Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
File: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft (raw, json)
Hash identifier: x8huNedmhspa3A4u1EJA6o5A1+lUuMujtBf7cdaP94w=
Subject key identifier: EB:38:8C:92:17:EC:D4:49:3A:AF:A9:FC:22:A7:1C:73:35:4E:14:1F
Authority key identifier: 3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
Certificate issuer: /CN=3afb9f43a46f059827a9dec366d1496d66089134
Certificate serial: 019E28818F6571C545F7965611865E47C716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
Manifest number: 013F
Signing time: Thu 14 May 2026 22:00:39 +0000
Manifest this update: Thu 14 May 2026 22:00:39 +0000
Manifest next update: Fri 15 May 2026 22:00:39 +0000
Files and hashes: 1: 6tfL7A5QJDSI_Y55TqUNwh3A628.asa (hash: 0PnmZojaOL/sDpXqZikBUmwmF7Qen3eJCXfg4rlV4OA=)
2: MoR6SkpnvsZ5xUQbC_xT6iFdNJA.roa (hash: 3qsvfMfu5j45cYgKSYmM4TYZxxauxXv6UP44ZBS48lA=)
3: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl (hash: 5JyV4R1wAb/PxvzQYaTouqLyrgfY7bE+sf6LInk+6ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:81:8f:65:71:c5:45:f7:96:56:11:86:5e:47:c7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afb9f43a46f059827a9dec366d1496d66089134
Validity
Not Before: May 14 22:00:39 2026 GMT
Not After : May 15 22:00:39 2026 GMT
Subject: CN=eb388c9217ecd4493aafa9fc22a71c73354e141f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:31:16:ba:11:97:9f:37:22:56:f6:93:9d:4c:
cf:36:e5:d8:47:a5:1c:0c:b5:92:11:f9:f5:11:d6:
17:59:4a:a0:a3:89:6a:3c:bd:8e:a6:c7:ca:4a:85:
34:fb:ca:45:37:02:1c:9f:15:79:18:3d:d5:20:a8:
4b:4b:3b:39:45:19:a2:9c:83:02:0d:c0:cd:07:c1:
f1:1e:a2:22:98:ba:6d:65:16:5e:60:e1:c6:80:bf:
3f:48:17:a5:ca:c2:a5:dc:b4:c7:93:05:31:60:66:
0b:b8:51:72:d4:d0:47:01:22:e2:af:84:a5:ba:0b:
45:c0:f6:22:05:42:33:10:c6:5a:57:33:84:a6:ef:
32:8d:ae:15:8d:8e:34:fe:f1:bc:f4:5a:25:c4:5a:
26:8d:01:0a:50:08:67:e6:c3:61:28:4e:0a:ce:19:
b1:52:9d:56:d7:c4:22:97:33:38:42:35:40:db:88:
ff:4e:eb:96:a6:ac:3e:08:33:44:a3:3a:a9:fb:95:
6d:ec:ae:06:f3:21:f6:12:a0:89:61:31:98:50:7a:
08:93:90:20:e3:1a:fc:7a:d3:3b:7f:3b:52:83:61:
06:24:5a:66:41:e6:2a:db:ca:d4:1e:7d:d3:ba:38:
6e:6a:8f:9d:a9:88:cd:ec:1f:f7:b7:58:62:24:7e:
02:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:38:8C:92:17:EC:D4:49:3A:AF:A9:FC:22:A7:1C:73:35:4E:14:1F
X509v3 Authority Key Identifier:
keyid:3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ea:96:fc:ee:a6:02:52:ae:b7:6a:1f:e1:84:b1:48:22:ef:
be:0e:07:93:72:c3:c5:1f:11:f0:b9:2b:01:0d:b7:2b:3e:b2:
32:43:ef:e5:19:da:97:c1:7c:68:3d:bc:97:a7:64:90:58:3f:
f7:0e:e6:ca:25:2f:23:03:a5:cb:8b:6e:35:58:5c:d3:48:48:
90:31:63:e4:cc:67:ac:51:ab:f9:36:18:da:73:b5:59:54:fc:
01:70:16:33:17:3f:32:97:db:25:f3:fe:3f:6c:51:4a:a6:f8:
e3:db:59:62:e6:76:f8:78:25:c2:60:b5:21:bd:9e:43:6d:26:
58:8a:f6:85:e6:d0:42:cf:d5:89:e4:71:de:c1:86:86:42:0d:
3b:55:c9:0b:ec:09:96:4a:2b:7e:45:d5:08:50:06:7d:c5:9e:
6b:ec:0c:42:fc:28:a3:b6:d2:62:1e:e5:13:77:b7:a1:57:4a:
18:45:df:d8:fd:fd:c6:6c:e7:de:33:f5:71:2f:2e:19:c8:99:
67:5f:fd:b7:c1:6e:0c:ff:43:be:76:fe:a7:5e:ba:4f:42:e3:
86:7a:54:9d:c7:ea:69:ae:56:2a:53:c7:91:d2:62:10:90:4c:
0f:2f:64:1d:cf:bf:82:ec:b8:ae:37:95:91:5d:45:61:27:ed:
63:65:0b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:46 2026 by rpki-client