Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
File: OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json)
Hash identifier: rNdxnweeuMqFqTDQDXAajQeqigBDTFkcs1aSuXkl5u4=
Subject key identifier: 0F:14:61:E2:E6:F0:E7:6B:D9:9A:89:56:7F:39:2B:CD:A4:36:47:38
Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Certificate serial: 01A17702DC9499DACDA36FCC30A854DDF05A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
Manifest number: 1755
Signing time: Mon 26 Oct 2026 07:00:38 +0000
Manifest this update: Mon 26 Oct 2026 07:00:38 +0000
Manifest next update: Tue 27 Oct 2026 07:00:38 +0000
Files and hashes: 1: 5HgfHalD9LWYJGG7XKJSoxARVl0.roa (hash: swKgBTrDTDtZaOuFjLNTyyxaRwCSohp8AB3ouBvQWOI=)
2: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: kFxxCzmQdqaP6qwwC89Q2pkYCkGPPqhAU5esjJUg3t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:02:dc:94:99:da:cd:a3:6f:cc:30:a8:54:dd:f0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Validity
Not Before: Oct 26 07:00:38 2026 GMT
Not After : Oct 27 07:00:38 2026 GMT
Subject: CN=0f1461e2e6f0e76bd99a89567f392bcda4364738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:86:aa:c6:f3:a8:ea:e7:db:86:b9:b0:b4:
56:43:40:7d:2f:77:39:fb:1d:cf:11:25:9b:6f:ad:
04:40:0e:37:1b:59:bf:6d:a8:7c:dc:7c:15:df:60:
2e:79:a6:87:a4:d5:a5:3d:3d:28:a3:d4:7c:63:9f:
df:70:af:87:80:6f:da:1c:58:57:6c:5d:86:4f:25:
de:93:fa:e8:67:d3:44:29:1e:78:38:84:e8:7b:8d:
cc:ab:ee:9f:40:4e:57:ba:d4:ca:d8:4e:5d:59:2e:
55:9d:d7:28:b0:9a:c6:a8:be:ab:9c:e1:61:d1:86:
e4:73:22:dc:6d:4e:d0:35:3f:ec:bc:e2:2e:0f:85:
2d:ef:47:bb:cb:b1:dc:6a:76:07:dd:5a:4a:a3:db:
83:6d:cb:56:c6:3d:f2:43:28:4c:2c:27:1a:ba:ee:
74:4d:0e:b8:e5:1d:79:f7:a8:b0:38:8a:24:e1:9a:
c5:5a:40:31:b2:bc:df:b5:21:88:18:24:a9:9f:1b:
47:aa:a2:98:55:2d:18:da:d3:0c:08:81:ce:b6:8f:
0e:24:32:5b:5e:40:99:f9:43:39:01:12:21:f3:c7:
c5:09:43:b3:0a:2e:69:e4:5f:de:0b:f6:56:dd:34:
e2:e0:be:05:35:f8:2e:d9:67:ed:70:86:0a:65:36:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:14:61:E2:E6:F0:E7:6B:D9:9A:89:56:7F:39:2B:CD:A4:36:47:38
X509v3 Authority Key Identifier:
keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:fc:b7:7d:ca:bf:00:55:e0:b3:2e:17:7b:1f:76:d9:c9:d3:
00:45:bf:8e:92:1d:ff:f0:67:56:95:bf:d0:50:b9:84:e3:b1:
14:4c:06:56:a7:17:a0:fe:34:e9:e9:6f:2d:75:cb:f2:8e:ef:
4d:3c:99:64:89:a0:15:f0:e6:b4:c1:47:9f:ef:a3:17:5f:7e:
7a:2b:0e:ea:48:27:43:2c:01:e6:21:d4:c2:d8:90:f3:28:41:
3b:a2:7f:08:cc:1e:f7:9f:60:39:f6:e0:41:8d:22:61:84:5f:
fc:cb:33:27:96:06:e7:49:57:2a:f7:2d:98:ef:0f:31:9c:9d:
67:63:71:2d:41:d8:a9:28:95:d8:c7:14:0a:e2:bd:ba:51:c3:
74:40:45:4d:4c:69:08:c1:30:43:21:92:bb:70:3b:3a:a0:78:
3a:b8:a2:d1:6f:2d:c3:8b:fe:c3:ab:68:67:fc:13:95:30:0c:
c7:60:ae:17:5f:4c:77:64:db:37:f3:ce:ab:ec:b8:25:b2:11:
6a:a9:14:f7:24:46:7e:80:80:77:b9:03:b2:90:2e:be:f7:b8:
cc:fa:28:ff:a9:86:74:50:20:89:f0:66:df:12:fa:d3:42:c4:
87:2b:af:d2:43:83:ba:f8:50:f6:63:fc:0f:8b:e1:33:de:f7:
9f:0a:46:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:35:07 2026 by rpki-client