Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
File: OVHxhNTfiFYEykfFOX4CWi2y_Po.mft (raw, json)
Hash identifier: 2gOr6wqCtibPcJgq1TazyX1MC6EhEtYcshZj7dze9Sg=
Subject key identifier: CA:2B:54:E3:A0:55:6E:24:DB:0A:92:C2:3F:EF:21:7C:4C:EB:67:7D
Authority key identifier: 39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
Certificate issuer: /CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Certificate serial: 01A0DA5FB1EDB308683059D411B3EC6501E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
Manifest number: 02BE
Signing time: Fri 25 Sep 2026 21:01:39 +0000
Manifest this update: Fri 25 Sep 2026 21:01:39 +0000
Manifest next update: Sat 26 Sep 2026 21:01:39 +0000
Files and hashes: 1: OVHxhNTfiFYEykfFOX4CWi2y_Po.crl (hash: gCLoLB9Hb9atAvRSYaf/CUiWFs/iQ7MlomrT+KMXm6A=)
2: ZsafJkeU2d25ljSpLy_TemriX90.roa (hash: IVTCj8e85875t2DlkKQvBEjaDXUkRlUkp5L1m5Z/Zpg=)
3: vQz4q1ws7qmK1pQ1vuBmocY7Bpc.asa (hash: L/e3mOSuN9cfAoJ9MDMZ8ASC7Sltzw7RnyO6VofFQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:b1:ed:b3:08:68:30:59:d4:11:b3:ec:65:01:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Validity
Not Before: Sep 25 21:01:39 2026 GMT
Not After : Sep 26 21:01:39 2026 GMT
Subject: CN=ca2b54e3a0556e24db0a92c23fef217c4ceb677d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:89:d8:5c:fc:94:e9:de:30:28:9d:1a:69:
ba:5d:a8:1b:5c:59:4a:e9:73:f4:e2:e7:0c:7d:3e:
3b:31:6d:fd:01:eb:92:09:12:8e:2f:53:76:51:e6:
82:3d:26:fc:71:36:a7:4e:f6:fe:5b:02:64:7d:44:
c2:ea:01:c5:3a:ad:7a:03:da:f7:af:cb:94:3b:00:
90:06:92:5d:20:62:7d:57:a0:d4:9a:2e:bf:21:17:
70:d7:55:c4:f6:cd:0b:a9:df:c2:37:ce:bc:90:05:
0d:a3:93:dd:79:81:80:70:b3:f0:9d:df:8a:55:f4:
02:41:b7:4a:94:61:04:64:45:c3:0d:6f:8b:b3:df:
a1:fc:99:ae:7e:d6:2f:9c:12:91:0c:75:9b:31:8f:
5c:07:2e:e3:45:83:9e:b8:18:50:7d:f8:31:84:ca:
8d:38:27:d3:e5:79:10:8f:98:a7:74:56:e8:98:60:
56:f1:a6:44:95:34:96:4c:03:c5:80:02:11:f6:02:
72:df:83:4d:c9:70:d1:7e:59:c0:8a:64:ca:1b:c0:
98:62:c0:d1:c2:b5:52:3e:fb:28:db:aa:e8:1c:32:
bc:fa:8a:03:94:cc:8f:8a:f7:ac:94:9c:61:99:5c:
29:d2:6a:2c:de:bf:26:c9:e8:a6:47:6c:02:0c:ca:
e0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2B:54:E3:A0:55:6E:24:DB:0A:92:C2:3F:EF:21:7C:4C:EB:67:7D
X509v3 Authority Key Identifier:
keyid:39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c0:69:23:77:62:bf:1a:31:ad:f4:5d:fb:eb:e3:c7:51:d2:
f3:3d:c5:b4:a6:26:13:89:08:c7:11:c8:de:58:53:09:27:9f:
69:f1:d5:e7:fc:da:18:db:bf:e6:c3:d7:66:ba:93:e9:01:a8:
9a:30:4a:fc:1e:54:a4:1d:bf:b3:32:2f:55:e9:7f:3a:b9:d4:
ae:a0:03:c2:b1:86:45:bd:51:63:eb:46:1d:89:9b:fb:73:88:
0b:55:52:9e:89:d9:f9:ba:ab:78:a3:52:9f:29:84:13:ee:10:
d0:20:d2:f8:e1:2c:b1:ec:79:d0:ed:30:60:a9:bc:37:f9:43:
1c:d2:d8:75:63:42:4e:7b:4f:f4:2d:d1:2c:9d:99:99:14:3f:
82:69:47:2a:19:33:7f:ba:3b:a6:bf:21:08:93:56:96:d9:55:
2c:21:ff:97:96:c7:e3:e0:e9:e7:17:84:d3:c6:2b:23:66:a0:
e5:9a:01:ca:63:2a:4b:d5:4f:e5:22:55:51:11:03:bf:f7:26:
5e:b4:7a:ee:cf:55:aa:6a:28:f0:00:23:ee:2d:c1:3d:e5:06:
ba:b8:86:48:4e:56:10:ad:86:85:14:ab:fa:12:c3:7b:21:dc:
69:34:12:e4:1b:ed:a2:89:3d:fc:07:30:b5:93:b7:cf:7b:2e:
b0:c7:ac:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaX7HtswhoMFnUEbPsZQHjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NTFmMTg0ZDRkZjg4NTYwNGNhNDdjNTM5N2UwMjVhMmRi
MmZjZmEwHhcNMjYwOTI1MjEwMTM5WhcNMjYwOTI2MjEwMTM5WjAzMTEwLwYDVQQD
EyhjYTJiNTRlM2EwNTU2ZTI0ZGIwYTkyYzIzZmVmMjE3YzRjZWI2NzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5SJ2Fz8lOneMCidGmm6XagbXFlK
6XP04ucMfT47MW39AeuSCRKOL1N2UeaCPSb8cTanTvb+WwJkfUTC6gHFOq16A9r3
r8uUOwCQBpJdIGJ9V6DUmi6/IRdw11XE9s0Lqd/CN868kAUNo5PdeYGAcLPwnd+K
VfQCQbdKlGEEZEXDDW+Ls9+h/JmuftYvnBKRDHWbMY9cBy7jRYOeuBhQffgxhMqN
OCfT5XkQj5indFbomGBW8aZElTSWTAPFgAIR9gJy34NNyXDRflnAimTKG8CYYsDR
wrVSPvso26roHDK8+ooDlMyPiveslJxhmVwp0mos3r8myeimR2wCDMrgQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMorVOOgVW4k2wqSwj/vIXxM62d9MB8GA1UdIwQY
MBaAFDlR8YTU34hWBMpHxTl+Alotsvz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1ZIeGhOVGZpRllFeWtmRk9YNENXaTJ5X1BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zZmQyOWItOGUzMi00ZGVkLThjOTct
NjhjNDU2NzIwOGRhLzEvT1ZIeGhOVGZpRllFeWtmRk9YNENXaTJ5X1BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8zZmQyOWItOGUzMi00ZGVkLThjOTctNjhjNDU2NzIwOGRh
LzEvT1ZIeGhOVGZpRllFeWtmRk9YNENXaTJ5X1BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcBpI3di
vxoxrfRd++vjx1HS8z3FtKYmE4kIxxHI3lhTCSefafHV5/zaGNu/5sPXZrqT6QGo
mjBK/B5UpB2/szIvVel/OrnUrqADwrGGRb1RY+tGHYmb+3OIC1VSnonZ+bqreKNS
nymEE+4Q0CDS+OEssex50O0wYKm8N/lDHNLYdWNCTntP9C3RLJ2ZmRQ/gmlHKhkz
f7o7pr8hCJNWltlVLCH/l5bH4+Dp5xeE08YrI2ag5ZoBymMqS9VP5SJVUREDv/cm
XrR67s9Vqmoo8AAj7i3BPeUGuriGSE5WEK2GhRSr+hLDeyHcaTQS5Bvtook9/Acw
tZO3z3susMesUw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:25:05 2026 by rpki-client