Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
File: OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json)
Hash identifier: R6JYu6fOt4vtQfN3k9vntuwmuJKere5w1NGvTVjUils=
Subject key identifier: EA:76:1B:06:59:0A:BC:95:8E:AD:87:48:D9:A1:83:5B:F4:E6:0E:F0
Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Certificate serial: 019E9B1755880A3F43B3B9C154DCC69E58FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
Manifest number: 15DA
Signing time: Sat 06 Jun 2026 04:00:58 +0000
Manifest this update: Sat 06 Jun 2026 04:00:58 +0000
Manifest next update: Sun 07 Jun 2026 04:00:58 +0000
Files and hashes: 1: 5HgfHalD9LWYJGG7XKJSoxARVl0.roa (hash: swKgBTrDTDtZaOuFjLNTyyxaRwCSohp8AB3ouBvQWOI=)
2: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: 7BFo6ninyLskMLW8HxgYU3f96ecjG08C6f+6iUMORTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:17:55:88:0a:3f:43:b3:b9:c1:54:dc:c6:9e:58:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Validity
Not Before: Jun 6 04:00:58 2026 GMT
Not After : Jun 7 04:00:58 2026 GMT
Subject: CN=ea761b06590abc958ead8748d9a1835bf4e60ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:95:2a:c2:38:7b:a6:5c:62:ec:78:ab:66:3a:
45:c8:ce:eb:5e:e8:ba:84:92:1e:9f:0e:2e:52:2e:
87:ee:04:b1:ef:42:96:56:ee:a7:6a:90:34:e3:6b:
13:48:05:b4:b8:75:48:19:db:d1:7a:b4:ea:04:d8:
36:2a:92:9e:59:3b:87:73:57:99:1d:22:2c:13:04:
4b:f9:ed:d9:21:79:20:e2:92:5e:f1:bc:b6:e1:ca:
8f:53:77:f2:1c:28:e0:d5:81:cb:7a:d3:f3:7d:7e:
ff:4a:7e:11:f6:02:59:c7:af:30:37:ce:2e:f9:cb:
6f:08:f2:bb:c4:b1:75:3f:2d:00:f4:7b:eb:57:eb:
45:f2:df:f9:70:58:86:67:34:26:fb:42:54:7e:94:
14:37:0a:59:5c:d4:c0:74:53:db:18:63:4c:5f:3e:
ef:d3:7c:ca:ff:23:88:a1:35:5a:e1:12:e0:ea:d5:
e3:6b:c3:ef:15:ad:64:e0:7a:cb:31:18:cd:46:f7:
f8:7a:5f:b9:16:da:4b:fc:22:f1:ff:c3:25:9a:da:
bc:fa:a0:97:3d:e8:62:aa:f3:b1:ef:0e:3e:19:7a:
12:95:78:27:0d:f8:8d:6b:6b:9a:5f:e0:a6:1d:b8:
ea:a7:ab:70:36:95:f4:af:92:72:46:13:cd:9e:4c:
c4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:76:1B:06:59:0A:BC:95:8E:AD:87:48:D9:A1:83:5B:F4:E6:0E:F0
X509v3 Authority Key Identifier:
keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8a:c6:1e:80:f9:4c:f3:5c:a7:ec:0d:b2:e1:d4:dd:60:50:
23:e9:9c:50:0f:42:cc:a0:d5:09:da:ce:97:1b:c7:c5:7b:76:
18:d9:e2:00:bb:90:0e:73:4a:23:1f:3e:4c:28:b2:3c:43:c7:
fb:c9:50:34:38:ac:d9:7b:99:93:15:b5:84:40:87:74:1f:b8:
7f:f8:99:13:dc:11:a7:3d:2d:0d:e7:d3:15:31:ad:ad:6a:1f:
46:6c:57:16:3e:08:5f:c7:b5:28:68:47:df:0c:83:02:f6:03:
f3:a8:97:71:5b:aa:e7:de:e2:b3:39:91:c0:cb:c4:0a:74:cf:
fe:de:2f:bb:4b:22:37:f2:70:2e:ac:43:65:1d:8b:11:ef:ee:
ad:2b:fc:61:1f:c6:59:ab:1a:ae:ac:59:c8:1d:1a:dd:d8:93:
77:9a:63:54:47:7d:df:07:c5:3c:51:1a:d9:45:eb:2f:e1:a4:
ac:f3:36:52:be:17:15:f8:4a:ce:ac:d9:86:2c:dc:fb:1d:72:
7b:c3:fe:aa:14:8d:fa:93:c9:8c:2b:ea:91:d8:7d:9c:95:0e:
5d:d2:d3:db:1b:fb:71:96:ad:b4:22:c0:37:fc:0e:17:c5:25:
d3:1e:0c:7e:1c:28:f9:b0:5c:68:ab:58:88:c0:01:07:c2:a7:
20:bc:1e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:25:08 2026 by rpki-client