Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: 2BkuxqiwlAkrfX9AtEJgRJJ7JlCDtQJnPk1Ni4xgaV4=
Subject key identifier: 87:92:52:32:DA:E5:2E:67:11:16:62:59:E1:D9:9A:83:C6:EC:AD:CA
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 019DFC4E6DC50B7E00676349EB56D6BA3BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 0945
Signing time: Wed 06 May 2026 08:01:31 +0000
Manifest this update: Wed 06 May 2026 08:01:31 +0000
Manifest next update: Thu 07 May 2026 08:01:31 +0000
Files and hashes: 1: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: 3b8qI6WsEavJ13PmhKi95DiwL+PPRDGtbiOro7tIx20=)
2: znDve5CjV618M32KGB6DWBGicnw.roa (hash: ijbBK+p6F9dsyDrBRAIbTBjRD23gRWQsjidlNNmRMxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:4e:6d:c5:0b:7e:00:67:63:49:eb:56:d6:ba:3b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: May 6 08:01:31 2026 GMT
Not After : May 7 08:01:31 2026 GMT
Subject: CN=87925232dae52e6711166259e1d99a83c6ecadca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0a:8c:c0:4b:d3:63:2a:1c:56:3a:3f:35:07:
64:9e:0f:d5:b6:d7:ab:f9:2d:84:eb:fb:7b:f3:42:
f4:03:13:b5:3f:3e:d2:0f:56:de:c9:8e:67:a1:c8:
c3:c3:82:85:0f:12:93:fe:04:30:88:5d:52:c1:b3:
33:f1:14:46:ba:75:d9:09:9a:5e:5e:31:82:38:66:
bf:29:51:d0:bf:e8:ad:47:b6:09:7c:c0:05:ab:cf:
e4:84:d9:b2:b1:80:c1:9a:74:9a:d7:b7:2f:4a:8a:
c2:d3:57:87:9e:9e:37:82:33:53:fa:af:ac:d7:b7:
7a:49:bd:46:77:8c:e8:ef:17:c5:74:f6:2c:13:29:
cf:6e:cb:24:15:6e:3d:e6:6f:e6:b5:e1:e3:01:35:
0b:63:ab:da:38:ff:a5:53:cb:e5:4b:08:78:14:08:
c1:d2:cd:71:05:a7:3c:08:8d:d2:8c:76:99:d2:35:
88:d2:f8:80:ad:72:23:9c:f2:cc:2f:8d:88:b6:76:
9b:6d:c4:8b:14:c4:5a:73:0b:30:b7:84:9a:b0:aa:
6b:27:c9:77:8b:d0:e1:2c:3f:85:f7:bd:aa:cc:2b:
a8:17:bd:03:61:4b:cd:b2:52:52:a7:be:62:a7:69:
ac:c2:4f:85:2a:2c:c3:90:4f:51:76:fb:3d:e9:58:
e7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:92:52:32:DA:E5:2E:67:11:16:62:59:E1:D9:9A:83:C6:EC:AD:CA
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ce:a0:c9:e0:5e:cd:ad:ce:fc:3f:d9:a3:c9:43:0e:bb:66:
7e:17:bd:81:34:7c:82:ab:26:3b:fe:e6:7b:9a:17:a4:31:54:
c2:41:8b:0a:ed:46:57:dd:da:28:4d:10:75:8e:d1:78:55:50:
67:e7:1e:de:0d:bc:78:88:97:9b:e4:59:fe:e5:0c:3c:cd:fe:
cc:fe:89:55:c9:86:5b:29:4e:38:81:26:75:c7:2f:33:76:69:
9a:2c:d5:f4:74:c1:56:a8:2d:57:cb:0e:29:db:1e:b0:49:4b:
91:7c:b1:53:60:18:41:f5:55:29:31:54:32:8f:55:c0:83:30:
07:f1:17:2c:f7:7f:4f:6d:95:41:eb:75:58:2c:b6:57:74:c0:
1f:3a:80:e4:6f:22:1f:b7:81:49:b3:ff:f6:96:0e:7f:93:16:
1b:f2:ba:d4:0e:6d:f6:07:c0:4f:88:c2:9c:d6:04:f3:e2:3b:
5a:cd:f0:63:8d:83:da:45:92:bc:0e:24:9e:9a:19:6b:50:8e:
3e:8b:30:2e:6a:2d:bf:f0:50:db:2f:ce:22:ff:2b:b8:7d:26:
32:01:b3:0f:6b:13:1f:7d:9b:7c:62:00:90:3c:5c:65:10:26:
44:17:4e:80:af:62:60:41:0a:49:a6:18:a4:e0:57:f4:fa:b1:
4e:50:68:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 13:23:55 2026 by rpki-client