Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
File: OVHxhNTfiFYEykfFOX4CWi2y_Po.mft (raw, json)
Hash identifier: 0SIS/h6Ulxdz0jVHR/pSlJOMjvKhX8tRGTZC/BelZ1A=
Subject key identifier: 33:97:C4:BF:CC:72:10:75:48:E3:80:6F:4F:D7:1F:2D:72:DC:21:AC
Authority key identifier: 39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
Certificate issuer: /CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Certificate serial: 019CA8A139EFC031A1C2267CB7CE8CB4DD88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
Manifest number: 92
Signing time: Sun 01 Mar 2026 09:01:04 +0000
Manifest this update: Sun 01 Mar 2026 09:01:04 +0000
Manifest next update: Mon 02 Mar 2026 09:01:04 +0000
Files and hashes: 1: OVHxhNTfiFYEykfFOX4CWi2y_Po.crl (hash: SF5lF7TD5cwe+i4EKdLJ+mehGG2M+8KinzksDhb/cws=)
2: ZsafJkeU2d25ljSpLy_TemriX90.roa (hash: IVTCj8e85875t2DlkKQvBEjaDXUkRlUkp5L1m5Z/Zpg=)
3: vQz4q1ws7qmK1pQ1vuBmocY7Bpc.asa (hash: L/e3mOSuN9cfAoJ9MDMZ8ASC7Sltzw7RnyO6VofFQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a1:39:ef:c0:31:a1:c2:26:7c:b7:ce:8c:b4:dd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Validity
Not Before: Mar 1 09:01:04 2026 GMT
Not After : Mar 2 09:01:04 2026 GMT
Subject: CN=3397c4bfcc72107548e3806f4fd71f2d72dc21ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:82:8e:8f:a4:db:10:c1:6b:fd:2d:c5:46:87:
a3:43:34:d0:f7:bd:dc:26:5b:70:e8:d8:1a:44:7f:
0a:2b:fe:18:66:9a:7a:df:9f:69:89:c8:52:6e:b0:
ab:94:99:63:cd:6f:35:6a:5b:eb:a0:54:08:ec:6d:
20:c9:df:d4:92:64:50:09:1f:db:ea:42:8f:9a:56:
71:a9:db:a0:f6:a8:c5:6b:a1:a9:f0:3a:c9:c5:31:
68:f0:86:7d:44:0f:c3:7b:37:da:15:f0:fa:8d:34:
6b:74:16:61:b5:3c:f4:8d:48:11:40:46:63:31:a8:
a2:ea:95:6a:05:8f:1c:b1:14:c0:7c:0d:15:e8:bf:
b2:8b:e8:53:98:71:8f:62:6d:7d:10:02:0f:2c:01:
ec:1c:3a:52:e6:03:27:7f:f5:2b:67:5d:ae:26:6a:
9f:f8:f6:18:c4:51:89:d4:88:6b:4b:8e:b2:0f:bd:
b4:8b:cc:6b:ab:4a:fe:0c:da:0d:20:df:9a:4c:e8:
6a:8e:55:7e:e7:0c:2b:12:6f:d1:6c:0b:e3:ce:38:
e8:22:8b:40:45:59:d3:03:03:65:14:8a:69:2b:9d:
e8:cf:47:26:ef:03:95:a4:34:da:78:fe:2a:a5:c8:
a8:99:1e:bb:65:f3:d7:42:03:3e:b3:f0:ab:ed:6c:
b1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:97:C4:BF:CC:72:10:75:48:E3:80:6F:4F:D7:1F:2D:72:DC:21:AC
X509v3 Authority Key Identifier:
keyid:39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:32:aa:72:51:c1:05:64:ba:39:c6:2d:2e:16:88:fe:0c:fa:
22:61:56:a6:8f:55:d7:da:08:2e:43:32:e4:b9:02:dc:8a:df:
6a:7c:29:eb:2c:77:ff:d8:a0:15:57:04:c0:5a:ec:c4:16:e8:
85:a4:b2:24:d2:af:44:13:b8:c2:dc:b0:6e:90:ef:72:08:6c:
fc:29:5a:2e:d6:fc:13:e1:9f:a0:89:ee:12:a0:fd:22:b5:80:
6a:40:c9:1c:a2:64:e1:7c:b7:6c:b2:10:4c:c7:24:ca:21:fd:
13:b7:99:c0:70:bf:7d:2b:a9:83:8d:68:b5:c5:54:1d:7b:3b:
a5:da:33:24:68:bb:30:82:50:45:24:f4:2d:04:df:9a:6f:40:
f5:55:89:61:54:55:b8:bb:a9:a5:6b:4b:91:40:63:6c:76:c1:
c0:00:a0:bd:2d:17:c6:49:e3:a6:1f:fe:3f:df:c0:1a:f2:92:
57:a7:be:74:4d:cc:fb:e4:0a:97:26:ed:1f:96:ea:aa:c6:1c:
72:55:cf:e2:56:0e:49:1d:39:92:41:5b:7a:3e:fe:cb:6e:59:
ba:3d:8f:7b:9d:ad:b6:05:a4:b6:d3:b2:0d:dd:4a:d0:12:33:
26:1b:0e:05:0f:6f:3a:03:59:07:0f:48:e8:18:79:52:1a:83:
e2:72:33:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:39:56 2026 by rpki-client