Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
File: OVHxhNTfiFYEykfFOX4CWi2y_Po.mft (raw, json)
Hash identifier: RrPH6SUCy6KsiFyyTSlGiXg1yPAVSYkyOOkdsoTO4fk=
Subject key identifier: F1:57:B6:1B:5F:56:2E:AE:78:CE:F8:3C:F9:61:B1:1F:A3:28:1F:BB
Authority key identifier: 39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
Certificate issuer: /CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Certificate serial: 019EBF91D75C07900EF657A18DC24D147B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
Manifest number: 01A7
Signing time: Sat 13 Jun 2026 06:01:06 +0000
Manifest this update: Sat 13 Jun 2026 06:01:06 +0000
Manifest next update: Sun 14 Jun 2026 06:01:06 +0000
Files and hashes: 1: OVHxhNTfiFYEykfFOX4CWi2y_Po.crl (hash: 2C2bsp4AZjFoh9Z3kdI6OgeBehCDavdsXJ+WWK4eCRM=)
2: ZsafJkeU2d25ljSpLy_TemriX90.roa (hash: IVTCj8e85875t2DlkKQvBEjaDXUkRlUkp5L1m5Z/Zpg=)
3: vQz4q1ws7qmK1pQ1vuBmocY7Bpc.asa (hash: L/e3mOSuN9cfAoJ9MDMZ8ASC7Sltzw7RnyO6VofFQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:d7:5c:07:90:0e:f6:57:a1:8d:c2:4d:14:7b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Validity
Not Before: Jun 13 06:01:06 2026 GMT
Not After : Jun 14 06:01:06 2026 GMT
Subject: CN=f157b61b5f562eae78cef83cf961b11fa3281fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:13:67:64:1a:70:f7:87:63:ed:ff:a1:3f:37:
58:10:84:d1:45:ef:ff:1b:c7:ff:e8:fa:ae:38:6a:
a2:3b:26:51:b3:10:8f:60:c4:b6:c3:8d:a3:32:32:
6a:3b:cc:5a:a3:80:b3:fd:d0:d7:b3:8f:7c:f9:df:
92:e2:21:7d:69:fd:45:84:ba:ef:b4:b6:e6:de:cd:
ef:69:91:62:a2:93:86:8e:bb:ce:24:00:52:26:f1:
2a:09:cf:8e:b4:25:4c:4f:5e:9c:f9:d5:ce:48:ba:
b6:35:9d:56:64:7d:90:8c:ef:04:f6:85:3e:5d:46:
53:c8:9b:e4:48:7b:55:0e:7a:ef:29:a3:62:12:5e:
76:5c:14:bf:f6:f7:9c:85:06:8c:bd:19:26:2f:21:
42:f5:a2:5b:c9:2a:b1:ae:2a:88:11:b9:ad:18:96:
5d:36:0d:dc:d4:0b:84:bf:88:20:ef:66:f8:39:b6:
11:36:be:2d:b7:48:29:d3:7b:f8:a4:60:34:e7:64:
e4:46:fc:5b:76:73:8b:c0:da:db:e1:bb:1e:76:91:
c0:ba:75:ed:12:9c:9a:6d:2e:46:b2:d7:6c:ec:bb:
74:9f:c5:6e:4b:b6:fb:2f:0a:4b:b6:fd:15:87:58:
de:13:c8:5f:28:07:a1:80:17:b9:90:44:32:d7:22:
c7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:57:B6:1B:5F:56:2E:AE:78:CE:F8:3C:F9:61:B1:1F:A3:28:1F:BB
X509v3 Authority Key Identifier:
keyid:39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:31:30:ae:be:ee:09:e4:5b:5e:ae:1c:f0:6f:40:26:69:f2:
ce:11:9f:5b:14:5f:56:de:1c:e8:a8:a3:1b:c4:05:24:e9:df:
2d:b1:f8:01:7e:bf:31:43:b3:a3:c7:c3:e2:a4:50:75:6d:05:
f6:4f:9a:41:35:a8:04:45:c5:fc:7d:9d:eb:3b:b6:a0:32:3f:
aa:8f:5f:a1:f3:cf:79:d4:2f:be:e3:05:a0:53:ef:7b:ec:e3:
8c:c2:4a:e8:17:38:06:f1:74:84:5b:16:9e:eb:1e:96:e5:f7:
c9:b3:65:f5:17:68:66:e8:92:09:87:d4:21:6a:dd:09:91:1c:
ea:e7:34:68:0b:f8:1a:a8:3f:96:de:10:4b:90:a9:b6:41:76:
0d:65:aa:76:c6:d4:39:85:73:70:a8:4d:43:bf:f4:cd:32:94:
c1:1e:96:37:68:a4:25:31:83:e1:11:64:38:a9:9d:09:81:0e:
cd:3c:48:c6:8c:fc:bd:fa:90:5b:ce:82:f1:f4:39:22:61:96:
2f:17:68:f5:d4:bb:34:c5:e1:06:5c:34:da:fd:df:93:34:35:
99:ff:9e:70:e2:ba:42:f4:32:69:6a:be:7f:43:2a:1a:b8:31:
d6:aa:a2:1a:0f:eb:02:f7:c4:7a:bd:24:ef:c7:4e:8e:f5:dc:
46:99:08:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:49:31 2026 by rpki-client