Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: 4LKSq0URChvPa9pocxNFkiZ9KW5q1vFBWWVE8i0mH6E=
Subject key identifier: 2D:32:28:35:0D:71:6F:3B:7D:EE:4D:BC:46:3C:87:46:B6:EF:18:C8
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 01A0BB41FD0304704FA0B2001B19310E47EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 0AB1
Signing time: Sat 19 Sep 2026 20:00:59 +0000
Manifest this update: Sat 19 Sep 2026 20:00:59 +0000
Manifest next update: Sun 20 Sep 2026 20:00:59 +0000
Files and hashes: 1: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: p2PVa2kpiMvPCnpNg8U1b+JVdozTsokduxAzKdgvam0=)
2: znDve5CjV618M32KGB6DWBGicnw.roa (hash: ijbBK+p6F9dsyDrBRAIbTBjRD23gRWQsjidlNNmRMxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 20:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bb:41:fd:03:04:70:4f:a0:b2:00:1b:19:31:0e:47:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: Sep 19 20:00:59 2026 GMT
Not After : Sep 20 20:00:59 2026 GMT
Subject: CN=2d3228350d716f3b7dee4dbc463c8746b6ef18c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:20:dd:9b:65:4c:4f:fd:49:f7:08:fe:37:96:
4a:be:24:19:23:d9:7c:1c:84:7b:ef:3f:34:c4:a9:
66:e5:94:d2:09:af:37:d1:af:a0:a0:d8:c2:5f:86:
de:19:5a:78:27:d6:5f:9e:db:f4:41:df:79:5e:6c:
27:81:e1:7d:53:1f:f4:13:2f:a5:bd:68:30:8c:2e:
f1:ac:56:ec:aa:be:8c:95:30:9b:4d:3d:a5:c9:78:
9a:28:ae:98:24:ee:02:bc:9a:f4:0a:b3:d9:5d:7b:
b6:53:23:bb:ce:7b:b4:99:2a:4f:ef:c5:ea:3e:b4:
91:8a:12:16:02:30:be:c1:34:5b:6a:d1:46:f1:57:
6d:de:ee:bc:ae:03:be:be:8c:19:47:c2:06:ea:2f:
9c:8c:dc:38:36:82:36:7f:ad:fc:8f:0e:3d:62:4d:
19:85:aa:cc:f6:5f:59:7b:16:08:99:6d:84:e1:ee:
c8:58:73:22:3a:9f:0a:ea:17:83:c2:45:d1:7a:cc:
11:f5:1e:54:69:e6:49:80:2a:d2:68:8a:99:1c:68:
a7:8b:f6:9c:f1:b3:eb:b5:9e:a6:c8:63:55:97:b5:
6e:02:ac:ac:6a:f7:f4:69:a2:14:61:7a:af:d1:e0:
f2:cf:f5:08:38:93:d3:2a:2e:0f:fe:2c:68:69:99:
86:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:32:28:35:0D:71:6F:3B:7D:EE:4D:BC:46:3C:87:46:B6:EF:18:C8
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b9:10:1b:d3:3d:f3:84:b2:09:ce:98:fc:b0:7f:6c:9e:14:
c4:63:3c:d9:07:e4:d7:f4:5e:e1:a3:2d:3d:e7:83:61:e4:4f:
f0:52:87:34:4f:76:c6:eb:32:dd:f1:1d:1f:5b:fc:fb:13:08:
c9:c1:be:54:98:95:b2:7f:60:fe:54:a1:8b:5f:8d:19:26:4e:
94:77:02:a9:86:5a:7a:91:a9:4f:72:2c:d0:e9:0b:54:2c:3a:
07:2f:bf:a9:31:9a:d6:ab:37:71:cf:83:50:6d:73:3b:bd:b3:
cc:4b:9f:cd:e1:0d:c2:59:18:e7:95:4f:d8:d0:8f:00:ee:09:
7d:94:7a:e2:37:ce:38:36:bb:15:89:64:ca:de:e0:bc:69:8f:
0f:43:44:08:a3:6c:95:5d:8e:f4:7c:70:84:ee:87:01:58:e0:
fd:13:b7:22:34:c8:79:65:9a:6f:07:46:1f:e9:82:b4:b8:33:
1b:37:48:5a:81:63:fb:2d:c6:35:e7:85:1c:6e:ac:c4:8c:9b:
76:ab:f5:4a:f3:2c:c6:62:d5:b9:b1:39:fb:2e:bd:fe:64:eb:
9d:c3:c6:da:cb:6e:96:bc:85:66:37:b4:58:b8:6e:91:d5:b6:
c7:70:e8:d9:45:5f:2d:92:f6:ca:4a:27:15:86:fd:5e:f2:5c:
04:d4:96:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 02:35:44 2026 by rpki-client