Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
File: rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft (raw, json)
Hash identifier: qaHT3ElPyJpybKvVzD88tX05pM9GpBVx/ivJI76lU7A=
Subject key identifier: 74:2B:3D:68:03:5A:44:08:A1:E6:FC:7D:9B:96:48:DD:2E:07:10:5B
Authority key identifier: AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C
Certificate issuer: /CN=acebf396c9adf94f84dc901656e255ce6d50660c
Certificate serial: 019D394193666C1CDBFAEAF070CC2D1DDBEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
Manifest number: 0506
Signing time: Sun 29 Mar 2026 11:01:32 +0000
Manifest this update: Sun 29 Mar 2026 11:01:32 +0000
Manifest next update: Mon 30 Mar 2026 11:01:32 +0000
Files and hashes: 1: Rr66ufKb1MLh9Wv3Z89vKrKFJI0.roa (hash: Yiy6bWp1Un5UwdmVbAZxKqnd38OQfcX3Y4LJySknw8Y=)
2: rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl (hash: JwNFdkJf+zywdk7bA0E4YzKr7p77wXl8znKxi44DnYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:93:66:6c:1c:db:fa:ea:f0:70:cc:2d:1d:db:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acebf396c9adf94f84dc901656e255ce6d50660c
Validity
Not Before: Mar 29 11:01:32 2026 GMT
Not After : Mar 30 11:01:32 2026 GMT
Subject: CN=742b3d68035a4408a1e6fc7d9b9648dd2e07105b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:51:ab:24:a1:4d:71:af:9b:46:cb:bc:43:7f:
ba:cc:83:04:c3:a6:81:fd:86:b1:e4:6e:9f:55:bd:
6c:de:dc:c5:35:d2:b8:55:25:0c:0a:4e:e1:f2:38:
c0:15:e2:67:50:1e:58:36:49:54:d7:03:c6:f3:12:
23:1f:62:51:2d:0d:14:21:cb:44:ea:5b:50:81:a3:
e4:63:a5:e5:de:ea:5d:cd:69:f1:0c:a7:f3:4c:f2:
d1:f5:88:f0:64:3c:73:a7:02:d0:4f:42:34:60:8d:
0c:7e:56:d7:20:21:9e:fd:8c:27:23:c3:a4:21:ad:
22:13:cb:c4:82:a2:6b:a8:0e:da:77:bc:bd:d1:97:
e6:f8:72:49:4b:df:1a:56:8a:bd:b8:bc:47:bc:25:
26:0c:2f:93:76:16:c1:b4:bc:c4:dc:99:36:f8:21:
2d:b5:ce:2d:fd:02:a4:1d:2e:96:42:fc:e4:21:dd:
39:e8:23:e5:57:ac:a2:40:30:23:22:05:b9:ec:e0:
79:cb:44:61:05:44:19:8d:ca:5b:02:aa:42:e2:78:
9b:41:fa:29:ab:53:38:43:8d:86:5d:7f:db:b6:67:
03:82:e5:50:8a:69:19:35:86:ee:b5:70:27:32:44:
40:e9:b7:ae:9e:5b:50:27:6f:b1:12:75:6a:dc:04:
31:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2B:3D:68:03:5A:44:08:A1:E6:FC:7D:9B:96:48:DD:2E:07:10:5B
X509v3 Authority Key Identifier:
keyid:AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4a:f5:f0:cf:72:d2:f2:6a:fd:f3:f2:ce:4f:28:65:d8:09:
fa:62:df:dd:de:8a:a6:fc:76:bd:b0:67:9e:3f:2e:bc:9d:3a:
91:6a:8f:ba:9c:46:ab:e0:d9:63:22:b5:dd:0a:f8:da:02:93:
d9:8d:22:c1:65:e7:02:19:94:55:d5:2a:4b:4c:53:23:05:e2:
90:56:6d:b7:f9:1d:04:b9:23:bc:c2:68:de:d7:73:d9:d2:f0:
12:1a:2d:a9:51:5a:3b:3d:d6:cf:6f:83:73:00:0f:b3:bc:7e:
be:26:87:15:81:cf:c2:d8:9e:c1:7b:17:fb:e2:93:94:ce:01:
43:b3:eb:32:d4:d0:72:f5:e4:57:dd:8e:18:04:12:46:ba:4d:
ca:d1:e8:50:b7:b7:cb:5d:97:66:ca:25:4d:7f:23:30:dc:84:
f8:94:37:49:83:af:35:d3:f4:22:6d:4f:51:09:e2:fe:18:1d:
9d:ce:81:42:ba:b2:49:95:fd:a9:6e:81:27:42:43:d8:41:9e:
11:22:0f:9e:fe:66:6e:fc:9e:49:43:cd:27:1a:da:18:78:89:
6c:e7:b5:cd:cb:46:12:2c:84:36:06:94:2c:c8:e9:8c:f7:2b:
f7:22:06:32:18:ff:0d:22:53:52:27:a7:e0:68:f6:3e:79:ca:
6c:14:54:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:09 2026 by rpki-client