Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft
File: OVUKm3Usc5f29p6qaoDwm6f32Co.mft (raw, json)
Hash identifier: WUpwK4MAFF/e5RnaGls9Xi3/r3l9vPQCLABsNKwPd8A=
Subject key identifier: DD:61:F6:3E:A9:E4:1A:20:35:74:7F:83:C6:AD:5F:67:F4:55:6D:03
Authority key identifier: 39:55:0A:9B:75:2C:73:97:F6:F6:9E:AA:6A:80:F0:9B:A7:F7:D8:2A
Certificate issuer: /CN=39550a9b752c7397f6f69eaa6a80f09ba7f7d82a
Certificate serial: 019D371BAFCF388922664ADAD45341E28BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OVUKm3Usc5f29p6qaoDwm6f32Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft
Manifest number: 028B
Signing time: Sun 29 Mar 2026 01:00:54 +0000
Manifest this update: Sun 29 Mar 2026 01:00:54 +0000
Manifest next update: Mon 30 Mar 2026 01:00:54 +0000
Files and hashes: 1: 8YWQcFBY2JGN7Y9LDudwmWiUUd0.roa (hash: Y71RgVM51ZBYNWL+Un1weGs/ne1SsVfCUFi/XmlLWUg=)
2: OVUKm3Usc5f29p6qaoDwm6f32Co.crl (hash: VU4v0p+NdO5wzh9dX9/nMYuMP4s6hMzR89i89jcOEhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/OVUKm3Usc5f29p6qaoDwm6f32Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:af:cf:38:89:22:66:4a:da:d4:53:41:e2:8b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39550a9b752c7397f6f69eaa6a80f09ba7f7d82a
Validity
Not Before: Mar 29 01:00:54 2026 GMT
Not After : Mar 30 01:00:54 2026 GMT
Subject: CN=dd61f63ea9e41a2035747f83c6ad5f67f4556d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:98:c4:64:e4:0a:4e:23:81:7e:83:8d:39:2c:
0d:c2:f2:87:df:0b:11:c5:27:6e:f5:3d:3b:9c:d4:
cf:20:7f:b3:cd:fd:ab:22:4d:fc:05:1c:83:af:4e:
0a:54:1e:7f:6f:44:58:10:53:57:11:85:20:5b:ff:
ab:4f:10:9c:f3:73:8c:bc:33:2d:e8:45:4d:78:51:
cb:42:63:9e:79:01:2c:09:92:ae:94:73:05:d9:28:
43:50:18:bf:04:42:42:e2:4c:e6:10:d6:72:2a:01:
3e:c0:6d:dc:56:01:32:3f:b8:9c:b7:9d:ed:43:0a:
6f:08:88:12:8a:88:59:66:9b:b3:4f:37:bd:ec:e3:
0a:f1:69:32:42:c7:46:f4:32:a8:85:5a:df:31:bc:
51:03:19:a0:4e:35:c7:d7:e5:77:66:33:7e:dc:55:
fb:3b:8a:95:54:03:c6:a0:bf:25:15:1b:1d:e1:cf:
c0:16:c2:a0:bc:27:42:c8:2f:4a:15:6d:54:49:1d:
a3:f8:2a:70:1f:dc:76:50:e8:f3:1f:c3:44:35:e3:
af:b7:e1:40:dc:b5:ef:b6:50:75:8d:0f:01:e4:45:
a4:a1:6a:02:48:98:f4:f7:00:91:2c:9e:b5:05:3e:
3b:de:d8:0c:27:30:1f:c4:b4:aa:bc:b6:9c:fd:6d:
c4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:61:F6:3E:A9:E4:1A:20:35:74:7F:83:C6:AD:5F:67:F4:55:6D:03
X509v3 Authority Key Identifier:
keyid:39:55:0A:9B:75:2C:73:97:F6:F6:9E:AA:6A:80:F0:9B:A7:F7:D8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVUKm3Usc5f29p6qaoDwm6f32Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ef:82:c9:d5:f2:3c:20:a0:fc:b8:68:7d:c9:a8:cc:84:67:
0b:0e:0a:3f:70:0b:2c:36:58:a6:09:e4:9a:bc:21:c8:15:ed:
c1:fe:8a:91:9b:6e:80:6d:53:9b:e5:ec:b1:15:d2:8c:1b:1a:
4e:76:c3:1e:09:a3:56:b2:14:eb:51:c1:b1:37:04:b4:1d:c5:
41:4a:33:7b:9e:58:7f:49:a3:a8:9f:6e:39:5d:a4:26:db:ef:
b5:0f:3f:76:1d:b9:c1:10:b3:6f:3f:af:c4:6e:2e:02:ea:ac:
af:bb:b2:91:67:07:7f:0f:40:65:0a:90:04:c5:1d:fe:5e:20:
06:38:2f:de:6c:30:5a:f1:95:7b:87:5f:c8:08:ea:24:6e:ff:
9d:11:63:64:10:30:78:1c:cf:4c:0e:e6:27:f6:1c:fe:da:b0:
22:fd:55:98:6d:da:eb:e9:45:af:b0:26:d5:49:c7:6e:a2:a1:
8b:9d:47:29:af:c0:a9:b4:11:f8:f7:d8:b6:8a:7e:57:ef:f2:
4a:77:f0:1e:55:fd:74:38:c2:9f:74:90:a0:18:76:3c:02:5f:
a7:ac:0c:ac:15:28:00:fa:1e:70:54:55:5e:eb:f0:5c:9b:f2:
50:fa:22:22:e1:5e:f8:7e:f8:f3:b2:3a:c4:3a:75:36:4b:3c:
fa:de:d9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:25 2026 by rpki-client