Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: CXpI0kFNPsqgdHgWwuVZyXNH/Ojv4dZ17vyN0T64ZS0=
Subject key identifier: 33:76:84:B1:34:3F:92:58:E2:46:A2:B6:AF:D4:0C:02:4B:E2:D4:FA
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 019CAC4794298313A418BAE5F8E8576A1235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 0897
Signing time: Mon 02 Mar 2026 02:01:37 +0000
Manifest this update: Mon 02 Mar 2026 02:01:37 +0000
Manifest next update: Tue 03 Mar 2026 02:01:37 +0000
Files and hashes: 1: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: lsx0enXrcALKNsbePHowb8FA9A5nVxcluTuIqU0Eyrg=)
2: znDve5CjV618M32KGB6DWBGicnw.roa (hash: ijbBK+p6F9dsyDrBRAIbTBjRD23gRWQsjidlNNmRMxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:94:29:83:13:a4:18:ba:e5:f8:e8:57:6a:12:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: Mar 2 02:01:37 2026 GMT
Not After : Mar 3 02:01:37 2026 GMT
Subject: CN=337684b1343f9258e246a2b6afd40c024be2d4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:a5:d6:e2:f3:f1:28:00:bf:8b:aa:0d:d4:
4c:67:e5:b6:76:2b:4f:03:28:32:7c:97:04:3c:41:
ca:c2:d0:18:f2:ec:20:49:32:34:0c:54:a9:c0:bb:
69:78:14:0f:ca:de:24:42:36:53:40:32:c1:e7:9b:
09:61:5b:cd:19:c8:9a:74:7e:06:73:9d:a3:cb:39:
1d:05:84:93:31:3c:e5:a9:f9:9e:2b:86:68:81:72:
35:55:20:97:4a:41:21:c0:c2:ab:56:62:be:f6:e4:
9d:e2:f4:76:85:f4:d4:58:be:5e:98:6e:80:98:2e:
34:47:9d:bb:86:1f:d3:d0:35:03:f0:6e:7c:37:f2:
54:70:05:47:8d:46:0c:13:eb:98:33:e6:31:b7:3a:
53:82:ef:51:42:ed:93:70:d4:10:51:bd:f5:14:f1:
d8:0b:97:c1:6f:53:fc:a7:e9:67:c3:d5:7d:96:db:
fa:7f:33:e9:9f:d1:f4:e3:0b:e6:0b:73:db:ab:fa:
6a:3a:e6:f8:e3:75:c9:00:67:bb:c9:10:17:34:fa:
e6:31:8f:11:d9:7e:29:c9:06:7c:03:01:22:d3:cc:
2d:cd:ac:77:76:be:09:48:f4:5c:c5:94:e6:b2:e9:
51:2c:95:8f:0c:93:a3:7c:9c:58:24:78:cc:f5:61:
95:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:76:84:B1:34:3F:92:58:E2:46:A2:B6:AF:D4:0C:02:4B:E2:D4:FA
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2f:df:48:97:fe:25:f3:80:92:71:2c:f0:8b:68:cb:f4:e2:
51:23:e5:35:9b:f4:13:11:20:cb:33:33:b4:78:0a:4e:53:4f:
5a:b4:f0:d5:7f:18:44:26:65:10:3e:ad:49:44:04:09:fa:03:
68:39:77:7c:05:b9:0d:d3:12:b3:34:73:10:94:5e:d2:e1:c6:
36:bf:63:d0:47:e7:21:61:4b:51:0c:80:81:59:71:5f:9e:6b:
40:eb:31:43:87:96:b9:65:1d:77:d3:d3:6f:38:4a:31:26:06:
84:01:46:5d:49:f7:25:ce:59:5d:e2:d6:57:fc:b5:b3:3b:98:
21:61:6e:c5:d2:ad:e0:a0:5e:86:f5:c1:6a:31:5e:a8:9f:94:
4c:b1:3d:ef:69:62:10:3b:64:f4:97:4e:9a:d9:a2:a5:0e:c9:
94:59:dd:bc:be:c9:43:c4:e2:45:5d:b2:b8:1e:0c:48:c3:48:
67:72:fe:85:2b:70:e4:14:87:18:c3:1b:19:ae:a6:41:e3:4f:
d7:bc:96:cc:02:cb:39:c6:68:ca:46:08:fa:5b:c7:6c:2e:da:
fc:ce:50:11:d3:be:74:c7:d2:9b:b1:fc:34:dc:d5:90:7d:33:
00:ae:3e:2c:b1:92:85:00:4f:10:f0:29:5a:cb:78:c1:e4:b5:
49:56:bf:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:51 2026 by rpki-client