Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.mft
File: OvT97X4Qu-r0tDALBAPwzsJSyV4.mft (raw, json)
Hash identifier: pSAU8SmU4sVz+qob/RjAD1ij6N4nfn/sMG0gt4uDYnQ=
Subject key identifier: 53:FE:F5:D4:29:5B:66:0D:C5:08:5E:CF:44:4D:D7:FC:9F:3F:72:A6
Authority key identifier: 3A:F4:FD:ED:7E:10:BB:EA:F4:B4:30:0B:04:03:F0:CE:C2:52:C9:5E
Certificate issuer: /CN=3af4fded7e10bbeaf4b4300b0403f0cec252c95e
Certificate serial: 01A113AA04E98F91B6D8222EB86CBB4DF3EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvT97X4Qu-r0tDALBAPwzsJSyV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.mft
Manifest number: AE
Signing time: Wed 07 Oct 2026 00:01:11 +0000
Manifest this update: Wed 07 Oct 2026 00:01:11 +0000
Manifest next update: Thu 08 Oct 2026 00:01:11 +0000
Files and hashes: 1: 8fT9pmNi0IQqPN8nu263PPhOOjg.roa (hash: Ujw8ZbOAWSYdEG4uqqRQEENNRaNYjONTO1BAYHKWs+c=)
2: OvT97X4Qu-r0tDALBAPwzsJSyV4.crl (hash: 2d4R9AFsuPhvHquCxdbShF0qeEVZ1u+Ugi9qSGuAPhU=)
3: df7iaJQLWuMKkjAOiXAC6Z4nko8.roa (hash: C/7lssJNPjMIGGjDfXe7RzVQ6k3TBnKs7T8bCHpVh1s=)
4: sFOU4J6G7f8bb8tQb6zHbVorZC0.roa (hash: rg6UFAng9V//tNkBw2WXQqdjewrPo6dIE9fDaq+wzM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvT97X4Qu-r0tDALBAPwzsJSyV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:aa:04:e9:8f:91:b6:d8:22:2e:b8:6c:bb:4d:f3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af4fded7e10bbeaf4b4300b0403f0cec252c95e
Validity
Not Before: Oct 7 00:01:11 2026 GMT
Not After : Oct 8 00:01:11 2026 GMT
Subject: CN=53fef5d4295b660dc5085ecf444dd7fc9f3f72a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:28:eb:bf:4a:4e:13:e5:32:b9:79:6b:80:
e8:27:11:a0:15:d2:2a:b1:63:4f:0b:a1:5c:e8:75:
50:4d:23:f6:a0:4f:0b:89:a3:08:c7:e5:d9:6a:b5:
1d:0d:54:e6:89:91:03:b3:77:c2:17:f5:19:a0:6c:
28:c5:2a:48:c0:0e:e6:0f:1d:a1:23:85:39:6c:3c:
9b:de:c2:d3:2f:e3:b7:c6:41:86:26:cf:0b:85:f8:
80:8a:07:ca:35:68:ee:50:cc:54:b8:26:75:ad:d1:
c6:14:22:05:be:c2:7b:5e:e4:fe:46:11:79:b6:77:
4a:4f:d0:6d:5b:7f:d6:8a:cb:05:db:ae:e7:94:a8:
63:24:78:66:44:20:9b:56:de:52:01:a7:7b:18:e6:
20:f1:f7:06:f2:32:ea:89:ae:af:cf:e9:46:27:b9:
15:03:27:84:ba:82:06:15:8d:c2:0a:06:ac:c4:e3:
0f:08:f0:0a:8c:ed:d3:cb:00:d5:86:34:1a:51:c8:
77:08:d4:ff:ce:25:a0:20:bb:2a:b0:ad:19:0a:8c:
5e:1b:d1:42:f4:9e:f1:48:b2:92:c5:87:c7:7e:27:
3a:a5:94:73:20:c7:f6:17:f1:83:e8:43:69:42:b2:
18:29:9d:68:51:8d:72:35:74:87:3a:93:b2:a9:de:
0b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FE:F5:D4:29:5B:66:0D:C5:08:5E:CF:44:4D:D7:FC:9F:3F:72:A6
X509v3 Authority Key Identifier:
keyid:3A:F4:FD:ED:7E:10:BB:EA:F4:B4:30:0B:04:03:F0:CE:C2:52:C9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvT97X4Qu-r0tDALBAPwzsJSyV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:5f:9a:34:b7:15:6c:cd:94:be:f7:92:75:5a:08:b3:5f:a6:
b1:fa:3e:86:2b:e4:73:7c:e4:dd:a0:b6:14:e8:dd:43:13:93:
8c:7b:34:60:c4:11:72:e6:a2:ee:f3:29:6c:3f:d1:a2:54:53:
74:9a:51:7d:a4:40:66:12:29:ed:86:a1:93:e2:bc:2e:5f:87:
c2:62:0e:a0:98:ca:65:e9:bc:dd:e8:74:52:dc:d1:6e:0e:a8:
e4:ac:41:57:d0:71:a7:df:65:aa:cd:47:44:3c:63:28:46:57:
d2:46:7a:a4:38:65:0a:b0:0c:d1:4f:d4:e5:a9:a0:0b:4c:a9:
de:61:e0:3b:7e:27:90:aa:f5:36:4b:31:89:f7:b1:92:bd:e3:
47:b0:55:d8:b4:1f:36:f2:cf:8a:53:73:be:a4:0f:e9:5d:cb:
3a:6f:df:19:02:03:e3:24:85:74:30:6b:c1:01:a0:18:bf:45:
63:5d:4e:ba:78:44:b9:f3:f0:93:df:f2:e2:92:aa:79:01:22:
dd:8c:42:7e:9f:d4:64:cd:bd:02:bf:eb:38:bd:98:1b:d0:f9:
84:56:ff:5b:c3:41:f1:97:61:17:8b:2e:1a:65:33:7a:3d:f6:
da:ed:ca:39:f9:79:fe:1a:9f:d0:04:a1:36:1b:9d:fa:d2:20:
9f:47:8a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:52:38 2026 by rpki-client