Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
File: OVHxhNTfiFYEykfFOX4CWi2y_Po.mft (raw, json)
Hash identifier: 6w+2X1wMNvcge9gpO+pAFu1zchDvSFy6BjvINHOLmE4=
Subject key identifier: E3:64:88:88:AE:B3:E9:BB:8A:72:F8:F3:0C:E7:AD:52:8B:CF:F3:EF
Authority key identifier: 39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
Certificate issuer: /CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Certificate serial: 019E1D599F6CC6854F8A922B982F439C58DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
Manifest number: 0153
Signing time: Tue 12 May 2026 18:01:13 +0000
Manifest this update: Tue 12 May 2026 18:01:13 +0000
Manifest next update: Wed 13 May 2026 18:01:13 +0000
Files and hashes: 1: OVHxhNTfiFYEykfFOX4CWi2y_Po.crl (hash: yS4mGTIV7esiLAIi+MdSeNNc7ptAloxAT4EUpRO8vYA=)
2: ZsafJkeU2d25ljSpLy_TemriX90.roa (hash: IVTCj8e85875t2DlkKQvBEjaDXUkRlUkp5L1m5Z/Zpg=)
3: vQz4q1ws7qmK1pQ1vuBmocY7Bpc.asa (hash: L/e3mOSuN9cfAoJ9MDMZ8ASC7Sltzw7RnyO6VofFQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:9f:6c:c6:85:4f:8a:92:2b:98:2f:43:9c:58:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Validity
Not Before: May 12 18:01:13 2026 GMT
Not After : May 13 18:01:13 2026 GMT
Subject: CN=e3648888aeb3e9bb8a72f8f30ce7ad528bcff3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:31:1b:c8:51:00:04:5a:7d:da:0d:aa:6b:e4:
7a:40:b8:bd:9e:9f:a5:df:84:ad:27:85:27:8d:99:
d3:2d:03:e2:2a:e7:3d:d5:c3:63:f2:0d:c0:bc:14:
89:80:cf:ce:e9:0f:86:cb:e3:52:b4:25:35:8a:22:
03:dc:11:17:fa:fd:a0:07:a1:04:79:20:3f:52:b1:
35:83:6c:0f:14:56:28:3a:16:54:37:25:9f:9d:51:
35:ba:74:97:15:57:30:df:38:3d:9b:cd:3d:8a:3d:
fe:bc:c0:69:d9:82:15:40:1d:19:5a:ea:c5:1b:b6:
de:a8:6d:73:e3:c4:cb:40:8b:4a:89:43:ea:69:c6:
d3:03:17:5b:4b:46:89:ad:fc:8d:f5:c4:c2:16:f4:
59:b0:c1:cb:64:4e:e0:3f:7d:b1:bf:ed:e6:2e:b1:
a8:4d:b1:fd:a9:39:cd:e4:09:57:c3:3e:3d:5e:88:
70:f3:bd:7d:84:75:aa:75:ce:d5:56:a0:e3:2c:72:
61:e7:c1:b7:b7:f2:b7:cd:3f:8c:52:56:b7:1d:3c:
8d:dd:f6:d8:f4:de:a0:2b:9c:f4:c7:87:ba:45:4e:
11:d0:81:43:6a:41:59:9c:98:2d:b0:ac:1f:0b:7f:
62:87:87:48:55:b5:57:cc:37:3d:97:63:91:12:10:
3c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:64:88:88:AE:B3:E9:BB:8A:72:F8:F3:0C:E7:AD:52:8B:CF:F3:EF
X509v3 Authority Key Identifier:
keyid:39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e7:3b:1d:57:13:78:d0:74:a1:b6:7e:7b:48:77:3a:8c:4e:
97:d9:23:00:e3:15:60:bc:22:e7:19:6b:cd:bd:23:46:97:b1:
ed:12:32:a8:86:3d:1c:53:88:84:0f:ed:4f:02:60:ee:9b:c6:
dc:8e:92:58:8a:a2:23:ce:ef:63:fb:b7:51:a7:f3:f7:74:3a:
91:30:53:36:6f:82:a3:c1:35:d7:13:5b:47:78:70:0c:ed:df:
f9:b0:d9:c8:9f:aa:3c:7e:48:8c:12:a0:30:0d:a3:c4:f0:37:
b3:2c:c9:87:30:0f:b7:88:ce:8e:fd:fe:1a:01:17:45:44:d0:
fb:76:67:a5:11:ab:cf:a7:50:dc:f3:48:83:57:e1:db:f3:12:
a5:81:1b:81:98:66:32:00:d4:cc:e4:6b:b9:94:f4:1d:c0:fa:
36:81:ee:de:1d:10:01:f8:62:ab:f8:6e:ef:a0:bf:35:27:27:
18:f3:d8:d3:06:05:7b:28:d4:4f:a5:3c:90:ae:57:94:ea:d2:
2b:9a:99:dd:2f:42:13:38:d9:35:40:af:ba:16:f2:4f:9a:a7:
53:2a:77:68:72:f7:38:ff:4c:b3:f8:88:98:5a:ac:64:be:5f:
8b:e0:2c:ec:d5:d6:6b:16:29:ed:a6:55:d4:ec:a3:3f:0b:c1:
03:ac:e7:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWZ9sxoVPipIrmC9DnFjdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NTFmMTg0ZDRkZjg4NTYwNGNhNDdjNTM5N2UwMjVhMmRi
MmZjZmEwHhcNMjYwNTEyMTgwMTEzWhcNMjYwNTEzMTgwMTEzWjAzMTEwLwYDVQQD
EyhlMzY0ODg4OGFlYjNlOWJiOGE3MmY4ZjMwY2U3YWQ1MjhiY2ZmM2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDEbyFEABFp92g2qa+R6QLi9np+l
34StJ4UnjZnTLQPiKuc91cNj8g3AvBSJgM/O6Q+Gy+NStCU1iiID3BEX+v2gB6EE
eSA/UrE1g2wPFFYoOhZUNyWfnVE1unSXFVcw3zg9m809ij3+vMBp2YIVQB0ZWurF
G7beqG1z48TLQItKiUPqacbTAxdbS0aJrfyN9cTCFvRZsMHLZE7gP32xv+3mLrGo
TbH9qTnN5AlXwz49Xohw8719hHWqdc7VVqDjLHJh58G3t/K3zT+MUla3HTyN3fbY
9N6gK5z0x4e6RU4R0IFDakFZnJgtsKwfC39ih4dIVbVXzDc9l2OREhA8mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONkiIius+m7inL48wznrVKLz/PvMB8GA1UdIwQY
MBaAFDlR8YTU34hWBMpHxTl+Alotsvz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1ZIeGhOVGZpRllFeWtmRk9YNENXaTJ5X1BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zZmQyOWItOGUzMi00ZGVkLThjOTct
NjhjNDU2NzIwOGRhLzEvT1ZIeGhOVGZpRllFeWtmRk9YNENXaTJ5X1BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8zZmQyOWItOGUzMi00ZGVkLThjOTctNjhjNDU2NzIwOGRh
LzEvT1ZIeGhOVGZpRllFeWtmRk9YNENXaTJ5X1BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOc7HVcT
eNB0obZ+e0h3OoxOl9kjAOMVYLwi5xlrzb0jRpex7RIyqIY9HFOIhA/tTwJg7pvG
3I6SWIqiI87vY/u3Uafz93Q6kTBTNm+Co8E11xNbR3hwDO3f+bDZyJ+qPH5IjBKg
MA2jxPA3syzJhzAPt4jOjv3+GgEXRUTQ+3ZnpRGrz6dQ3PNIg1fh2/MSpYEbgZhm
MgDUzORruZT0HcD6NoHu3h0QAfhiq/hu76C/NScnGPPY0wYFeyjUT6U8kK5XlOrS
K5qZ3S9CEzjZNUCvuhbyT5qnUyp3aHL3OP9Ms/iImFqsZL5fi+As7NXWaxYp7aZV
1OyjPwvBA6znUg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:43:28 2026 by rpki-client