Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
File: ovrHXzkOiAUoM33Qvc3HeTS43zw.mft (raw, json)
Hash identifier: 5Aoohaj4rpb+s0i6V7dCxWlwLCneuEQEZYX5psXlXW8=
Subject key identifier: D6:7F:1D:02:B7:0E:5D:D6:7E:E4:EE:C0:40:6B:BE:9C:4C:40:38:06
Authority key identifier: A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
Certificate issuer: /CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Certificate serial: 01A06FBA45924BFAB329E41637C5AE7430E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
Manifest number: 1A45
Signing time: Sat 05 Sep 2026 04:01:13 +0000
Manifest this update: Sat 05 Sep 2026 04:01:13 +0000
Manifest next update: Sun 06 Sep 2026 04:01:13 +0000
Files and hashes: 1: 6KNhKGGdrXFLjZ1XPyUgJ4yIGIg.roa (hash: 7mtjseH+PgcRZVG/LL0SgW5XoQ6qCLuG7yQaTmngC74=)
2: ovrHXzkOiAUoM33Qvc3HeTS43zw.crl (hash: 6bFVnX8VPDLr12AjcqyYKq7vsn10rIY5zlOU6RxBlAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:ba:45:92:4b:fa:b3:29:e4:16:37:c5:ae:74:30:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Validity
Not Before: Sep 5 04:01:13 2026 GMT
Not After : Sep 6 04:01:13 2026 GMT
Subject: CN=d67f1d02b70e5dd67ee4eec0406bbe9c4c403806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:c4:8c:6c:37:54:e5:fa:e8:bd:7a:19:88:
31:41:c9:5e:84:b2:e8:46:c2:e3:5e:d7:51:93:49:
ed:ff:cb:d0:72:f2:55:f3:93:fa:25:d6:f8:c5:4e:
9f:6d:81:c1:a9:18:ee:e6:bc:62:81:3e:cd:07:62:
4a:68:8d:5f:88:63:55:7b:14:1c:f3:1f:7e:25:58:
58:13:66:29:76:2b:7f:ab:a7:d0:18:d6:af:71:ca:
94:7d:e6:b1:37:21:e3:2b:7f:32:13:db:f0:de:fc:
e0:12:97:58:40:64:14:12:e2:c5:94:b2:73:86:c6:
34:00:b3:fc:d2:35:f0:ee:87:4f:9b:4f:42:88:1d:
76:c1:89:5c:79:14:e6:ba:81:71:06:db:7e:b3:4b:
f4:3e:3a:22:e3:28:07:27:f4:87:52:ca:31:51:f2:
a3:09:dc:fc:c8:25:db:3b:24:a5:aa:2a:09:36:1c:
09:8d:46:98:fe:cf:d1:ad:cd:28:32:c5:eb:6f:72:
ff:c7:d7:ac:87:f9:ed:85:78:1d:d5:59:d6:ca:ca:
d5:b3:99:cc:2a:78:87:25:63:dc:2c:84:aa:c5:fa:
86:4e:45:61:b3:37:13:b3:b3:9e:95:7e:ee:8a:a2:
f1:9d:f1:d2:a0:81:35:48:e7:d3:8a:c5:31:cb:aa:
01:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7F:1D:02:B7:0E:5D:D6:7E:E4:EE:C0:40:6B:BE:9C:4C:40:38:06
X509v3 Authority Key Identifier:
keyid:A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ff:c7:50:38:ca:af:21:d3:cd:b1:c7:1d:4d:ba:0e:ee:f9:
0b:81:af:83:dd:a2:8d:31:0a:7b:c6:91:93:ad:d4:62:c9:e4:
53:f5:b8:20:b8:b4:f7:47:00:eb:de:27:29:55:ca:4e:c3:1a:
e9:90:77:c1:d9:53:70:4e:6f:85:a3:1f:f6:0f:81:b2:79:b9:
6f:f5:0d:25:17:ec:0a:e5:2d:7d:10:ab:9e:84:cc:30:d2:ab:
f1:36:e7:e0:f8:17:24:49:1f:ba:7b:d4:ef:3c:ba:c0:bf:56:
74:3d:b9:00:e0:19:7f:43:0c:e8:c5:ec:2a:bc:be:6b:6a:08:
71:68:9e:90:c1:ec:66:1c:c6:41:15:60:84:07:9a:e2:b1:ae:
bd:10:09:14:14:c1:4d:76:76:55:13:b2:0c:c1:e8:4b:4d:3d:
7a:52:92:97:8c:36:0f:6b:5e:a4:66:16:16:5c:ef:6c:ba:ef:
31:b0:b0:e2:21:7d:c9:31:60:bf:59:5b:e0:02:e6:c3:fe:e2:
95:e0:c1:a0:85:1b:3f:17:e1:4b:e3:b8:54:4a:1c:b8:db:6f:
9f:be:c7:cf:23:9f:5c:bd:ce:e0:a2:82:9c:9b:4b:dd:4d:ad:
96:7b:2b:8e:14:28:3d:48:82:f6:47:85:d3:8d:fa:3e:87:aa:
23:58:dd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:45:54 2026 by rpki-client