Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
File: OVHxhNTfiFYEykfFOX4CWi2y_Po.mft (raw, json)
Hash identifier: f4ubk5MjQcyNDh4oJKV1OpF7YXtOwSnUJqxlaiTN4bk=
Subject key identifier: 2C:D8:1E:14:31:78:0B:42:0F:DE:E1:E7:E1:3B:15:98:8D:82:90:7D
Authority key identifier: 39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
Certificate issuer: /CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Certificate serial: 019E28F00D8AE588AABC414826904081863F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
Manifest number: 0159
Signing time: Fri 15 May 2026 00:01:21 +0000
Manifest this update: Fri 15 May 2026 00:01:21 +0000
Manifest next update: Sat 16 May 2026 00:01:21 +0000
Files and hashes: 1: OVHxhNTfiFYEykfFOX4CWi2y_Po.crl (hash: lrXsL76u8myuZLTAWxu9R+q0CzwQvttD7kdcNNGTIFM=)
2: ZsafJkeU2d25ljSpLy_TemriX90.roa (hash: IVTCj8e85875t2DlkKQvBEjaDXUkRlUkp5L1m5Z/Zpg=)
3: vQz4q1ws7qmK1pQ1vuBmocY7Bpc.asa (hash: L/e3mOSuN9cfAoJ9MDMZ8ASC7Sltzw7RnyO6VofFQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:f0:0d:8a:e5:88:aa:bc:41:48:26:90:40:81:86:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Validity
Not Before: May 15 00:01:21 2026 GMT
Not After : May 16 00:01:21 2026 GMT
Subject: CN=2cd81e1431780b420fdee1e7e13b15988d82907d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:89:a4:d9:ff:c6:b2:cb:02:7d:81:79:e2:
83:8c:4b:ed:b5:56:70:7a:e9:f0:04:48:95:05:eb:
7b:85:14:e7:1a:cf:ff:6b:82:ab:e7:2a:8e:41:ea:
78:c6:05:3e:1e:7f:aa:01:62:be:ab:13:cc:6e:9b:
76:e4:78:4e:0d:73:ec:5a:d0:0e:05:02:49:c1:f2:
58:d6:df:71:3d:44:08:da:44:4b:ae:d2:99:77:c0:
a7:c6:eb:92:15:9a:08:0e:95:c2:bf:49:e8:68:b6:
3c:c8:76:b4:40:4b:21:0b:d4:31:2c:8a:17:07:d3:
ac:c5:a0:05:0e:47:12:e8:11:27:1c:68:d4:9c:a7:
91:05:bd:1c:ef:96:55:f7:7d:2f:aa:f6:f6:5e:dc:
0b:3d:52:f2:61:99:fe:db:0d:fd:7d:1a:3a:15:94:
2a:74:12:0f:3c:f5:02:72:28:87:26:b4:19:15:76:
fd:53:27:c5:04:e8:12:7b:d8:fc:ce:14:60:21:6c:
42:8a:f5:97:7a:da:2c:12:95:42:8a:a3:c1:82:30:
03:79:44:c4:77:d0:82:01:20:1d:2a:92:ad:e3:54:
17:b8:19:01:d8:4c:55:b2:36:88:aa:c8:8d:6e:8c:
d0:5c:21:43:f4:10:61:e1:fd:f3:31:35:a7:95:88:
ed:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D8:1E:14:31:78:0B:42:0F:DE:E1:E7:E1:3B:15:98:8D:82:90:7D
X509v3 Authority Key Identifier:
keyid:39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6f:97:98:da:3b:9a:81:b7:3f:d5:04:97:03:20:9e:f4:56:
69:5d:df:68:cf:ba:cb:a3:fd:8c:b5:5f:fe:c2:e6:f4:2e:59:
e8:ff:8d:b0:b1:d2:84:3a:73:09:a8:95:f6:a1:96:5e:30:e4:
f2:46:4e:3e:9f:41:c2:d4:1c:92:02:a1:c6:39:43:f2:b0:0d:
98:c9:69:00:52:cc:ff:83:cd:e3:9b:96:e9:89:99:3f:94:29:
3e:92:e1:49:16:c3:b9:ca:61:05:d2:2b:70:ce:e8:a9:cc:19:
cf:d2:24:3c:11:1b:9b:b2:3b:7f:f4:22:c4:24:a3:a4:cf:e2:
9f:ee:5c:6d:b1:9b:60:18:03:7d:1b:54:b7:5f:11:88:df:0c:
6c:81:3c:21:99:e5:8e:bb:7d:09:17:a8:30:70:c2:43:07:27:
01:87:7b:36:6f:ab:3a:a1:0b:6e:1e:33:91:55:15:de:e7:9c:
93:79:f9:51:4c:cc:0b:c7:58:56:39:55:0f:c4:46:8e:91:c6:
1c:8e:3c:0d:6b:41:17:a1:54:75:39:a8:8a:6c:b1:89:f3:e8:
10:4a:00:6d:2d:7d:76:cd:fb:2a:cd:b8:a2:7d:ed:62:ff:bb:
6f:42:0a:d5:6c:05:03:69:28:c3:49:18:42:46:2a:ce:d3:7f:
df:37:35:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:57 2026 by rpki-client