Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
File: OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json)
Hash identifier: 9CS9zzTx5nbtz2mDwgRxmWJAcptYwNltpWEiTUAwXtk=
Subject key identifier: FD:76:13:6E:8E:22:81:F4:4A:BE:A9:88:43:F6:73:81:DB:2B:19:2A
Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Certificate serial: 019D37C048EFA531E00594A252C27A6B475A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
Manifest number: 1522
Signing time: Sun 29 Mar 2026 04:00:41 +0000
Manifest this update: Sun 29 Mar 2026 04:00:41 +0000
Manifest next update: Mon 30 Mar 2026 04:00:41 +0000
Files and hashes: 1: 5HgfHalD9LWYJGG7XKJSoxARVl0.roa (hash: swKgBTrDTDtZaOuFjLNTyyxaRwCSohp8AB3ouBvQWOI=)
2: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: 2e25MN6VfxcCttSs94GzNvJMji64nISNy/MbiWxYNdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:48:ef:a5:31:e0:05:94:a2:52:c2:7a:6b:47:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Validity
Not Before: Mar 29 04:00:41 2026 GMT
Not After : Mar 30 04:00:41 2026 GMT
Subject: CN=fd76136e8e2281f44abea98843f67381db2b192a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:df:5c:d9:41:37:5d:ac:eb:7e:21:59:32:a8:
d8:73:a0:f7:ca:56:bc:a1:dd:b2:cb:9b:39:c3:09:
a1:34:b9:84:b2:7a:dc:51:56:ca:49:92:15:98:6e:
3f:8e:37:bc:e3:be:b2:51:0f:e0:c8:5d:1e:ce:08:
3a:20:e2:e7:0e:7c:09:29:5b:a9:65:d2:4a:12:d5:
72:c4:84:6a:3c:34:db:ee:e1:ae:c3:bb:69:60:10:
8a:5a:47:d5:de:eb:a3:b9:6e:08:ba:22:ec:94:f3:
27:ae:93:79:2e:12:25:37:9c:01:be:1a:e3:6b:29:
1a:e9:60:a1:54:be:73:05:1a:00:e6:b9:d2:4d:c7:
e0:96:e1:e2:42:59:4a:e0:34:f8:45:ca:12:51:fa:
28:20:cd:55:bf:82:7a:ea:e8:cf:b5:f3:01:a3:60:
90:c1:5c:dd:b0:a3:77:07:44:f1:91:0b:07:1b:f6:
a2:8b:4d:fa:a1:64:21:45:a1:b4:4d:db:e2:fa:91:
7d:be:19:cf:e8:06:69:5c:2a:dc:42:de:08:b4:a8:
ee:cb:4d:51:bd:cd:31:ef:78:f0:44:36:b7:55:d6:
c3:cd:c9:e3:5e:87:83:ee:83:29:79:5b:07:db:35:
c7:2e:3b:db:89:dd:13:3f:ce:77:4a:1c:3a:6a:8f:
45:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:76:13:6E:8E:22:81:F4:4A:BE:A9:88:43:F6:73:81:DB:2B:19:2A
X509v3 Authority Key Identifier:
keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:10:86:96:ce:22:17:c9:cd:b7:ac:15:bb:41:65:45:9d:5a:
fc:15:06:c1:d8:27:70:fc:59:4b:1d:61:af:6a:32:22:00:91:
06:83:6e:a6:6f:28:6a:fe:f7:26:41:91:70:5a:80:3b:5c:a7:
85:b6:80:e7:cd:22:f6:09:de:6a:ce:aa:d1:12:92:2f:31:0c:
6a:0f:f9:06:9b:3b:a7:a6:29:e9:2f:4e:ca:34:b8:ab:47:48:
fb:db:68:92:6e:45:f5:66:16:63:1b:3d:ef:4b:c1:39:f7:5e:
97:f0:eb:f5:89:18:20:08:da:e4:01:68:1d:27:fa:94:07:3d:
21:17:58:7b:15:55:72:07:7e:2e:33:78:56:61:c1:25:62:1b:
9e:b7:bd:08:01:3f:c0:0a:3b:42:1d:9a:64:5f:fb:52:4e:59:
44:25:8a:8f:46:27:f6:4f:e4:80:dd:7d:dd:b0:ff:21:c3:69:
80:d3:62:c7:a2:a3:af:12:61:34:c3:33:30:10:35:0c:2b:04:
b3:73:7a:40:6c:26:ee:64:8d:fd:40:5e:cc:aa:63:83:38:41:
64:ca:28:72:ee:3c:82:58:e5:2c:e5:f3:25:98:6e:b9:ef:e8:
ad:36:0f:e6:a9:6b:fe:68:89:5c:5f:68:3d:91:64:06:a3:55:
0b:1c:3c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:11 2026 by rpki-client