Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
File: ov7n60DFpFQ5UC658zG-_qxPjQw.mft (raw, json)
Hash identifier: jzJ/8066U4NS/ZmNAAKJrT9w3OesBM1aysRwmAA7q6w=
Subject key identifier: 14:D0:E3:6C:1D:69:C2:88:C4:FF:61:53:45:81:2A:14:72:8B:8B:70
Authority key identifier: A2:FE:E7:EB:40:C5:A4:54:39:50:2E:B9:F3:31:BE:FE:AC:4F:8D:0C
Certificate issuer: /CN=a2fee7eb40c5a45439502eb9f331befeac4f8d0c
Certificate serial: 019D35D20612F6F8ADED6B9319A8B513AFEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
Manifest number: 01A9
Signing time: Sat 28 Mar 2026 19:00:49 +0000
Manifest this update: Sat 28 Mar 2026 19:00:49 +0000
Manifest next update: Sun 29 Mar 2026 19:00:49 +0000
Files and hashes: 1: iJct27IBYh-gAfl6eu5h4aNgM3U.roa (hash: 6ohSO1sfqYBcO+vPtXlYywNN/BR02DeUS7d8lZX/S7c=)
2: ov7n60DFpFQ5UC658zG-_qxPjQw.crl (hash: IO9B3BWCsQH0hAw5sRBGziifkLetKwhqOp0nXZPJWhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:d2:06:12:f6:f8:ad:ed:6b:93:19:a8:b5:13:af:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2fee7eb40c5a45439502eb9f331befeac4f8d0c
Validity
Not Before: Mar 28 19:00:49 2026 GMT
Not After : Mar 29 19:00:49 2026 GMT
Subject: CN=14d0e36c1d69c288c4ff615345812a14728b8b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ce:01:3c:26:d3:11:b8:1e:bb:3d:41:11:2b:
bf:3c:ee:5d:c1:44:45:75:f7:19:0f:4a:0c:a1:92:
c0:0c:50:bb:79:18:4b:d2:75:98:36:87:6b:5e:68:
b3:77:35:4a:d5:e7:72:da:45:d7:18:f1:9c:f5:6f:
17:06:51:30:9d:8d:c1:ab:43:e1:4f:38:52:3a:69:
46:91:f6:d6:97:8a:eb:9d:1d:9c:72:43:ec:ae:6f:
71:65:df:c7:7a:41:02:ec:7e:11:cc:bd:b8:d2:f5:
8a:23:b9:54:0e:c9:25:90:b3:ab:b8:31:db:3a:6e:
a9:6b:2d:ad:2f:84:c5:2b:f0:97:e5:81:15:f6:a3:
d0:65:13:91:d2:a4:f8:5a:1e:1e:0c:58:23:9d:82:
d0:54:9b:ff:6c:39:86:22:1b:54:c3:e0:36:ca:9e:
e8:8a:bc:38:c7:ae:f5:95:a8:31:ca:da:b1:db:3c:
09:f9:4d:ec:1e:cd:af:86:22:89:cb:2a:c1:39:ee:
49:6e:e2:12:f4:21:c0:f2:6b:2e:83:1d:32:f7:30:
50:60:f2:24:50:a9:e5:8c:f6:6a:5d:e7:46:33:2f:
da:d0:2c:75:12:60:81:0f:7a:68:af:0e:82:30:7c:
e5:7e:1c:5d:8b:ba:15:93:ac:bb:2f:f7:a9:ec:72:
3f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D0:E3:6C:1D:69:C2:88:C4:FF:61:53:45:81:2A:14:72:8B:8B:70
X509v3 Authority Key Identifier:
keyid:A2:FE:E7:EB:40:C5:A4:54:39:50:2E:B9:F3:31:BE:FE:AC:4F:8D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:50:4c:56:13:58:27:77:22:d2:53:c8:06:45:84:d4:69:17:
a2:d4:3b:c6:9b:5e:9d:6e:e1:85:30:0c:42:9b:fb:59:5e:27:
13:e8:f9:43:f4:75:a0:df:80:e6:9a:c9:9a:cf:6f:ba:51:cb:
96:55:de:bc:d4:dd:39:13:78:29:b3:bb:76:11:a0:be:90:e7:
ad:9e:37:b5:e4:80:20:b6:27:f8:29:a8:85:9b:ee:e2:c9:54:
e3:24:eb:c0:aa:f3:68:b4:52:7f:b6:27:40:a3:dd:32:5c:38:
ae:75:47:a4:01:25:a1:41:7d:64:92:ee:76:64:73:f1:9d:ce:
45:11:08:b2:5d:61:34:96:5c:6f:be:bd:69:31:58:36:82:14:
8e:6d:53:69:6f:1f:a7:df:e0:53:39:15:eb:6f:a2:b8:f7:3f:
aa:99:7a:fd:92:27:ec:17:0c:c0:60:9a:9f:33:5b:75:f9:c1:
91:3b:4a:6f:27:36:48:79:12:a3:d7:0b:34:57:6e:c6:dc:50:
16:b0:be:d0:b9:24:76:ed:12:02:0a:64:48:b4:1b:21:23:f4:
14:0d:cc:f0:02:11:4a:f6:bd:e3:d5:67:ad:e6:2f:ef:4a:c2:
b8:0e:c1:b8:77:57:82:34:cd:4c:10:52:ea:9f:ab:59:b4:d2:
24:36:14:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 21:46:39 2026 by rpki-client