Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
File: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json)
Hash identifier: ZMWwd+5U4lS/OUORGAx+0up88oDDKwET+9yvIW08SH4=
Subject key identifier: 05:45:3D:DB:A4:29:68:36:41:A7:50:57:31:27:59:70:43:02:C5:D1
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Certificate issuer: /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial: 01A0EB8A58C7EE34D56F4625B57A77F93BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
Manifest number: 0FD3
Signing time: Tue 29 Sep 2026 05:01:47 +0000
Manifest this update: Tue 29 Sep 2026 05:01:47 +0000
Manifest next update: Wed 30 Sep 2026 05:01:47 +0000
Files and hashes: 1: fs8d2893qiZikthsq_-JlA6ljMA.roa (hash: ZrsMMWfWT5ZYVuIhEglHV6ViI9TadV+uTXWR+dIXLo4=)
2: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: gRYvibWEnZNi9VNJS3D7k03wRb+vgBIxhreuld1iRaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:8a:58:c7:ee:34:d5:6f:46:25:b5:7a:77:f9:3b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Validity
Not Before: Sep 29 05:01:47 2026 GMT
Not After : Sep 30 05:01:47 2026 GMT
Subject: CN=05453ddba429683641a75057312759704302c5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:b9:53:8c:c1:1f:26:5e:86:75:29:f3:94:
e5:7f:87:f4:5e:25:84:96:a1:3b:99:68:35:54:c1:
1f:62:65:3e:c8:3d:d8:7e:df:cd:9b:d0:f7:44:de:
95:ed:a1:18:cb:93:92:ca:dc:b6:39:41:b9:22:ec:
fb:13:36:7f:3c:c2:4d:22:25:f2:a8:fb:2b:10:ed:
57:c0:e7:57:76:80:fb:45:b8:8c:bd:38:84:9e:56:
3e:b7:1a:01:db:11:6c:6d:fc:bd:fa:bf:34:27:30:
8d:a0:ba:77:0c:e6:b6:df:0e:72:ff:15:9c:ae:5e:
32:a2:1a:f0:3f:c9:91:4e:ea:fa:ba:79:3a:f7:d3:
5a:7c:8b:78:35:07:84:b6:d6:4d:3b:c6:b2:d7:e3:
a6:49:e2:cc:d8:09:be:9f:af:29:92:ae:47:cd:05:
0f:ee:9c:1e:c4:28:12:c6:f7:9f:0c:98:e1:30:42:
f6:e7:c3:9f:8b:6b:85:1e:58:4c:5b:12:25:7d:16:
2b:60:b4:6d:78:e0:eb:5a:7a:46:ea:47:44:66:d1:
5e:84:a1:2f:20:26:34:8c:ad:85:d9:23:5f:b5:a7:
17:74:b1:a1:96:70:be:be:7a:fe:c6:d4:ad:13:f1:
b8:7d:d9:eb:83:7c:92:73:df:89:cd:9c:44:4f:a3:
56:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:45:3D:DB:A4:29:68:36:41:A7:50:57:31:27:59:70:43:02:C5:D1
X509v3 Authority Key Identifier:
keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:48:02:ba:9e:56:be:c1:24:17:24:b1:a6:8c:e0:ef:da:2b:
8f:5d:71:90:7a:bd:0c:87:0b:e9:a0:6c:33:73:66:66:5e:35:
b1:e2:2f:f3:59:df:ef:c0:09:fd:22:8a:d2:7e:c7:d9:a9:f3:
a2:bc:f7:0b:ad:ed:c0:56:fa:27:61:23:b6:cc:90:f6:22:97:
0f:9a:d4:3d:4f:4b:75:96:5d:32:66:4b:23:78:15:85:f5:d2:
d0:83:1c:f6:19:45:49:7c:0a:35:c8:d5:c9:8a:b9:a3:4d:da:
ab:b8:c2:ff:11:70:70:70:33:a7:30:52:8e:8c:db:c6:65:a8:
15:b3:90:6a:52:04:fd:b1:68:d7:dd:1e:bf:08:6a:0b:1d:59:
e9:9c:4b:96:ca:a9:5a:36:5b:da:73:50:57:1e:48:11:63:ad:
62:03:85:c0:d5:0f:ea:22:60:62:cf:7f:e0:a0:4f:67:f9:53:
85:cd:77:ea:55:75:c3:45:2e:71:fe:42:e1:ca:54:4e:47:fd:
09:76:44:0a:1b:d8:d0:4f:b4:a5:3b:73:94:5a:5b:a7:e6:85:
22:8c:4e:17:81:09:bb:d0:6c:7d:90:44:80:f8:dc:e7:d0:91:
57:32:d5:35:02:d5:04:38:44:15:15:d3:07:1c:17:35:39:ef:
f4:6f:96:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:05:29 2026 by rpki-client