Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
File: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft (raw, json)
Hash identifier: wdjER6PgDoirDJodvV+BK+xKVl5g+KjarJAUEar+Nz4=
Subject key identifier: FE:18:98:E1:84:1F:C9:C5:CC:D2:CB:60:63:96:75:7D:7E:D8:AD:42
Authority key identifier: 3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
Certificate issuer: /CN=3afb9f43a46f059827a9dec366d1496d66089134
Certificate serial: 01A03A82FA412E09506572726E17718340F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
Manifest number: 0253
Signing time: Tue 25 Aug 2026 20:00:57 +0000
Manifest this update: Tue 25 Aug 2026 20:00:57 +0000
Manifest next update: Wed 26 Aug 2026 20:00:57 +0000
Files and hashes: 1: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl (hash: LCBccHaPQWsBhl8jKTS1gbRlpmi8qj0xp53bCxt/nJk=)
2: QKGqa5eFo_oefy2Fr910iRpsrO4.asa (hash: 2SH0Sp2vvwFpjaphIT/+Ub3omKUkgbjxDQhKCOfnuyg=)
3: eXB07PVnY6Up_99lPUFWjhQLh-0.roa (hash: +mrAOWzB21eb5SMCX4Zqqp/WLs5+1iRRt5G6w5MsOts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:82:fa:41:2e:09:50:65:72:72:6e:17:71:83:40:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afb9f43a46f059827a9dec366d1496d66089134
Validity
Not Before: Aug 25 20:00:57 2026 GMT
Not After : Aug 26 20:00:57 2026 GMT
Subject: CN=fe1898e1841fc9c5ccd2cb606396757d7ed8ad42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:05:a3:65:38:45:a2:67:ca:a3:0f:80:a1:
ef:ae:3e:b1:8c:9f:28:13:f9:d3:a5:31:55:2a:ed:
60:58:89:68:79:ea:05:fc:a7:21:37:62:bc:79:36:
78:d3:ea:60:3c:69:ef:3c:52:08:20:88:8e:e1:57:
2e:14:9c:b8:11:b3:c8:a2:aa:49:64:6a:9f:d7:6e:
30:4f:72:3a:94:78:f5:fa:f1:a7:92:94:1b:2c:4a:
29:8e:98:6b:39:38:c1:08:1a:f0:da:2f:5e:13:3a:
9c:1f:e0:5d:fa:c1:d7:83:5d:72:16:83:13:3a:1d:
b5:a8:47:1a:64:70:de:e9:a9:a9:ac:9e:35:dc:96:
83:bd:85:da:26:2c:d4:e3:ee:1a:c9:7e:8f:20:33:
5f:aa:75:9e:b8:97:47:32:40:65:a0:a7:10:1e:a8:
14:b8:ae:7c:f4:6a:de:d6:67:83:19:a1:88:60:58:
6c:a1:96:e6:0e:f4:da:ba:fd:68:03:36:d9:60:47:
4a:70:88:14:b2:07:8e:dc:d8:75:0f:34:14:43:19:
59:ff:4c:49:1f:32:2d:d6:c0:9c:3a:36:71:2a:67:
e0:ad:36:63:cb:3c:dd:2a:04:cc:1d:21:e6:11:03:
ea:d9:d6:7b:9b:1f:dd:bb:a6:76:5b:97:29:6b:2d:
d8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:18:98:E1:84:1F:C9:C5:CC:D2:CB:60:63:96:75:7D:7E:D8:AD:42
X509v3 Authority Key Identifier:
keyid:3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:02:29:ac:4f:53:57:8c:51:0a:5d:68:96:d8:91:a1:39:e2:
1e:f6:5a:6c:99:4b:27:95:55:46:3e:8a:83:0d:16:bd:57:fe:
4c:7c:97:b9:55:87:29:57:48:0e:77:66:2e:fe:eb:ef:9c:5f:
e9:3b:58:95:06:34:08:a9:fd:4e:09:30:58:dd:da:ca:40:a5:
15:c1:7b:7b:1c:6c:7e:c0:70:52:d9:b1:3d:76:88:23:54:bf:
2d:10:2f:19:05:0e:81:d3:9f:f1:8d:3a:75:95:49:14:fd:f4:
bd:4a:1f:4c:c2:66:d5:d4:7b:0f:3c:05:08:09:b6:7b:18:93:
78:c8:fe:a0:cc:cc:29:ae:51:98:78:13:15:ed:09:ce:e3:f1:
6d:93:a2:95:d6:77:80:ae:1f:80:02:b3:94:17:3f:7d:2e:ec:
c7:8d:2d:4d:c3:db:41:ba:92:ce:dd:48:16:9b:46:43:86:d6:
a8:cc:97:d9:4b:73:ec:97:f5:dc:01:7a:e2:6f:2a:cc:67:ed:
34:6d:09:b9:05:73:fd:00:20:2c:6e:5a:66:41:25:7d:64:96:
29:d8:d8:cc:dc:07:b7:ad:f1:23:d9:95:ef:85:0c:c3:ca:11:
fe:b7:c2:e8:3c:e4:45:cd:a0:25:58:64:dd:73:da:67:29:02:
9e:a2:21:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA6gvpBLglQZXJybhdxg0DyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZmI5ZjQzYTQ2ZjA1OTgyN2E5ZGVjMzY2ZDE0OTZkNjYw
ODkxMzQwHhcNMjYwODI1MjAwMDU3WhcNMjYwODI2MjAwMDU3WjAzMTEwLwYDVQQD
EyhmZTE4OThlMTg0MWZjOWM1Y2NkMmNiNjA2Mzk2NzU3ZDdlZDhhZDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzMFo2U4RaJnyqMPgKHvrj6xjJ8o
E/nTpTFVKu1gWIloeeoF/KchN2K8eTZ40+pgPGnvPFIIIIiO4VcuFJy4EbPIoqpJ
ZGqf124wT3I6lHj1+vGnkpQbLEopjphrOTjBCBrw2i9eEzqcH+Bd+sHXg11yFoMT
Oh21qEcaZHDe6amprJ413JaDvYXaJizU4+4ayX6PIDNfqnWeuJdHMkBloKcQHqgU
uK589Gre1meDGaGIYFhsoZbmDvTauv1oAzbZYEdKcIgUsgeO3Nh1DzQUQxlZ/0xJ
HzIt1sCcOjZxKmfgrTZjyzzdKgTMHSHmEQPq2dZ7mx/du6Z2W5cpay3YUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4YmOGEH8nFzNLLYGOWdX1+2K1CMB8GA1UdIwQY
MBaAFDr7n0OkbwWYJ6new2bRSW1mCJE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3Z1ZlE2UnZCWmducWQ3RFp0RkpiV1lJa1RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80MjJlOTktYWY1ZS00MmQ3LTkwNWUt
NzE5M2UxYjA2NmMzLzEvT3Z1ZlE2UnZCWmducWQ3RFp0RkpiV1lJa1RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC80MjJlOTktYWY1ZS00MmQ3LTkwNWUtNzE5M2UxYjA2NmMz
LzEvT3Z1ZlE2UnZCWmducWQ3RFp0RkpiV1lJa1RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwIprE9T
V4xRCl1oltiRoTniHvZabJlLJ5VVRj6Kgw0WvVf+THyXuVWHKVdIDndmLv7r75xf
6TtYlQY0CKn9TgkwWN3aykClFcF7exxsfsBwUtmxPXaII1S/LRAvGQUOgdOf8Y06
dZVJFP30vUofTMJm1dR7DzwFCAm2exiTeMj+oMzMKa5RmHgTFe0JzuPxbZOildZ3
gK4fgAKzlBc/fS7sx40tTcPbQbqSzt1IFptGQ4bWqMyX2Utz7Jf13AF64m8qzGft
NG0JuQVz/QAgLG5aZkElfWSWKdjYzNwHt63xI9mV74UMw8oR/rfC6DzkRc2gJVhk
3XPaZykCnqIh3Q==
-----END CERTIFICATE-----
Generated at Wed Aug 26 04:52:06 2026 by rpki-client