Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
File: OVHxhNTfiFYEykfFOX4CWi2y_Po.mft (raw, json)
Hash identifier: x9ssr2O/VwP7e/yXaeJoDV2f5Vi/tcK7jqgNZyejkXE=
Subject key identifier: 17:26:A1:BF:A6:12:08:85:A6:EB:6A:CD:81:75:9C:93:6F:D7:5B:2A
Authority key identifier: 39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
Certificate issuer: /CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Certificate serial: 01A0C143A615EC5BEB6C777D1EA140EE174F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
Manifest number: 02B1
Signing time: Mon 21 Sep 2026 00:00:31 +0000
Manifest this update: Mon 21 Sep 2026 00:00:31 +0000
Manifest next update: Tue 22 Sep 2026 00:00:31 +0000
Files and hashes: 1: OVHxhNTfiFYEykfFOX4CWi2y_Po.crl (hash: LGOK0uH+9vRqbQ1NN8OCZw1DjU0ImH9J1PGzyQxom90=)
2: ZsafJkeU2d25ljSpLy_TemriX90.roa (hash: IVTCj8e85875t2DlkKQvBEjaDXUkRlUkp5L1m5Z/Zpg=)
3: vQz4q1ws7qmK1pQ1vuBmocY7Bpc.asa (hash: L/e3mOSuN9cfAoJ9MDMZ8ASC7Sltzw7RnyO6VofFQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:43:a6:15:ec:5b:eb:6c:77:7d:1e:a1:40:ee:17:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Validity
Not Before: Sep 21 00:00:31 2026 GMT
Not After : Sep 22 00:00:31 2026 GMT
Subject: CN=1726a1bfa6120885a6eb6acd81759c936fd75b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6f:7a:28:44:4b:cc:fc:5e:7f:12:09:8f:ba:
25:d0:ba:e3:9e:66:87:aa:6f:8d:fa:ab:bc:3e:c0:
d5:ed:09:5d:5d:51:5d:97:72:e5:3a:47:76:e0:8e:
e0:cf:ca:60:75:ea:87:76:a5:4b:ed:b2:95:8e:1f:
1e:c3:b3:0c:69:c3:74:6b:13:c1:43:ca:98:44:71:
1e:82:55:8b:d1:06:06:80:02:aa:e7:a6:90:b4:95:
97:e9:f4:4d:21:1b:3a:6e:dd:5d:5a:26:bd:1b:6b:
ea:26:de:51:0e:27:34:5c:4c:9a:e7:3b:87:34:2d:
fc:4a:95:4d:c6:81:3e:b0:60:a4:3c:ab:00:8f:2e:
4d:00:79:4b:af:c9:e2:18:99:fd:d6:a9:64:48:e7:
ac:e3:a9:7c:56:ad:5a:d2:64:2b:89:5e:cb:37:cb:
d5:ba:10:a1:e1:04:3b:98:c2:07:0d:67:c8:3f:2a:
fa:82:68:84:bf:92:c0:40:06:91:2f:ef:e5:05:e9:
b9:67:1d:aa:7b:2b:0f:74:38:2d:11:df:b5:53:d4:
00:40:5c:48:30:3f:4b:3d:c7:af:02:fe:4c:e1:74:
2c:0c:92:dd:73:cf:c5:d8:1b:a5:c8:37:c5:4c:b5:
77:f7:9a:26:2e:05:dc:78:f2:07:4e:76:df:ce:60:
4e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:26:A1:BF:A6:12:08:85:A6:EB:6A:CD:81:75:9C:93:6F:D7:5B:2A
X509v3 Authority Key Identifier:
keyid:39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3f:a3:ae:b9:04:ec:ac:a2:86:10:b4:82:31:1b:68:70:c6:
7c:be:5e:01:63:8f:ec:cf:3c:75:45:ad:30:89:a2:a8:e9:8d:
84:a0:11:74:2f:06:37:31:af:e0:a6:25:1e:e8:ac:8f:6d:6d:
36:20:69:bd:e7:80:13:db:8f:ab:2e:98:6b:57:9e:61:03:44:
4e:5a:fa:6e:78:72:e3:b0:75:4c:1d:d5:53:e5:2d:d8:d2:fe:
f2:85:48:8d:0d:51:9a:ce:de:b2:9d:cb:e1:67:b4:6c:3e:16:
2a:3d:ce:f8:68:39:d6:e5:01:9f:3f:2a:7d:cf:47:a2:57:a4:
0a:44:80:40:99:02:33:c2:a4:51:e3:ca:c9:3b:be:47:a6:2e:
53:4b:02:66:04:8a:7d:74:f6:b1:f8:d6:b0:fd:7b:02:6e:f2:
a7:dd:6e:6e:00:c2:24:01:04:ee:61:2a:ae:b0:a5:e8:f9:d2:
d6:bd:84:d0:81:d3:9d:36:06:78:28:54:83:ee:1c:99:38:da:
e3:82:69:ed:4c:a2:c7:85:14:a6:85:fc:92:83:78:ee:6f:4a:
b2:56:fa:5c:6c:9a:04:6e:c4:8d:4f:04:fb:d0:0f:76:7d:e9:
10:48:16:5f:3a:f1:15:22:ad:2f:cf:87:c6:bf:d1:61:87:ea:
6c:81:b8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:16:54 2026 by rpki-client