Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
File: OVHxhNTfiFYEykfFOX4CWi2y_Po.mft (raw, json)
Hash identifier: BBmxF0w6/4WnKJnu6t7+JcLeNhTfugJZxdUqwDA4a0w=
Subject key identifier: C5:63:18:43:30:81:67:C5:51:11:74:F7:B2:D9:34:09:9B:CE:99:EE
Authority key identifier: 39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
Certificate issuer: /CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Certificate serial: 01A03C03D312E7224FDFF3A38B6E82432768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
Manifest number: 026C
Signing time: Wed 26 Aug 2026 03:01:18 +0000
Manifest this update: Wed 26 Aug 2026 03:01:18 +0000
Manifest next update: Thu 27 Aug 2026 03:01:18 +0000
Files and hashes: 1: OVHxhNTfiFYEykfFOX4CWi2y_Po.crl (hash: ALZIlNH/DM6fxaJD6xqxc6gMYEhtgegP8sxcFoviFeU=)
2: ZsafJkeU2d25ljSpLy_TemriX90.roa (hash: IVTCj8e85875t2DlkKQvBEjaDXUkRlUkp5L1m5Z/Zpg=)
3: vQz4q1ws7qmK1pQ1vuBmocY7Bpc.asa (hash: L/e3mOSuN9cfAoJ9MDMZ8ASC7Sltzw7RnyO6VofFQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:03:d3:12:e7:22:4f:df:f3:a3:8b:6e:82:43:27:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Validity
Not Before: Aug 26 03:01:18 2026 GMT
Not After : Aug 27 03:01:18 2026 GMT
Subject: CN=c5631843308167c5511174f7b2d934099bce99ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6e:f1:97:cb:c0:03:20:ef:4f:85:2e:a1:ac:
80:a0:e7:e3:46:4d:48:3b:ae:8d:62:2a:66:b5:26:
62:45:21:ab:2c:1e:7f:32:17:ca:38:82:59:88:90:
75:a5:9b:97:ed:78:c6:47:61:01:a1:63:88:89:fc:
c9:f9:85:5e:12:e2:78:ff:fe:b7:a8:90:a7:9d:4d:
31:82:d9:8a:be:39:3d:a8:7b:01:7a:1e:38:30:d5:
fb:f7:92:af:82:87:42:da:1c:e1:1b:ee:1a:48:d2:
e4:a5:7d:3b:74:04:12:9b:de:15:a1:e3:cb:5a:47:
ca:26:61:99:44:e2:11:12:fb:ab:3f:5c:30:44:8a:
f3:89:2e:97:62:61:d6:5e:1a:0c:bd:83:01:c1:ab:
7a:16:5a:ac:f5:50:f7:0e:47:92:3e:31:5b:11:20:
16:cd:13:ad:e2:12:ae:37:b7:16:e7:24:18:15:34:
8f:db:26:bd:15:18:5e:3d:03:db:57:ba:3c:f4:69:
58:00:94:39:9d:08:3d:91:bf:cf:02:95:95:e8:f0:
a4:19:b1:2a:e0:90:4b:e9:4a:d7:89:8b:cf:54:df:
50:0d:30:ba:d4:9e:70:11:fc:be:23:e2:92:69:69:
ec:9f:0d:e3:51:ca:3c:ed:1c:5c:6c:5e:55:38:61:
5e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:63:18:43:30:81:67:C5:51:11:74:F7:B2:D9:34:09:9B:CE:99:EE
X509v3 Authority Key Identifier:
keyid:39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:db:ee:3a:b6:35:c5:5b:10:fc:a4:6f:41:06:64:e3:91:76:
e0:da:36:39:1f:50:b1:b9:bd:51:4b:7e:a7:24:31:35:6c:92:
3c:8a:46:6a:b9:f0:57:fc:d3:7e:d3:4f:42:7e:a7:d3:27:7f:
b7:c8:4d:15:94:86:c0:50:40:e2:a1:74:3a:53:d8:41:b5:b6:
22:5d:96:8e:89:b0:05:31:7e:55:e9:05:ac:6d:4b:4e:95:e3:
00:8f:c6:63:be:48:93:a4:b9:97:6c:27:04:a5:be:cc:ea:24:
23:89:0c:eb:f5:d4:ad:f6:41:25:9f:55:3a:7e:ea:f3:22:e9:
b9:58:96:9d:ff:ba:ce:95:c5:7e:bb:6c:fb:c1:f3:fa:da:9f:
c3:f1:6c:5d:cd:03:84:4e:7d:ed:3f:5c:af:b9:b4:15:16:21:
d9:e2:01:7d:83:70:86:ae:89:f5:b6:cf:90:8d:2e:93:c0:a4:
2c:15:42:26:ab:2b:c7:e4:cd:4a:50:08:9b:9e:10:e5:bc:76:
97:f7:a6:65:11:28:8f:c1:9c:88:9b:38:c1:40:8c:8e:63:8e:
10:25:96:ad:59:dd:b7:f5:95:6c:b2:b4:c3:d0:c8:f4:cf:e5:
d4:8c:45:f3:f5:6a:4d:06:69:a2:cb:5b:33:43:63:49:26:2c:
a5:83:e0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:06:55 2026 by rpki-client