Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
File: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft (raw, json)
Hash identifier: v++eTxhPYdx5Y6fxQrXuilOcJIKIYiLvTpojT0y9u1c=
Subject key identifier: FF:11:36:4D:2F:BB:96:C8:E2:EC:1F:76:BC:44:2B:E5:13:28:CC:BD
Authority key identifier: 3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
Certificate issuer: /CN=3afb9f43a46f059827a9dec366d1496d66089134
Certificate serial: 019F1265A3927677C71E5CAA2BF76A1D2C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
Manifest number: 01B9
Signing time: Mon 29 Jun 2026 08:01:18 +0000
Manifest this update: Mon 29 Jun 2026 08:01:18 +0000
Manifest next update: Tue 30 Jun 2026 08:01:18 +0000
Files and hashes: 1: 6tfL7A5QJDSI_Y55TqUNwh3A628.asa (hash: 0PnmZojaOL/sDpXqZikBUmwmF7Qen3eJCXfg4rlV4OA=)
2: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl (hash: 5nz1c2XQ5zOC8/cIGqb48DDN3eig2ADVoRsPUShr2Ac=)
3: eXB07PVnY6Up_99lPUFWjhQLh-0.roa (hash: +mrAOWzB21eb5SMCX4Zqqp/WLs5+1iRRt5G6w5MsOts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:a3:92:76:77:c7:1e:5c:aa:2b:f7:6a:1d:2c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afb9f43a46f059827a9dec366d1496d66089134
Validity
Not Before: Jun 29 08:01:18 2026 GMT
Not After : Jun 30 08:01:18 2026 GMT
Subject: CN=ff11364d2fbb96c8e2ec1f76bc442be51328ccbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9e:8a:1c:b4:3b:8d:f7:02:f1:71:c4:a2:e8:
b6:06:fa:05:14:32:bb:23:64:57:c9:d5:7d:4f:80:
03:5b:d0:06:d3:48:f1:69:a3:d4:9e:58:61:bf:a4:
00:91:14:f6:42:dc:cb:d6:21:15:a8:3b:6f:ad:e0:
1e:e3:40:72:eb:1f:d4:24:29:69:8f:35:83:17:0d:
3d:7a:92:7a:db:01:a6:03:32:a7:a4:4a:10:bb:e6:
4c:6c:16:ab:f7:21:97:0a:ac:e5:7e:47:9d:36:7b:
e8:75:47:7f:a2:19:82:c2:23:73:40:55:b7:25:22:
ab:e5:2e:34:b4:ed:61:25:0b:e5:a1:f5:ac:da:7c:
70:9f:cb:36:de:cc:de:f4:a9:fa:a2:b5:8d:dd:c8:
5f:3c:d0:f6:0f:ab:56:f6:c3:f0:a1:e1:fa:43:db:
1c:33:a8:59:06:87:00:ff:3b:85:7a:d1:08:be:18:
f5:f4:0f:ea:fe:9c:a1:47:51:98:39:15:26:f6:bc:
2c:6e:8d:a8:7e:32:65:13:25:09:15:35:fc:18:fd:
b9:ef:dd:24:b1:24:92:5a:3c:38:b9:ca:39:e7:56:
1e:df:7b:ba:87:fc:4a:37:b4:35:bb:7a:ff:00:c9:
4b:e0:57:bc:c5:70:16:5e:8b:8f:f4:c5:82:c7:8e:
37:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:11:36:4D:2F:BB:96:C8:E2:EC:1F:76:BC:44:2B:E5:13:28:CC:BD
X509v3 Authority Key Identifier:
keyid:3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:de:3c:22:94:e1:78:b6:a0:45:4a:7d:0a:4d:a2:80:ce:aa:
27:ee:3d:fb:34:77:fb:66:c1:92:fe:31:3b:91:2d:40:34:0b:
8e:a9:34:18:82:ac:b9:0a:1e:63:e1:00:ef:69:22:d4:50:52:
30:7d:1a:79:b9:8c:65:79:d3:34:a0:d5:9f:ae:e1:ba:fd:ec:
ba:2d:1a:e6:b5:c8:29:6f:41:c8:4d:5e:9e:e4:ad:1c:0f:62:
ff:af:29:df:a1:5a:31:83:91:d8:4a:04:86:93:fa:36:bf:e4:
2e:b5:68:39:67:a4:88:fa:b7:71:44:7c:61:a2:8d:07:0b:cb:
a1:c0:f8:ed:2e:e8:dd:59:9d:97:05:6f:66:e2:ab:b0:02:8b:
f6:30:bc:15:0a:06:19:0b:b0:6e:a8:d4:b0:63:fb:ce:34:fc:
68:de:82:2b:e3:55:5e:21:40:dd:fe:9e:ad:6a:02:1f:92:b0:
3d:06:2c:1f:75:5e:bb:ff:53:fa:d9:c3:26:84:ad:18:b4:01:
8a:5a:2c:e8:82:72:11:23:9b:b3:b1:a4:f5:36:b1:1f:35:72:
6b:1e:f3:a2:96:11:2f:26:69:0c:4b:f4:e2:04:a7:c2:92:8d:
01:8a:94:5f:18:e7:7d:e0:60:7a:a7:48:3d:16:0a:26:f2:c8:
ab:1a:79:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SZaOSdnfHHlyqK/dqHSxXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZmI5ZjQzYTQ2ZjA1OTgyN2E5ZGVjMzY2ZDE0OTZkNjYw
ODkxMzQwHhcNMjYwNjI5MDgwMTE4WhcNMjYwNjMwMDgwMTE4WjAzMTEwLwYDVQQD
EyhmZjExMzY0ZDJmYmI5NmM4ZTJlYzFmNzZiYzQ0MmJlNTEzMjhjY2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Z6KHLQ7jfcC8XHEoui2BvoFFDK7
I2RXydV9T4ADW9AG00jxaaPUnlhhv6QAkRT2QtzL1iEVqDtvreAe40By6x/UJClp
jzWDFw09epJ62wGmAzKnpEoQu+ZMbBar9yGXCqzlfkedNnvodUd/ohmCwiNzQFW3
JSKr5S40tO1hJQvlofWs2nxwn8s23sze9Kn6orWN3chfPND2D6tW9sPwoeH6Q9sc
M6hZBocA/zuFetEIvhj19A/q/pyhR1GYORUm9rwsbo2ofjJlEyUJFTX8GP25790k
sSSSWjw4uco551Ye33u6h/xKN7Q1u3r/AMlL4Fe8xXAWXouP9MWCx443RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8RNk0vu5bI4uwfdrxEK+UTKMy9MB8GA1UdIwQY
MBaAFDr7n0OkbwWYJ6new2bRSW1mCJE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3Z1ZlE2UnZCWmducWQ3RFp0RkpiV1lJa1RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80MjJlOTktYWY1ZS00MmQ3LTkwNWUt
NzE5M2UxYjA2NmMzLzEvT3Z1ZlE2UnZCWmducWQ3RFp0RkpiV1lJa1RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC80MjJlOTktYWY1ZS00MmQ3LTkwNWUtNzE5M2UxYjA2NmMz
LzEvT3Z1ZlE2UnZCWmducWQ3RFp0RkpiV1lJa1RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD948IpTh
eLagRUp9Ck2igM6qJ+49+zR3+2bBkv4xO5EtQDQLjqk0GIKsuQoeY+EA72ki1FBS
MH0aebmMZXnTNKDVn67huv3sui0a5rXIKW9ByE1enuStHA9i/68p36FaMYOR2EoE
hpP6Nr/kLrVoOWekiPq3cUR8YaKNBwvLocD47S7o3VmdlwVvZuKrsAKL9jC8FQoG
GQuwbqjUsGP7zjT8aN6CK+NVXiFA3f6erWoCH5KwPQYsH3Veu/9T+tnDJoStGLQB
ilos6IJyESObs7Gk9TaxHzVyax7zopYRLyZpDEv04gSnwpKNAYqUXxjnfeBgeqdI
PRYKJvLIqxp5Dg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:45 2026 by rpki-client