Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
File: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft (raw, json)
Hash identifier: 9OCQ7gGGs8VidYcz8iXZE+n8XSF8Xo6J685HkjKKfBM=
Subject key identifier: 05:41:EE:FA:9B:B1:5B:1E:43:41:34:81:99:6A:D6:2D:E0:A1:DC:A8
Authority key identifier: 3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
Certificate issuer: /CN=3afb9f43a46f059827a9dec366d1496d66089134
Certificate serial: 019D3909C1A3265832FCB88BDC83996ADED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
Manifest number: C3
Signing time: Sun 29 Mar 2026 10:00:33 +0000
Manifest this update: Sun 29 Mar 2026 10:00:33 +0000
Manifest next update: Mon 30 Mar 2026 10:00:33 +0000
Files and hashes: 1: 6tfL7A5QJDSI_Y55TqUNwh3A628.asa (hash: 0PnmZojaOL/sDpXqZikBUmwmF7Qen3eJCXfg4rlV4OA=)
2: MoR6SkpnvsZ5xUQbC_xT6iFdNJA.roa (hash: 3qsvfMfu5j45cYgKSYmM4TYZxxauxXv6UP44ZBS48lA=)
3: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl (hash: Fs0nL6zoi/vsq+FMljX/k+/LtS4tBhGP+2icLQjtyQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c1:a3:26:58:32:fc:b8:8b:dc:83:99:6a:de:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afb9f43a46f059827a9dec366d1496d66089134
Validity
Not Before: Mar 29 10:00:33 2026 GMT
Not After : Mar 30 10:00:33 2026 GMT
Subject: CN=0541eefa9bb15b1e43413481996ad62de0a1dca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:65:f1:6b:19:28:24:c8:a8:0e:16:44:96:5e:
07:3d:8e:5c:e9:9c:95:95:a7:95:5a:8d:f0:34:b2:
52:09:c0:8d:03:32:d0:9d:53:fb:b8:ee:51:e2:6f:
a8:a7:6f:42:8b:15:b2:8c:e5:02:14:94:ce:6c:49:
f7:3d:43:4a:7d:bc:b1:56:bb:54:a0:cd:92:c2:90:
35:5c:8c:56:c4:b1:eb:c6:c0:6c:d1:3c:55:4e:8d:
89:b1:2b:1e:bb:80:a4:a1:0c:e8:3b:ca:a3:c4:c0:
3d:5d:b4:6d:11:cb:f2:5b:d3:d3:04:a8:7e:81:f8:
76:cc:b5:dc:7b:ef:17:3d:d6:70:4f:45:83:ca:2f:
be:16:64:0b:3d:27:5b:2f:98:46:a4:eb:73:d6:ff:
e5:e9:c8:12:40:6e:83:b5:18:96:b7:55:c6:65:85:
13:3b:9d:75:72:59:f7:9e:18:88:31:cc:2f:49:d9:
87:49:c8:3f:23:0c:21:b1:2f:3c:c3:9b:12:2c:d2:
db:55:d5:d9:ae:29:7f:4d:da:d0:0b:23:90:01:f8:
b7:a6:7d:6a:fe:ec:76:a5:57:b7:22:23:4f:03:c9:
89:a5:e8:56:18:8f:c0:4a:47:2a:36:71:9c:a9:5d:
4c:27:c7:e2:f8:ce:9a:62:98:25:1e:64:db:27:2b:
d2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:41:EE:FA:9B:B1:5B:1E:43:41:34:81:99:6A:D6:2D:E0:A1:DC:A8
X509v3 Authority Key Identifier:
keyid:3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:79:13:fb:a3:91:29:08:fb:98:2f:f3:0e:7f:be:19:71:ef:
8c:3b:02:13:3b:33:1d:88:2a:e7:d7:9e:e7:37:c1:53:d6:e5:
55:bd:f6:2f:fd:52:7b:18:24:79:03:38:e7:c7:9d:f4:a2:f9:
3f:0b:de:c7:10:66:74:04:90:7d:9f:92:4d:4c:06:bc:51:ec:
19:22:d8:57:8b:a7:1c:bf:35:6d:63:ec:71:5f:76:7c:89:a1:
82:ce:79:9f:49:dd:e6:bc:4c:3e:91:f1:d6:00:b7:d4:85:b7:
dd:c9:86:ed:a8:bf:f2:b4:bd:4e:d4:f2:af:ed:e2:97:78:26:
81:5d:9b:f5:7c:0b:09:eb:e9:6f:6f:b3:27:b0:a7:10:db:d9:
7a:60:23:f1:29:08:f5:27:d7:30:5d:76:03:6a:f2:21:af:2f:
73:83:e9:db:e3:9f:b9:a8:cd:f1:07:16:63:19:b9:ff:3b:b4:
86:19:9c:44:14:7e:66:a6:d9:63:4a:3f:e4:40:ad:6c:12:d0:
d6:c8:7a:67:6c:76:50:b3:3b:6c:13:0a:90:65:96:7b:31:2b:
78:8d:a3:44:b1:ab:9a:04:41:8f:08:5c:8f:ee:28:fb:18:4d:
61:0a:b1:22:55:5c:c7:22:77:b5:c1:82:6c:c0:8d:73:a4:54:
de:b0:b8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:10 2026 by rpki-client