Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
File: OVHxhNTfiFYEykfFOX4CWi2y_Po.mft (raw, json)
Hash identifier: cydn2OkF8bnOLG8ogvaP5nQBInZYr9T+l4ErEiL10o8=
Subject key identifier: 8D:17:A7:12:28:14:37:B1:FF:E0:9A:FC:BB:4D:56:DD:7F:74:CF:4A
Authority key identifier: 39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
Certificate issuer: /CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Certificate serial: 019F90235EAF7C60A075C74AD1701B38B977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
Manifest number: 0213
Signing time: Thu 23 Jul 2026 18:01:04 +0000
Manifest this update: Thu 23 Jul 2026 18:01:04 +0000
Manifest next update: Fri 24 Jul 2026 18:01:04 +0000
Files and hashes: 1: OVHxhNTfiFYEykfFOX4CWi2y_Po.crl (hash: gqicVdzt81/QY+1JSyQ7leCTjzNzniNk6XJQx+MYHxk=)
2: ZsafJkeU2d25ljSpLy_TemriX90.roa (hash: IVTCj8e85875t2DlkKQvBEjaDXUkRlUkp5L1m5Z/Zpg=)
3: vQz4q1ws7qmK1pQ1vuBmocY7Bpc.asa (hash: L/e3mOSuN9cfAoJ9MDMZ8ASC7Sltzw7RnyO6VofFQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:5e:af:7c:60:a0:75:c7:4a:d1:70:1b:38:b9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Validity
Not Before: Jul 23 18:01:04 2026 GMT
Not After : Jul 24 18:01:04 2026 GMT
Subject: CN=8d17a712281437b1ffe09afcbb4d56dd7f74cf4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0b:a5:61:b4:4f:cf:da:be:91:05:83:62:f8:
83:c7:f4:b5:ff:dd:ec:93:dc:47:7c:9a:ed:ec:4e:
70:7d:06:48:9c:67:3b:57:ff:fe:60:95:50:fc:dc:
71:2b:53:6e:5c:a1:0a:95:20:48:2b:cc:fb:b5:75:
22:ff:68:ab:c9:a6:1d:71:4c:55:ee:9b:c4:c7:a3:
fb:37:81:b1:b7:7c:ea:90:e4:b6:e7:4f:f3:af:f5:
28:99:d2:d8:24:01:b3:3d:13:3f:5a:5b:53:5d:bd:
c7:a7:41:97:84:c5:ff:98:1a:c5:63:74:22:87:d0:
e0:40:92:5e:73:b8:4c:6f:b7:1c:70:a6:a4:15:6a:
0b:eb:cb:2d:38:b0:fb:f9:c6:7d:11:5f:91:5e:7e:
eb:68:d3:33:22:d4:34:2f:29:36:88:8c:58:d2:68:
31:01:4c:f1:0c:bb:bd:06:bd:39:a5:da:a1:5c:35:
5e:ce:e2:68:fb:8c:3f:be:31:54:24:88:c3:40:93:
e6:0d:9d:a8:15:73:5d:29:f2:76:cf:83:91:f2:70:
b4:c3:37:3c:0d:c3:5f:e1:29:8f:e3:57:d4:1f:cd:
f9:4a:7f:a0:0d:d9:43:3f:68:bc:70:ad:24:a8:04:
78:d5:4e:09:2e:91:84:37:f2:03:01:5a:11:6d:47:
e5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:17:A7:12:28:14:37:B1:FF:E0:9A:FC:BB:4D:56:DD:7F:74:CF:4A
X509v3 Authority Key Identifier:
keyid:39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:94:f8:b1:e1:8e:a5:de:bb:eb:7c:cf:0b:9e:7e:82:c2:33:
41:ac:56:a3:df:ab:b0:7f:90:5e:16:dc:21:de:8e:b0:ee:07:
01:72:b8:c3:2f:d8:f7:5d:9b:76:0a:14:64:9f:25:4e:fa:3e:
9c:53:ad:03:00:1a:42:8a:2f:c2:6c:3e:c6:67:4e:df:22:11:
30:eb:52:5b:76:e4:91:99:fb:77:0a:f8:67:dc:a0:82:d2:b3:
27:2d:fd:c7:9e:42:16:ee:17:82:53:a7:6e:9c:a7:b3:b4:1d:
ca:39:70:43:3a:49:a4:33:41:95:b4:2b:ea:41:60:97:00:d5:
4e:c3:60:35:30:dc:b5:3d:53:86:20:e4:42:8e:46:52:c6:b7:
f8:c4:2b:07:70:36:91:fa:a2:c3:0b:2b:9e:1b:69:73:ee:bf:
d6:05:34:25:03:62:6c:8f:e9:e3:ae:0e:18:57:70:c0:07:d0:
1e:a4:8d:29:26:77:7c:d8:61:4c:f4:28:6d:41:92:d0:9f:44:
19:7b:77:21:b3:d7:be:ee:6f:37:71:12:c8:df:a2:11:0d:48:
dc:6e:69:93:0b:7f:46:a2:b5:cf:b1:1d:ad:8c:91:00:63:5c:
d8:04:a4:45:fb:4b:1d:37:93:31:8d:75:68:1e:f8:ff:5d:c5:
10:af:24:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:50 2026 by rpki-client