Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
File: OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft (raw, json)
Hash identifier: 98ODvUXjE+9zhKL2jKlWuptEjfaX1727RlJzvHsW8Qk=
Subject key identifier: EB:61:5B:62:E9:8B:6D:47:9C:69:42:23:75:FB:22:DC:DA:1F:D6:B5
Authority key identifier: 3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A
Certificate issuer: /CN=3af1507fda4e704828c7e03caf626456aafc5b1a
Certificate serial: 019D38D397145ADD238FC3D907EB0B296E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
Manifest number: 17BB
Signing time: Sun 29 Mar 2026 09:01:23 +0000
Manifest this update: Sun 29 Mar 2026 09:01:23 +0000
Manifest next update: Mon 30 Mar 2026 09:01:23 +0000
Files and hashes: 1: JarLaEzkDzbmZJJ38af3qQLqeXM.roa (hash: PZ9i3KgsocU0Ak3wOk/fU4TiIXG7bFd+0z1g3xOW5fo=)
2: OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl (hash: fKp5nXdNtTfhA8GwdVOZUVgR6mm5L3Gn+WnAdGqecs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:97:14:5a:dd:23:8f:c3:d9:07:eb:0b:29:6e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af1507fda4e704828c7e03caf626456aafc5b1a
Validity
Not Before: Mar 29 09:01:23 2026 GMT
Not After : Mar 30 09:01:23 2026 GMT
Subject: CN=eb615b62e98b6d479c69422375fb22dcda1fd6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d4:20:12:b1:c7:fa:51:32:c9:e0:4a:fa:30:
3a:11:1d:f5:1c:b6:9a:8a:6c:b8:a9:2f:7b:ba:6e:
d6:f5:d5:c9:e7:73:28:f3:b7:f3:a6:fe:85:ef:f9:
ef:db:37:fa:df:33:9d:ff:41:84:1c:39:80:c8:d0:
a6:40:57:0d:25:ee:c7:67:40:b0:18:22:83:98:6b:
c2:80:00:7e:1e:d7:75:43:df:4a:b1:4b:d4:d5:6b:
41:1f:1d:04:29:25:e1:3d:cf:bd:a3:aa:ad:7f:ff:
cb:60:0c:b7:d8:b2:2e:3c:ff:98:45:6f:a8:a8:df:
b2:97:8f:db:e8:26:a8:7c:5c:69:54:de:bf:78:e9:
28:66:19:95:d8:3f:c1:75:89:71:2c:2b:85:ce:84:
e9:a1:55:e9:57:00:b2:9f:5f:00:62:e1:74:47:57:
1b:3e:d2:fb:07:bd:aa:84:c3:eb:bc:83:24:8f:09:
c1:fc:04:11:84:96:b3:d6:3a:70:34:3d:fa:7f:95:
fc:d5:f5:80:ab:44:37:12:a6:6f:0d:87:d0:4f:f4:
c1:9d:50:86:7e:98:3a:ec:ba:de:08:bf:b6:b5:ff:
91:9b:63:c4:e1:12:6f:b8:39:e0:47:2a:4b:9a:e9:
f2:78:23:5e:c7:26:2f:ad:fc:25:7e:db:8a:db:e1:
a9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:61:5B:62:E9:8B:6D:47:9C:69:42:23:75:FB:22:DC:DA:1F:D6:B5
X509v3 Authority Key Identifier:
keyid:3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:24:ec:05:04:ab:3f:7a:fc:70:ed:21:d0:d2:3d:e2:0b:b7:
3a:df:45:a3:7f:41:4a:b4:4c:f3:b9:93:6e:1d:d7:7e:2a:e0:
68:f8:53:e7:b6:f0:38:01:52:f8:13:e8:a9:eb:e4:56:11:ab:
f6:aa:92:40:82:7b:cd:fd:ad:e6:5c:41:2d:41:81:5f:27:55:
6c:db:8b:08:b9:c3:58:c3:5c:1a:2a:80:4e:37:ef:c6:88:75:
61:15:f4:7b:41:f7:30:89:78:7f:f9:ac:44:1f:fd:40:be:cd:
c1:03:57:65:3c:5b:a2:fd:50:80:85:12:d1:8d:38:34:e3:2c:
d8:7d:c2:19:26:f6:1e:ae:3b:78:71:3e:b6:49:97:22:87:50:
98:f7:58:27:f5:75:06:0c:05:d1:4e:9d:47:c8:0e:e7:c3:2a:
79:04:75:b8:41:48:bd:12:5b:d2:95:e8:32:5c:2d:a8:d0:08:
47:d3:e0:6d:98:a5:11:79:f8:68:45:72:ad:d3:12:63:4d:07:
66:e2:d7:05:58:79:2c:51:0d:32:50:8a:a8:16:4c:4e:2c:5e:
cc:72:c3:c6:85:1d:08:01:75:74:4f:be:d7:4d:30:88:7e:5c:
bb:fd:db:7e:8a:7c:50:35:1c:9d:75:1b:f0:ed:12:3e:7c:35:
d7:e7:69:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:07 2026 by rpki-client