Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
File: OVHxhNTfiFYEykfFOX4CWi2y_Po.mft (raw, json)
Hash identifier: Gpyad/EKX9+TV943mMQZoCWa9WRNDZlKt9tsP0otHJw=
Subject key identifier: 1A:12:60:7C:56:DB:4B:21:F3:86:DC:DA:B8:F1:B3:28:9C:05:9A:DC
Authority key identifier: 39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
Certificate issuer: /CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Certificate serial: 01A1DF153BF5C086C8C8E34906CEF57E20ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
Manifest number: 0345
Signing time: Sun 15 Nov 2026 12:01:13 +0000
Manifest this update: Sun 15 Nov 2026 12:01:13 +0000
Manifest next update: Mon 16 Nov 2026 12:01:13 +0000
Files and hashes: 1: OVHxhNTfiFYEykfFOX4CWi2y_Po.crl (hash: 4SyxImAgOMifIQOx22pNf5w4G/mPdANrUXJSRvrscMQ=)
2: ZsafJkeU2d25ljSpLy_TemriX90.roa (hash: IVTCj8e85875t2DlkKQvBEjaDXUkRlUkp5L1m5Z/Zpg=)
3: vQz4q1ws7qmK1pQ1vuBmocY7Bpc.asa (hash: L/e3mOSuN9cfAoJ9MDMZ8ASC7Sltzw7RnyO6VofFQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:3b:f5:c0:86:c8:c8:e3:49:06:ce:f5:7e:20:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Validity
Not Before: Nov 15 12:01:13 2026 GMT
Not After : Nov 16 12:01:13 2026 GMT
Subject: CN=1a12607c56db4b21f386dcdab8f1b3289c059adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e2:3c:70:9e:83:ad:13:c8:d7:90:37:02:34:
f4:02:ba:59:1c:fe:0f:b8:7e:59:b2:4a:32:d7:2e:
61:90:de:ea:18:93:2a:7e:c6:6f:c3:17:33:8e:9f:
ae:cd:92:3c:f0:18:aa:dc:a1:a4:13:3a:c0:0f:16:
63:1a:25:3d:77:4a:8a:d7:26:82:a7:4f:6f:22:d4:
3f:54:2e:42:c5:f1:89:c3:06:c9:5f:33:c8:e2:c2:
ea:81:d7:e6:0c:d2:9c:7b:a8:fd:35:d3:55:35:96:
d3:50:9f:4d:06:46:79:ab:32:84:e0:6c:76:36:21:
7c:0c:be:51:91:a4:5c:cf:25:60:f3:a4:ea:af:90:
ba:44:d5:a0:d8:af:63:ae:4c:ad:7e:2f:ac:f4:19:
a9:93:ab:4e:29:dd:d6:0c:66:a3:78:9a:f6:2a:ce:
44:68:5c:cb:ae:50:36:ce:b7:de:cb:ee:0c:d2:31:
9b:3f:21:3e:e7:68:d6:fd:b3:8f:45:e3:64:fa:d3:
8a:1e:71:c0:45:41:65:96:dc:71:f7:40:2b:79:d9:
16:d6:42:0b:c7:cc:3f:d4:fe:ca:6e:6c:5a:59:94:
c3:fc:68:6f:a2:e6:c0:95:6e:f2:fb:13:0f:dd:e0:
07:8c:47:a5:38:8a:d4:09:33:84:f0:74:ef:16:22:
1f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:12:60:7C:56:DB:4B:21:F3:86:DC:DA:B8:F1:B3:28:9C:05:9A:DC
X509v3 Authority Key Identifier:
keyid:39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3b:2e:76:ff:1c:c8:fc:27:91:26:6d:69:1e:cb:39:fe:6c:
89:cb:fc:da:c2:b5:92:7a:9f:ec:24:cc:7f:e6:cd:e8:b6:b5:
a0:e8:5a:68:f6:3f:11:4a:2d:65:1f:b2:c6:86:46:36:ef:d0:
39:3b:3e:bf:2b:aa:d0:5b:79:66:17:43:2f:bc:3b:a6:c3:37:
39:ee:79:9b:bb:e6:40:ae:be:b4:b0:3c:c3:f4:54:3e:a0:c0:
b5:d7:29:f2:4a:4a:d1:e6:71:eb:d6:08:3f:40:67:9b:f7:ec:
98:47:cd:69:6e:29:60:a6:17:2e:4e:7c:9a:0c:07:5f:f6:09:
48:8c:65:d5:67:59:c3:00:cf:c6:9e:50:dd:b8:e2:d5:b6:29:
a3:3c:59:00:51:2c:c4:4a:e6:8b:e8:16:71:39:c9:66:f9:50:
eb:6f:71:69:7c:0c:f6:79:36:cd:c8:d9:33:94:7e:b6:56:75:
b2:00:68:a1:49:61:e1:30:78:65:36:b3:8f:ab:c7:31:47:fb:
65:d5:75:17:cb:93:d5:f1:37:31:75:e2:47:37:95:ef:91:6e:
a0:47:3b:41:bb:f8:94:a6:98:6e:06:0a:24:c9:73:f1:ad:a8:
03:09:40:33:21:d7:ac:1d:fe:6a:d7:8a:fe:dd:8b:5c:c4:f4:
66:22:f9:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfFTv1wIbIyONJBs71fiDtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NTFmMTg0ZDRkZjg4NTYwNGNhNDdjNTM5N2UwMjVhMmRi
MmZjZmEwHhcNMjYxMTE1MTIwMTEzWhcNMjYxMTE2MTIwMTEzWjAzMTEwLwYDVQQD
EygxYTEyNjA3YzU2ZGI0YjIxZjM4NmRjZGFiOGYxYjMyODljMDU5YWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOI8cJ6DrRPI15A3AjT0ArpZHP4P
uH5Zskoy1y5hkN7qGJMqfsZvwxczjp+uzZI88Biq3KGkEzrADxZjGiU9d0qK1yaC
p09vItQ/VC5CxfGJwwbJXzPI4sLqgdfmDNKce6j9NdNVNZbTUJ9NBkZ5qzKE4Gx2
NiF8DL5RkaRczyVg86Tqr5C6RNWg2K9jrkytfi+s9Bmpk6tOKd3WDGajeJr2Ks5E
aFzLrlA2zrfey+4M0jGbPyE+52jW/bOPReNk+tOKHnHARUFlltxx90AredkW1kIL
x8w/1P7KbmxaWZTD/GhvoubAlW7y+xMP3eAHjEelOIrUCTOE8HTvFiIfcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoSYHxW20sh84bc2rjxsyicBZrcMB8GA1UdIwQY
MBaAFDlR8YTU34hWBMpHxTl+Alotsvz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1ZIeGhOVGZpRllFeWtmRk9YNENXaTJ5X1BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zZmQyOWItOGUzMi00ZGVkLThjOTct
NjhjNDU2NzIwOGRhLzEvT1ZIeGhOVGZpRllFeWtmRk9YNENXaTJ5X1BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8zZmQyOWItOGUzMi00ZGVkLThjOTctNjhjNDU2NzIwOGRh
LzEvT1ZIeGhOVGZpRllFeWtmRk9YNENXaTJ5X1BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTsudv8c
yPwnkSZtaR7LOf5sicv82sK1knqf7CTMf+bN6La1oOhaaPY/EUotZR+yxoZGNu/Q
OTs+vyuq0Ft5ZhdDL7w7psM3Oe55m7vmQK6+tLA8w/RUPqDAtdcp8kpK0eZx69YI
P0Bnm/fsmEfNaW4pYKYXLk58mgwHX/YJSIxl1WdZwwDPxp5Q3bji1bYpozxZAFEs
xErmi+gWcTnJZvlQ629xaXwM9nk2zcjZM5R+tlZ1sgBooUlh4TB4ZTazj6vHMUf7
ZdV1F8uT1fE3MXXiRzeV75FuoEc7Qbv4lKaYbgYKJMlz8a2oAwlAMyHXrB3+ateK
/t2LXMT0ZiL5bg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:14:32 2026 by rpki-client