Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
File: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json)
Hash identifier: dP6gvke3gRFcXsDPLjt8DZEl3ukr6B06ITRubKLOjjY=
Subject key identifier: CC:D2:58:D9:E7:5F:EB:1A:93:A7:2B:60:EE:4C:DA:5B:FC:77:09:5E
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Certificate issuer: /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial: 019D1A5AD73E467BD0A25ABA36F17C0E55E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
Manifest number: 0DD9
Signing time: Mon 23 Mar 2026 11:00:53 +0000
Manifest this update: Mon 23 Mar 2026 11:00:53 +0000
Manifest next update: Tue 24 Mar 2026 11:00:53 +0000
Files and hashes: 1: fs8d2893qiZikthsq_-JlA6ljMA.roa (hash: ZrsMMWfWT5ZYVuIhEglHV6ViI9TadV+uTXWR+dIXLo4=)
2: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: g4JazOPc7UWEiYdWO3qHbqiUurBnvHUeIjFeRqzrQA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 09:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:5a:d7:3e:46:7b:d0:a2:5a:ba:36:f1:7c:0e:55:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Validity
Not Before: Mar 23 11:00:53 2026 GMT
Not After : Mar 24 11:00:53 2026 GMT
Subject: CN=ccd258d9e75feb1a93a72b60ee4cda5bfc77095e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:32:ff:6f:ae:b7:e3:2f:fe:10:45:4c:96:
66:c1:cb:57:55:76:53:d3:de:ec:fe:98:34:10:de:
bd:32:15:3d:30:27:fd:81:43:4b:9b:87:97:6b:98:
69:64:c9:7e:16:ea:40:01:2c:ce:0e:06:ae:26:14:
ee:5b:98:94:a8:35:51:57:a0:a9:f3:b1:05:e5:e7:
cf:5f:8f:a3:71:1f:72:9e:91:9f:9a:34:6a:48:65:
b6:5b:a6:80:b5:1b:a8:d5:14:ad:da:ea:0a:c5:12:
31:4b:92:70:a6:55:8c:fc:89:da:b4:93:20:be:ca:
59:2f:e6:23:df:5d:77:8b:f6:67:34:9a:86:0c:86:
77:aa:41:77:4c:53:84:77:12:2a:74:1f:c2:49:2f:
f2:4c:55:4f:aa:90:2c:c2:31:01:03:12:53:da:fd:
b5:ef:b6:51:c0:3f:17:66:71:23:03:3b:dc:16:b9:
f7:f8:f0:bd:20:f3:c1:4d:7d:aa:ef:37:56:b8:9e:
43:04:4f:97:ed:49:42:81:0f:bf:d1:94:9d:70:f6:
d1:50:b2:49:83:5f:5d:66:5d:85:0b:25:2d:ad:c0:
02:20:1a:8f:ea:e0:8c:39:66:07:62:83:32:75:e3:
97:d2:af:fd:c4:76:43:4e:c7:03:42:00:02:2c:60:
a4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D2:58:D9:E7:5F:EB:1A:93:A7:2B:60:EE:4C:DA:5B:FC:77:09:5E
X509v3 Authority Key Identifier:
keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:75:9f:3d:28:5e:af:59:9e:2f:74:a7:bc:25:d6:d0:15:62:
d3:35:78:72:61:7d:87:cf:2a:7a:15:c1:b4:6a:e5:05:ee:88:
d9:9a:1c:b0:da:d2:42:50:e2:5b:59:09:d0:94:a3:ab:01:91:
15:f4:65:ac:28:3c:2b:9f:41:5d:5f:52:0b:88:d8:b8:3f:ec:
d9:1d:6e:52:3e:8f:94:e0:89:e5:1e:ca:1f:7b:75:56:83:40:
b6:45:d2:9a:28:2c:f5:06:41:de:ed:0e:43:ee:94:4e:3f:0a:
0a:c8:c9:97:63:8c:fb:51:08:0e:d6:47:e4:b7:69:06:ac:ad:
0c:3c:02:a8:c9:38:1c:b7:2e:57:a1:f7:a0:23:48:6e:a7:9b:
13:8d:68:54:c7:73:f5:e9:84:c7:9a:43:a6:46:3a:fb:09:e9:
11:d6:08:3d:a2:8f:f9:bf:52:67:6f:b7:a0:fa:46:83:59:c1:
e6:d1:2a:cd:f6:32:ad:73:58:cb:e6:63:68:0b:76:68:cd:c2:
81:db:fa:83:2a:b5:a6:31:a2:7b:38:6e:81:c9:b4:58:8a:af:
d1:32:d1:a0:11:1b:cd:29:c8:a6:d5:25:52:70:03:12:80:39:
af:fe:53:ff:ce:6d:ae:3f:b9:73:66:13:5f:9c:43:7b:ae:2f:
82:93:04:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0aWtc+RnvQolq6NvF8DlXnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZjUxNmJmNDIyMTQwODZkYjM5ODQ3ZjlmNTYzYjRjZjRh
MGZmNDMwHhcNMjYwMzIzMTEwMDUzWhcNMjYwMzI0MTEwMDUzWjAzMTEwLwYDVQQD
EyhjY2QyNThkOWU3NWZlYjFhOTNhNzJiNjBlZTRjZGE1YmZjNzcwOTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTAy/2+ut+Mv/hBFTJZmwctXVXZT
097s/pg0EN69MhU9MCf9gUNLm4eXa5hpZMl+FupAASzODgauJhTuW5iUqDVRV6Cp
87EF5efPX4+jcR9ynpGfmjRqSGW2W6aAtRuo1RSt2uoKxRIxS5JwplWM/InatJMg
vspZL+Yj3113i/ZnNJqGDIZ3qkF3TFOEdxIqdB/CSS/yTFVPqpAswjEBAxJT2v21
77ZRwD8XZnEjAzvcFrn3+PC9IPPBTX2q7zdWuJ5DBE+X7UlCgQ+/0ZSdcPbRULJJ
g19dZl2FCyUtrcACIBqP6uCMOWYHYoMydeOX0q/9xHZDTscDQgACLGCkPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzSWNnnX+sak6crYO5M2lv8dwleMB8GA1UdIwQY
MBaAFKL1Fr9CIUCG2zmEf59WO0z0oP9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kMWRmZDYtY2NkZi00NjIxLWI0NTQt
NmUzZmE2MmNkMmRmLzEvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9kMWRmZDYtY2NkZi00NjIxLWI0NTQtNmUzZmE2MmNkMmRm
LzEvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnWfPShe
r1meL3SnvCXW0BVi0zV4cmF9h88qehXBtGrlBe6I2ZocsNrSQlDiW1kJ0JSjqwGR
FfRlrCg8K59BXV9SC4jYuD/s2R1uUj6PlOCJ5R7KH3t1VoNAtkXSmigs9QZB3u0O
Q+6UTj8KCsjJl2OM+1EIDtZH5LdpBqytDDwCqMk4HLcuV6H3oCNIbqebE41oVMdz
9emEx5pDpkY6+wnpEdYIPaKP+b9SZ2+3oPpGg1nB5tEqzfYyrXNYy+ZjaAt2aM3C
gdv6gyq1pjGiezhugcm0WIqv0TLRoBEbzSnIptUlUnADEoA5r/5T/85trj+5c2YT
X5xDe64vgpMEsQ==
-----END CERTIFICATE-----
Generated at Mon Mar 23 15:47:55 2026 by rpki-client