Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: sY0n8Bka2xIXEggdQpbs4dJyh84fe5kTqa/Ie2u0Roo=
Subject key identifier: 85:D2:25:1C:82:03:F2:F4:42:0B:C0:CE:7A:BD:20:C0:49:D2:B2:E2
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 019EE7E96A59D7D33AD769BD8E3A4D57C358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 09BF
Signing time: Sun 21 Jun 2026 02:01:34 +0000
Manifest this update: Sun 21 Jun 2026 02:01:34 +0000
Manifest next update: Mon 22 Jun 2026 02:01:34 +0000
Files and hashes: 1: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: Imsd4eQPbLQF7Ilk6NLOjCQ5MwDn2YcSNZUvTtr5P7s=)
2: znDve5CjV618M32KGB6DWBGicnw.roa (hash: ijbBK+p6F9dsyDrBRAIbTBjRD23gRWQsjidlNNmRMxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 21:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e7:e9:6a:59:d7:d3:3a:d7:69:bd:8e:3a:4d:57:c3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: Jun 21 02:01:34 2026 GMT
Not After : Jun 22 02:01:34 2026 GMT
Subject: CN=85d2251c8203f2f4420bc0ce7abd20c049d2b2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ab:c7:b6:b6:82:af:dc:e5:5c:69:7d:1a:00:
04:16:ca:95:95:fc:55:a5:6d:81:cf:21:3f:1c:72:
e3:60:de:29:85:87:12:4e:7d:0c:16:d2:40:51:af:
26:10:e2:1f:15:44:95:19:32:23:60:73:77:42:62:
c4:31:1e:e7:85:d2:8c:ac:1f:e1:c1:b0:ba:c8:54:
d6:c1:f3:1c:1e:bb:cc:4a:0a:9f:32:53:b8:08:4a:
92:a3:ba:a0:e5:ee:d9:e2:39:4f:d2:a4:b2:74:cf:
e5:9d:a0:83:38:5b:59:58:41:84:77:11:4e:da:c0:
5d:cd:32:29:bd:7f:0a:ce:6a:ac:4c:5b:ea:d2:bb:
c4:38:77:4f:f3:ec:39:b7:c5:c7:11:5a:dc:17:2f:
29:c5:35:2b:ef:a4:8a:fc:67:82:ff:51:e7:87:06:
15:1f:45:f7:12:57:96:71:25:e2:30:fa:66:bf:9f:
bd:7c:83:fc:4e:02:cc:27:6a:aa:6f:e2:df:95:2b:
ca:ff:1d:8f:e3:e9:54:d1:c7:b3:93:5d:67:07:c6:
c5:e7:d8:02:b8:66:ec:04:0e:3b:64:62:eb:60:33:
65:a2:20:17:80:c7:5c:dd:09:95:de:ab:10:81:92:
f4:18:ae:1f:96:2d:5c:fe:ef:de:af:42:cc:d1:7a:
9d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D2:25:1C:82:03:F2:F4:42:0B:C0:CE:7A:BD:20:C0:49:D2:B2:E2
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6e:ab:47:b6:0f:a0:5b:2f:d2:dd:88:aa:82:93:8c:d3:57:
3f:87:eb:6f:db:65:f0:52:bf:18:3c:16:b2:71:69:e5:5f:bc:
57:2f:76:b8:64:0f:fb:13:e6:8d:83:26:0a:c8:f7:64:c9:db:
36:24:24:56:d5:12:ae:d5:cb:c9:91:eb:64:20:0f:1f:13:29:
48:db:10:e2:eb:c4:59:8d:17:d0:83:33:85:6d:7c:15:ca:c4:
98:8e:3c:9a:5b:f7:49:58:74:61:2a:69:81:3b:7b:3f:be:92:
67:b7:30:10:6a:a7:a5:89:94:b1:f4:64:59:04:dc:c8:68:c7:
ad:7d:bc:b4:25:0e:ca:d0:3c:dc:83:7a:6e:96:d3:0b:1a:dd:
af:28:10:67:63:8c:08:02:aa:f2:78:b9:30:36:a2:50:e8:5e:
9c:f2:03:02:86:ef:22:29:bc:a6:7c:76:c7:e9:6d:93:43:06:
58:54:39:45:0f:f6:fe:42:fc:65:77:b2:a2:f9:ba:30:2b:d6:
41:32:07:72:3e:72:63:d1:97:38:8c:e6:3a:c3:10:cc:6f:36:
2a:33:ea:2f:e2:fe:04:66:51:55:7f:a7:c9:19:1d:f4:03:06:
15:11:c4:18:70:2d:e3:ff:c3:3d:7c:63:e9:ca:b1:fa:1b:f4:
20:ce:8b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 06:06:53 2026 by rpki-client