Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
File: OVHxhNTfiFYEykfFOX4CWi2y_Po.mft (raw, json)
Hash identifier: YB/REu318icpt3E+qVqMsq75oi/5ohQXx8UY2xDwHjY=
Subject key identifier: 25:6D:AE:0C:EB:E3:01:01:43:1C:A3:24:7D:6D:D3:F1:A5:4C:23:A1
Authority key identifier: 39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
Certificate issuer: /CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Certificate serial: 019FA93E741C926CB83AAE5D8E38C9381CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
Manifest number: 0220
Signing time: Tue 28 Jul 2026 15:01:10 +0000
Manifest this update: Tue 28 Jul 2026 15:01:10 +0000
Manifest next update: Wed 29 Jul 2026 15:01:10 +0000
Files and hashes: 1: OVHxhNTfiFYEykfFOX4CWi2y_Po.crl (hash: nQ+cN/xXHB8DeBCZ3wq9IY9TXtiObGwtXy6LW/yEXsA=)
2: ZsafJkeU2d25ljSpLy_TemriX90.roa (hash: IVTCj8e85875t2DlkKQvBEjaDXUkRlUkp5L1m5Z/Zpg=)
3: vQz4q1ws7qmK1pQ1vuBmocY7Bpc.asa (hash: L/e3mOSuN9cfAoJ9MDMZ8ASC7Sltzw7RnyO6VofFQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:74:1c:92:6c:b8:3a:ae:5d:8e:38:c9:38:1c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Validity
Not Before: Jul 28 15:01:10 2026 GMT
Not After : Jul 29 15:01:10 2026 GMT
Subject: CN=256dae0cebe30101431ca3247d6dd3f1a54c23a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4c:84:2f:9f:ea:f3:44:67:38:4e:80:66:59:
d6:cf:6c:04:27:77:dc:43:9f:8e:48:bc:85:21:9b:
7b:3c:bf:ef:24:97:33:ab:a1:d1:49:4f:9f:cb:c9:
fb:6d:7d:76:05:d9:fb:71:e7:09:b5:68:b4:7c:c5:
a8:b1:24:9f:2f:0b:04:be:b5:f2:f4:ac:26:ef:c0:
54:f9:95:23:2f:50:e8:87:1b:f0:54:50:f7:09:be:
9a:b2:1a:6e:5b:68:17:89:04:f4:60:c8:17:91:3b:
de:37:e9:18:10:4c:79:ef:95:4e:04:c3:a7:f6:e3:
3a:56:c2:a5:8f:2f:3a:3f:6c:e5:8b:18:8c:74:28:
35:7e:41:08:66:73:20:a5:4f:8a:d1:85:ff:2b:1d:
e9:88:98:8d:7e:56:85:10:94:91:ef:af:fe:5f:f6:
7d:19:c1:24:ed:50:d5:28:4f:4d:33:d1:be:50:f7:
4a:62:4f:aa:49:48:ee:c3:da:72:39:c0:94:6c:33:
33:06:78:22:ca:09:79:e8:a3:3f:7d:11:fd:77:da:
65:1a:d2:09:1c:b8:80:69:7e:4f:60:09:85:0c:d9:
da:04:79:46:e6:01:bc:ea:d0:71:56:21:20:13:c6:
0f:85:e1:45:56:81:ab:10:eb:da:9b:5b:0e:62:dd:
42:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6D:AE:0C:EB:E3:01:01:43:1C:A3:24:7D:6D:D3:F1:A5:4C:23:A1
X509v3 Authority Key Identifier:
keyid:39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f2:9e:96:91:ff:69:57:05:36:e3:e1:56:75:c5:71:93:88:
a6:d3:fb:52:ff:a9:a3:51:f8:7d:37:39:4e:49:fe:86:ed:be:
1c:09:02:bd:82:09:15:58:64:84:1b:bc:be:22:5c:50:57:16:
70:92:40:99:0a:6d:9c:3a:f9:ff:43:71:e4:f3:7d:b8:64:ab:
4c:25:e3:3b:a4:df:9c:6d:38:ef:d3:de:eb:ef:22:df:5f:21:
10:ce:40:d7:d7:af:db:8e:e7:83:b6:be:a2:0b:17:9c:d2:aa:
58:79:43:a9:f3:6c:7e:91:25:da:f9:ca:c8:e4:b5:8a:54:9f:
79:b8:a0:df:da:8a:8e:69:35:55:2d:6f:5a:96:9a:f9:05:a6:
74:9a:cb:f1:01:e5:2a:a6:8b:3d:b1:98:19:76:57:ae:c7:cc:
04:05:7d:b6:a3:e1:5a:3b:be:96:d6:9e:08:0a:29:28:3b:73:
74:7f:9f:36:21:e5:33:e6:19:4c:b0:60:f8:8e:f8:87:d0:32:
45:2d:2f:44:24:71:10:37:24:6a:da:f5:8a:0b:31:d6:c6:45:
e6:61:94:e8:f5:74:ec:e5:d5:62:b2:f2:0c:7a:16:7f:05:ff:
cf:85:91:e5:0f:c8:97:5d:e5:14:c7:0f:7d:a9:83:05:a9:58:
7d:97:02:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPnQckmy4Oq5djjjJOBzpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NTFmMTg0ZDRkZjg4NTYwNGNhNDdjNTM5N2UwMjVhMmRi
MmZjZmEwHhcNMjYwNzI4MTUwMTEwWhcNMjYwNzI5MTUwMTEwWjAzMTEwLwYDVQQD
EygyNTZkYWUwY2ViZTMwMTAxNDMxY2EzMjQ3ZDZkZDNmMWE1NGMyM2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0yEL5/q80RnOE6AZlnWz2wEJ3fc
Q5+OSLyFIZt7PL/vJJczq6HRSU+fy8n7bX12Bdn7cecJtWi0fMWosSSfLwsEvrXy
9Kwm78BU+ZUjL1DohxvwVFD3Cb6ashpuW2gXiQT0YMgXkTveN+kYEEx575VOBMOn
9uM6VsKljy86P2zlixiMdCg1fkEIZnMgpU+K0YX/Kx3piJiNflaFEJSR76/+X/Z9
GcEk7VDVKE9NM9G+UPdKYk+qSUjuw9pyOcCUbDMzBngiygl56KM/fRH9d9plGtIJ
HLiAaX5PYAmFDNnaBHlG5gG86tBxViEgE8YPheFFVoGrEOvam1sOYt1CfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVtrgzr4wEBQxyjJH1t0/GlTCOhMB8GA1UdIwQY
MBaAFDlR8YTU34hWBMpHxTl+Alotsvz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1ZIeGhOVGZpRllFeWtmRk9YNENXaTJ5X1BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zZmQyOWItOGUzMi00ZGVkLThjOTct
NjhjNDU2NzIwOGRhLzEvT1ZIeGhOVGZpRllFeWtmRk9YNENXaTJ5X1BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8zZmQyOWItOGUzMi00ZGVkLThjOTctNjhjNDU2NzIwOGRh
LzEvT1ZIeGhOVGZpRllFeWtmRk9YNENXaTJ5X1BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPKelpH/
aVcFNuPhVnXFcZOIptP7Uv+po1H4fTc5Tkn+hu2+HAkCvYIJFVhkhBu8viJcUFcW
cJJAmQptnDr5/0Nx5PN9uGSrTCXjO6TfnG0479Pe6+8i318hEM5A19ev247ng7a+
ogsXnNKqWHlDqfNsfpEl2vnKyOS1ilSfebig39qKjmk1VS1vWpaa+QWmdJrL8QHl
KqaLPbGYGXZXrsfMBAV9tqPhWju+ltaeCAopKDtzdH+fNiHlM+YZTLBg+I74h9Ay
RS0vRCRxEDckatr1igsx1sZF5mGU6PV07OXVYrLyDHoWfwX/z4WR5Q/Il13lFMcP
famDBalYfZcCmA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:49 2026 by rpki-client