Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: 8lbOIGK92hMerVVNUT4w3tQmiSfJS9CPYmriiPGpuVk=
Subject key identifier: D4:4F:33:A3:CF:5D:3D:15:BA:BE:25:EA:7B:BA:9E:86:6E:71:3B:95
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 019FD1961E18E9E6D5455873656AEAD5BD9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 0A38
Signing time: Wed 05 Aug 2026 11:01:43 +0000
Manifest this update: Wed 05 Aug 2026 11:01:43 +0000
Manifest next update: Thu 06 Aug 2026 11:01:43 +0000
Files and hashes: 1: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: BG4BuAppXvk7Ewnh0LTNvnu4EYipVNxxtjs1S7JWfz8=)
2: znDve5CjV618M32KGB6DWBGicnw.roa (hash: ijbBK+p6F9dsyDrBRAIbTBjRD23gRWQsjidlNNmRMxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 11:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:96:1e:18:e9:e6:d5:45:58:73:65:6a:ea:d5:bd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: Aug 5 11:01:43 2026 GMT
Not After : Aug 6 11:01:43 2026 GMT
Subject: CN=d44f33a3cf5d3d15babe25ea7bba9e866e713b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:2f:65:cf:d0:92:72:32:9a:c4:a4:a2:58:
09:41:37:a0:f8:57:45:a0:f8:4f:f8:93:76:1d:0d:
f7:53:7c:c6:bf:fe:4a:1c:14:78:63:64:31:f8:f8:
d7:f9:1c:21:2b:12:ef:e4:ad:7b:aa:49:6d:f4:29:
64:46:8a:60:14:99:f8:8c:0a:42:e9:db:8b:e2:5e:
66:ef:68:27:33:b1:8d:c2:4e:fc:e4:f4:2a:e6:bb:
21:1a:22:df:29:b4:19:0d:74:f7:b1:90:73:14:99:
e9:c8:cf:9b:61:3f:ab:34:08:73:51:8f:f7:4a:59:
5b:a6:fa:79:24:6a:89:05:60:1f:19:59:02:7c:b7:
83:11:3c:ef:e5:6f:60:42:6b:04:25:31:3f:59:2b:
77:8b:16:f2:13:3a:7d:f3:a5:9e:7e:9e:ff:96:60:
00:7b:45:b3:9f:95:d1:f2:f5:39:42:4c:18:b2:7c:
a9:ea:79:90:b7:05:b2:06:04:90:af:61:3d:71:ab:
ea:4c:f0:7d:8f:d4:68:f0:cc:10:b2:b0:a9:b8:d3:
97:02:20:4a:2a:49:99:c7:98:5a:ce:26:ee:ed:8e:
c4:fb:0b:89:81:41:d9:db:a6:a2:76:bb:42:f0:36:
0c:1b:58:08:ff:54:0b:27:c3:57:10:f1:81:66:78:
f0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4F:33:A3:CF:5D:3D:15:BA:BE:25:EA:7B:BA:9E:86:6E:71:3B:95
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ad:d9:8b:ff:22:98:a9:07:31:19:de:2f:4a:ae:2b:9a:55:
5d:02:f0:62:22:d7:df:64:9a:7a:69:68:a4:48:c3:82:97:d1:
28:50:58:73:45:cd:81:fd:e3:94:da:3f:56:5e:bd:58:27:48:
67:b2:8d:67:c3:50:b9:d8:7f:11:96:60:58:be:ba:d5:39:a5:
bf:d4:bf:cf:21:dd:b6:4e:09:28:b8:05:77:68:1a:4d:f3:c0:
86:4c:66:2d:2b:b5:21:84:fd:5b:7b:17:f1:78:3f:5e:7c:3b:
03:b1:e7:6c:f3:10:19:52:31:3e:cf:ae:38:7f:6c:dc:44:95:
74:04:8b:b7:96:94:c0:f5:bc:27:74:9c:e2:e0:e8:ab:ca:6f:
2d:54:bf:90:dd:db:2a:6f:13:f4:b5:c6:30:5a:e2:ad:06:2e:
3c:50:95:6b:9b:a8:12:a4:ee:de:ba:cd:9e:e8:f3:8d:1d:1d:
2d:f8:9c:50:7a:a0:74:3e:bd:9f:23:9f:5f:5d:21:b4:34:4e:
53:d4:1d:e7:e8:2d:e6:4f:14:65:63:27:a6:86:bf:27:68:a5:
fe:0c:f6:f2:5e:f5:ce:62:c7:c5:ee:ac:2a:be:cb:1a:41:f5:
0e:bf:4f:9d:49:91:26:98:bc:0b:79:00:ea:41:bf:33:4b:ca:
58:09:ce:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 19:02:01 2026 by rpki-client