Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
File: OVHxhNTfiFYEykfFOX4CWi2y_Po.mft (raw, json)
Hash identifier: /AfrBPbpV8VT+MbPDz0fez1lwbiyhwEhyAD4ELQGJAU=
Subject key identifier: C4:71:E8:04:81:F9:DB:4F:A8:D5:34:27:DB:11:41:D8:5D:34:65:16
Authority key identifier: 39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
Certificate issuer: /CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Certificate serial: 019D2628A9ED3508213084185842F957F399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
Manifest number: D3
Signing time: Wed 25 Mar 2026 18:01:32 +0000
Manifest this update: Wed 25 Mar 2026 18:01:32 +0000
Manifest next update: Thu 26 Mar 2026 18:01:32 +0000
Files and hashes: 1: OVHxhNTfiFYEykfFOX4CWi2y_Po.crl (hash: 0umcVhvgls5Ce+3AFH3XuRHRjEY/D57NNIqFznBSxs8=)
2: ZsafJkeU2d25ljSpLy_TemriX90.roa (hash: IVTCj8e85875t2DlkKQvBEjaDXUkRlUkp5L1m5Z/Zpg=)
3: vQz4q1ws7qmK1pQ1vuBmocY7Bpc.asa (hash: L/e3mOSuN9cfAoJ9MDMZ8ASC7Sltzw7RnyO6VofFQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:a9:ed:35:08:21:30:84:18:58:42:f9:57:f3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Validity
Not Before: Mar 25 18:01:32 2026 GMT
Not After : Mar 26 18:01:32 2026 GMT
Subject: CN=c471e80481f9db4fa8d53427db1141d85d346516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:ad:d4:39:08:e0:e1:9d:9d:fa:f8:91:d4:
ae:cb:fd:11:42:bd:f5:76:8f:b3:d5:76:48:1c:23:
1d:e6:e5:1c:2b:e8:7a:7b:35:3b:93:09:b1:54:b6:
60:d5:54:5d:e6:0d:14:0f:50:49:6b:cb:6c:f1:17:
2c:8c:e6:52:fc:a7:d6:29:c7:b0:30:0d:a1:32:e8:
5e:da:80:30:2f:34:1f:f7:1c:2c:a7:47:b6:ae:ae:
b9:ec:6f:74:8d:a4:de:90:25:20:2e:62:d9:d7:e1:
70:b8:50:e9:b0:8f:7c:60:78:3f:40:97:eb:90:6a:
e7:d8:b4:08:fc:a5:cc:9e:f5:2e:82:94:ad:3a:eb:
cb:81:2d:b4:cb:af:3e:af:fa:44:4d:d0:64:f7:07:
3b:99:aa:55:2e:0b:75:6b:27:fa:50:c2:d5:e0:26:
32:af:d8:4e:5c:37:37:9a:0d:10:f9:49:30:de:44:
a6:24:fd:95:28:ea:d3:f8:52:45:bb:31:01:3a:a5:
69:76:1c:48:21:d7:cf:03:1b:a5:12:a5:31:ca:dc:
d6:3f:30:09:3b:02:9f:16:be:62:d9:fa:84:fb:5b:
04:29:e3:21:03:15:f0:66:96:1f:b6:55:41:75:e7:
25:c2:21:3e:e8:10:83:c4:9a:72:15:a1:af:cf:ee:
d8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:71:E8:04:81:F9:DB:4F:A8:D5:34:27:DB:11:41:D8:5D:34:65:16
X509v3 Authority Key Identifier:
keyid:39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b3:2f:08:60:bb:19:10:65:93:de:ea:25:6c:0d:81:79:39:
5c:be:10:bf:b9:da:18:ad:cb:6d:f7:c7:39:36:0d:17:83:a1:
c1:8b:22:0c:52:0b:91:e7:aa:5c:f5:bc:d3:8f:c5:07:b1:b8:
bf:dd:55:a8:3e:8d:c7:7f:f2:71:63:d2:16:13:ac:47:f4:df:
f0:ad:fc:7f:a0:6d:28:2d:7b:ae:aa:98:c3:f6:86:bf:b7:b4:
9e:f8:78:24:75:de:1d:21:e5:06:58:b5:71:18:0f:4a:19:5d:
ea:cb:38:82:e2:61:21:55:a7:ba:fc:d2:31:24:bd:b6:c2:bc:
a4:37:56:ec:91:9c:12:66:f0:2b:f9:9b:f6:6b:01:eb:93:33:
fb:48:ed:43:24:04:55:21:b0:76:1a:f9:01:09:27:27:95:75:
99:d6:5b:74:a8:e7:a0:89:ba:60:3a:d9:58:9b:54:b5:ff:20:
28:38:10:60:c5:ee:25:4a:bd:0b:0e:f2:2e:5d:1a:47:64:f1:
86:b2:c4:10:52:0f:74:34:d2:f7:b1:78:a4:00:59:57:76:40:
8a:42:61:48:54:d3:42:11:a6:9b:24:5d:0c:93:12:6b:93:22:
4b:fd:ee:61:06:a3:d9:af:82:16:30:57:97:16:df:e3:4e:0d:
51:6f:69:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:23:11 2026 by rpki-client