Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
File: OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json)
Hash identifier: j9TRcelqXii6g03iXShZM2oPcB/gYmzVoozNb1o9Qpk=
Subject key identifier: 62:A5:BD:94:D9:61:E2:09:1B:57:24:B2:2E:E3:1D:5D:B7:7B:A7:76
Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Certificate serial: 019F86B2780088EE34052A33B67E1D3F484E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
Manifest number: 1654
Signing time: Tue 21 Jul 2026 22:01:10 +0000
Manifest this update: Tue 21 Jul 2026 22:01:10 +0000
Manifest next update: Wed 22 Jul 2026 22:01:10 +0000
Files and hashes: 1: 5HgfHalD9LWYJGG7XKJSoxARVl0.roa (hash: swKgBTrDTDtZaOuFjLNTyyxaRwCSohp8AB3ouBvQWOI=)
2: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: LTFv6p7ooEZ3SCNukTXYB3E10ghS9gmUA3B74YPozsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:b2:78:00:88:ee:34:05:2a:33:b6:7e:1d:3f:48:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Validity
Not Before: Jul 21 22:01:10 2026 GMT
Not After : Jul 22 22:01:10 2026 GMT
Subject: CN=62a5bd94d961e2091b5724b22ee31d5db77ba776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ee:ec:6f:c1:64:73:b0:a8:09:37:95:f5:e5:
d8:15:ef:fc:03:03:d1:95:10:bd:ff:df:ff:a6:c9:
d0:99:7d:a3:ba:f9:7b:c1:a6:0c:f6:ed:e0:91:39:
ba:3a:3c:16:67:fd:c4:32:0e:f5:88:ee:42:33:44:
b3:f0:6c:74:0b:35:d3:44:a9:8f:7c:63:9d:0d:50:
e3:cb:1b:3a:5d:de:71:4c:c8:16:be:e0:2e:07:12:
b4:ea:b3:38:69:d8:81:9e:02:36:7a:fe:ea:ad:19:
ff:3b:d5:f8:3d:e9:fb:88:2c:30:a7:3e:7b:90:80:
37:df:bc:f2:8b:c8:c3:24:7a:6d:3e:52:50:22:9c:
2c:8e:3d:ad:04:50:03:ba:d2:e1:74:cd:e1:0d:3f:
26:cd:b6:0b:59:ee:52:9b:36:69:25:bc:b7:53:03:
a5:2d:b8:16:c9:69:0f:46:21:23:a4:f4:a7:f3:04:
1c:cd:05:de:dd:96:2b:8c:7a:5c:8c:ec:a9:db:dd:
1f:ac:f3:df:6f:7b:c4:b7:13:07:e3:e9:22:b2:aa:
7c:2d:a6:7d:b8:ae:a1:d3:e0:a0:cd:11:aa:f1:be:
27:81:97:7a:07:87:a9:d5:5d:87:1f:21:b6:11:65:
51:ce:0d:40:bf:27:5f:48:5b:32:1c:3c:bc:e6:fb:
b2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A5:BD:94:D9:61:E2:09:1B:57:24:B2:2E:E3:1D:5D:B7:7B:A7:76
X509v3 Authority Key Identifier:
keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:7b:ab:62:b2:01:61:57:74:74:b9:12:1a:44:46:c9:e5:87:
50:c5:53:f2:85:35:04:87:d2:fb:48:68:32:ae:12:33:46:5d:
a0:e7:d0:be:45:07:9c:fb:da:2a:d3:9f:9e:a6:aa:d3:2c:77:
86:50:6f:e8:ab:7f:c7:0c:a6:bd:bf:91:3a:9d:9e:be:f9:eb:
d4:42:40:0c:dc:12:f5:e0:ab:43:74:9f:d5:e2:da:c0:ca:67:
41:72:01:12:21:1a:e2:9c:0e:3a:48:58:54:f6:6f:a6:d2:f4:
db:46:ce:ab:24:7c:27:a1:49:bf:8f:f0:63:d9:13:da:68:4a:
7e:fd:00:9e:00:43:ba:35:cc:f8:43:19:ab:99:78:57:e2:eb:
7c:45:b9:2a:8d:65:19:57:f3:6c:c9:dd:ee:e3:82:fc:9f:36:
16:56:76:a0:f3:e8:89:30:6c:be:75:e2:44:81:41:cd:20:20:
72:be:c1:92:56:2b:ca:36:c8:0a:ba:7b:db:10:98:13:61:6e:
e5:57:da:ef:5d:02:f0:21:1b:f0:b5:21:7a:35:3c:27:a5:e6:
dc:70:31:db:ef:31:8c:14:0d:b7:47:de:2b:23:27:f1:f0:62:
7c:af:8b:da:32:f9:f4:55:2b:76:ca:4a:56:fa:4b:d5:8b:c5:
0d:ce:ac:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:23:49 2026 by rpki-client