Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
File: OVHxhNTfiFYEykfFOX4CWi2y_Po.mft (raw, json)
Hash identifier: ZxZ/8D/APGu8HhfuJkdR1LI5HBbW1pFHGWUrWqQ2YFw=
Subject key identifier: 09:FB:06:CE:EA:05:40:40:92:38:EF:FE:94:B6:98:7E:CC:41:BD:5E
Authority key identifier: 39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
Certificate issuer: /CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Certificate serial: 019F10ADD643F6B8FF0BCE5AA5F31176E968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
Manifest number: 01D1
Signing time: Mon 29 Jun 2026 00:00:55 +0000
Manifest this update: Mon 29 Jun 2026 00:00:55 +0000
Manifest next update: Tue 30 Jun 2026 00:00:55 +0000
Files and hashes: 1: OVHxhNTfiFYEykfFOX4CWi2y_Po.crl (hash: CttgUtlP8NlAYTgnHi3OVR8WP3pwN1fmPTedmIulqSM=)
2: ZsafJkeU2d25ljSpLy_TemriX90.roa (hash: IVTCj8e85875t2DlkKQvBEjaDXUkRlUkp5L1m5Z/Zpg=)
3: vQz4q1ws7qmK1pQ1vuBmocY7Bpc.asa (hash: L/e3mOSuN9cfAoJ9MDMZ8ASC7Sltzw7RnyO6VofFQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:ad:d6:43:f6:b8:ff:0b:ce:5a:a5:f3:11:76:e9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Validity
Not Before: Jun 29 00:00:55 2026 GMT
Not After : Jun 30 00:00:55 2026 GMT
Subject: CN=09fb06ceea0540409238effe94b6987ecc41bd5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:89:6b:70:42:a8:47:db:ca:27:34:4a:59:
d1:0f:38:c7:73:30:68:94:5a:bc:09:f4:75:71:a1:
de:b0:7a:05:37:90:18:c4:0d:0b:8c:45:fd:03:fa:
52:67:39:50:6f:aa:30:6a:91:ae:3a:dd:28:f5:ec:
89:13:f4:9d:6d:26:fa:0c:20:b3:73:a3:3e:75:ff:
d4:c5:69:c7:d6:85:65:20:1d:39:1f:26:fb:77:06:
23:51:58:9f:30:f2:8d:14:b9:10:f7:19:88:c8:58:
cd:67:06:c5:f0:49:5a:c9:5e:29:f5:6b:04:52:0a:
b6:90:3d:bf:76:a1:03:89:d5:e7:5e:07:14:a8:30:
2d:b2:07:e2:aa:de:a9:08:6e:49:30:12:82:8b:35:
2a:75:86:b1:b7:82:d8:3c:bc:80:8f:53:e7:84:a4:
e3:97:7b:94:fe:6e:19:4c:b9:09:e9:18:eb:ab:9a:
c6:b7:be:2b:f8:5e:0c:57:8e:4b:84:22:a5:d6:09:
34:6d:c7:c6:9c:b5:49:5a:7d:7c:55:73:35:98:37:
6e:f8:95:3a:68:a9:19:34:58:9d:49:40:30:c4:fb:
57:33:a8:ff:6c:8e:50:ac:b5:60:d5:42:41:23:79:
de:5b:cf:d8:73:ae:95:b6:f1:c4:d4:50:f9:af:f0:
62:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FB:06:CE:EA:05:40:40:92:38:EF:FE:94:B6:98:7E:CC:41:BD:5E
X509v3 Authority Key Identifier:
keyid:39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d5:3c:07:8b:d4:00:fe:ee:c9:5f:d8:a4:de:b0:1c:08:bd:
bb:43:c4:0a:8e:f2:63:8a:9b:a2:fd:b8:d7:47:85:79:ec:c1:
67:fa:8b:88:10:22:65:d1:2a:4e:ba:30:67:0c:6e:29:3b:23:
73:20:78:ef:a5:3f:8c:33:14:8a:f8:89:d2:a4:a6:78:c5:00:
86:ea:de:b7:c6:0e:a1:97:68:64:a9:90:4f:81:5e:15:c7:3a:
0c:28:a1:a8:28:74:c6:f8:c7:b5:54:1d:6c:8b:13:52:87:f6:
fd:91:94:2b:70:00:61:f0:fb:88:2c:a6:ae:df:9a:b7:e4:61:
6c:a7:e6:0a:32:17:88:17:ea:0a:93:fd:0e:fd:e9:9e:f6:dd:
43:77:da:1e:b6:fe:94:2a:92:8d:8a:29:42:0e:ec:87:c1:84:
fc:b0:e0:e8:33:70:bc:25:fe:94:0e:ff:07:d7:62:38:7a:a7:
47:e0:43:ae:14:da:00:9f:c5:dc:a7:e4:45:51:6f:8e:50:6c:
3c:99:99:08:91:cf:36:05:ee:ba:33:1b:ee:d2:81:bd:8a:13:
75:7f:52:5d:fc:d4:cc:ce:d6:04:9a:3d:ef:5d:e4:c4:0d:66:
39:42:e8:11:2c:50:43:7f:0d:ef:9f:ce:7a:74:54:9d:9d:77:
cd:33:ac:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:38:37 2026 by rpki-client