Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
File: OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json)
Hash identifier: xcAWuzzUHKLX0RnC/gY26H86c1t5sqWrGuMAfma0Mbc=
Subject key identifier: 5B:F5:FB:83:7E:5E:D4:9B:B2:B0:21:09:CC:7F:F7:03:59:11:6F:78
Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Certificate serial: 01A06E7064430026B5BFD9AAF98C2F81C7C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
Manifest number: 16CC
Signing time: Fri 04 Sep 2026 22:00:54 +0000
Manifest this update: Fri 04 Sep 2026 22:00:54 +0000
Manifest next update: Sat 05 Sep 2026 22:00:54 +0000
Files and hashes: 1: 5HgfHalD9LWYJGG7XKJSoxARVl0.roa (hash: swKgBTrDTDtZaOuFjLNTyyxaRwCSohp8AB3ouBvQWOI=)
2: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: eKTAvMIklGjEDDjiiSd4lfL3PEWYacLt7BftngY9qyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:64:43:00:26:b5:bf:d9:aa:f9:8c:2f:81:c7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Validity
Not Before: Sep 4 22:00:54 2026 GMT
Not After : Sep 5 22:00:54 2026 GMT
Subject: CN=5bf5fb837e5ed49bb2b02109cc7ff70359116f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:47:04:7a:15:ca:18:1a:ce:ea:5e:d1:6d:a2:
9e:e9:71:92:e3:c7:d3:3d:e2:91:65:d2:36:35:ec:
72:a6:cb:e5:32:16:c2:41:23:f2:e5:14:eb:5d:20:
dc:b6:02:f8:f8:e5:3f:9c:de:28:85:68:97:7b:27:
13:5a:f5:39:02:cd:5d:89:76:0b:93:2a:40:e4:a4:
c3:fc:bd:45:6c:40:c8:4b:68:99:80:fc:9b:35:b5:
19:ed:af:10:05:a6:e4:ca:9c:e5:3b:b4:7f:28:7c:
36:e3:82:05:01:9d:2a:d8:3a:ab:10:9f:fb:bb:d6:
33:6b:44:f8:f6:c5:db:34:f9:35:5b:6a:59:50:c2:
9a:b6:d5:06:ef:7b:e0:dd:cb:03:8f:8e:d3:c5:26:
ab:80:37:fc:0f:e7:71:2d:c1:32:8f:9b:cb:53:41:
da:97:88:ef:45:c4:bf:2f:b8:53:30:b7:52:f2:36:
57:f9:1a:38:c4:84:3b:68:c4:04:b5:59:04:96:c5:
af:a8:12:65:7b:f6:e8:c3:e4:3f:94:bd:b3:ef:4c:
10:c6:fa:1c:9f:b3:8f:37:02:bc:dc:79:e0:1e:65:
8d:46:50:49:3a:35:ee:66:82:d4:b0:cc:b8:43:c4:
5c:84:a3:ed:47:be:38:a7:05:c7:cd:a8:98:b1:2e:
9e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F5:FB:83:7E:5E:D4:9B:B2:B0:21:09:CC:7F:F7:03:59:11:6F:78
X509v3 Authority Key Identifier:
keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:3a:ac:b7:cb:5a:d9:44:26:71:6c:0f:4b:2a:28:3a:a0:88:
5f:c0:57:f6:af:eb:e1:89:93:13:0e:78:7b:ca:62:c7:7a:c8:
25:53:58:36:30:e4:e6:91:de:a0:5c:61:98:d4:7d:00:25:bf:
b8:c6:36:75:91:30:c3:5c:41:85:9a:88:34:4c:ec:79:62:76:
e1:c0:8f:b5:cf:3e:79:b6:8c:4b:cd:82:17:4e:ce:59:90:98:
f3:57:c4:f5:79:27:80:c5:f9:76:52:f0:eb:20:56:9d:de:7a:
e2:22:a9:c2:cc:cd:48:97:07:48:ae:3f:f3:d0:95:e9:c7:35:
40:3f:97:f9:1f:ca:a1:56:c6:ba:c0:51:fc:1c:1c:bc:ba:68:
e0:8a:13:2c:51:3d:a5:03:3f:60:19:c6:bb:64:53:9a:14:9b:
1e:b3:ee:83:4b:20:f5:43:e3:db:0c:33:ec:28:97:29:59:e2:
a0:e4:66:32:40:58:04:ec:6e:0b:0e:04:68:53:c6:9f:10:94:
9f:3c:da:ae:37:67:7b:d0:bb:60:04:f2:f3:d6:3f:6e:8d:c1:
f2:21:81:06:b5:1e:b4:55:46:f8:8e:78:5b:da:1b:ee:3e:de:
cc:99:30:ce:b6:c7:72:1a:4f:a3:46:cb:db:fa:94:d9:cf:5a:
12:28:2b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:55:52 2026 by rpki-client