa7BYEO96GSXIL+g0ZesLsC1tyi8y5/ANjLopmc0CQ/K65JyypkkbKe
UctA4kpZ3ltOEO0oClooMn7lL1NgXF4GMdNOK6zI/p4UfZ05loQBZk1duwWE8WmO
15ewgWvy8STVzw00dGE4Wa5H/Ipa2dy6cPIty5mFITazhel6d8IY6jLYSNPOYVie
pBinQs8g0xS2WBXg3umUBHRbN6/IKE17MvoiZ716zlOmYyrAqBJGZX3dQWAY8Rs8
6bKCRVF2VcV80g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:17:08 2026 by rpki-client