Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
File: OVHxhNTfiFYEykfFOX4CWi2y_Po.mft (raw, json)
Hash identifier: uzWADFs7gohLp4avXjlByKryiVJXkIlNz7BcN9RjbA8=
Subject key identifier: B9:40:6E:C8:61:FB:EA:8F:5C:E9:CF:7C:71:6B:43:4B:2F:37:D3:65
Authority key identifier: 39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
Certificate issuer: /CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Certificate serial: 01A0D682EA4919FA86E6BAB15728B271F096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
Manifest number: 02BC
Signing time: Fri 25 Sep 2026 03:01:38 +0000
Manifest this update: Fri 25 Sep 2026 03:01:38 +0000
Manifest next update: Sat 26 Sep 2026 03:01:38 +0000
Files and hashes: 1: OVHxhNTfiFYEykfFOX4CWi2y_Po.crl (hash: hnL32dRz4Jpi7bcBylNNu5S5qamdnHA8CU22+77Vqxk=)
2: ZsafJkeU2d25ljSpLy_TemriX90.roa (hash: IVTCj8e85875t2DlkKQvBEjaDXUkRlUkp5L1m5Z/Zpg=)
3: vQz4q1ws7qmK1pQ1vuBmocY7Bpc.asa (hash: L/e3mOSuN9cfAoJ9MDMZ8ASC7Sltzw7RnyO6VofFQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:ea:49:19:fa:86:e6:ba:b1:57:28:b2:71:f0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Validity
Not Before: Sep 25 03:01:38 2026 GMT
Not After : Sep 26 03:01:38 2026 GMT
Subject: CN=b9406ec861fbea8f5ce9cf7c716b434b2f37d365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:2b:89:35:a3:53:79:b5:e7:49:8e:d0:92:
bf:f4:62:ab:95:f2:ac:0c:4b:61:4f:e2:82:aa:b7:
8d:5a:fb:3d:08:2a:eb:17:47:9a:ff:19:c2:cb:ea:
60:1d:1a:44:0e:1b:c8:c7:5e:ef:d7:5c:fb:be:9c:
1a:a2:44:fb:ff:0c:e1:0f:71:50:44:76:f1:94:a7:
14:22:8d:8c:87:ce:d6:8e:5b:fe:5f:90:b3:8d:b5:
be:cd:6d:e6:7d:a1:53:a0:de:d0:d7:34:db:81:42:
c8:57:dc:d6:2a:bc:3f:9f:a4:dc:cf:ac:67:b2:cc:
74:fd:7d:07:0c:dd:54:4c:90:df:e0:d9:69:38:be:
d9:f1:f4:14:56:dc:a4:4d:8f:44:df:d2:6d:4f:fb:
92:a3:88:b5:6a:19:54:e7:93:58:1c:73:cf:a5:d2:
bf:dc:2c:9e:6c:37:d1:1b:a2:9f:1a:0f:a0:08:7d:
87:a4:b3:e4:e5:41:ed:c3:6a:43:26:1b:e0:8b:1e:
7c:a0:86:08:6f:fa:5d:4d:7d:cd:7e:1c:5b:b8:14:
44:9d:cb:20:03:fa:7a:93:7e:3f:7e:b2:0a:0d:9e:
80:d8:23:ac:c1:8b:37:fe:bc:67:85:a4:dd:83:83:
d0:a1:ec:67:a7:88:cc:f9:4c:11:f3:4f:4b:bc:14:
03:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:40:6E:C8:61:FB:EA:8F:5C:E9:CF:7C:71:6B:43:4B:2F:37:D3:65
X509v3 Authority Key Identifier:
keyid:39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1d:bb:42:e9:d5:01:ff:9e:c7:dc:3a:70:64:23:a9:c4:7b:
e6:98:ab:b4:2a:42:e0:c6:ef:2c:41:b8:31:ee:ce:c0:ee:ad:
1b:bf:e8:80:10:f7:3d:66:2a:f8:c2:ad:2f:e6:34:a6:15:28:
3e:ee:f1:13:14:da:81:6a:a3:f1:4c:53:89:01:7f:d4:31:7f:
3f:53:86:65:a9:8e:0b:13:06:13:af:ee:b8:0b:e2:0f:6a:19:
fb:7f:f0:d9:9c:59:a4:9f:52:cd:84:e6:8f:7f:63:65:89:6d:
e5:78:a5:f9:86:bb:aa:72:de:f5:b4:34:06:2f:85:c1:be:7e:
33:b7:a4:bc:2e:d0:e4:da:1a:be:55:ec:b5:e7:a6:c4:f2:f2:
b4:1c:4a:1d:3d:97:d5:22:bd:c7:1e:fa:8c:8b:b5:5c:69:8c:
1d:f2:de:4f:e0:43:0e:8c:38:26:6d:ae:30:e6:77:72:0a:49:
0b:92:3d:5d:e2:5a:e2:66:fd:89:e2:b8:7f:13:00:0e:1b:8d:
7c:d6:e8:1b:3d:73:9e:73:2e:13:dd:81:d1:aa:6d:6f:4f:00:
b8:88:37:4b:60:6f:da:d5:f9:78:0c:0f:fc:ce:40:68:31:4a:
c7:d1:12:d9:ef:7e:e3:0b:8c:79:d0:f1:75:95:c6:13:76:fa:
e9:ca:d5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:56:50 2026 by rpki-client