Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: +ldlnlmF0weJoEXhgv6ntvYK6+A0YV7O1OaU3xPdNqk=
Subject key identifier: DF:87:BB:50:85:09:57:CE:0C:77:70:48:4C:1D:DD:87:EC:8B:8A:C3
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 01A138C9BE121703A8808626DC9C6D7751FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 0AF2
Signing time: Wed 14 Oct 2026 05:01:47 +0000
Manifest this update: Wed 14 Oct 2026 05:01:47 +0000
Manifest next update: Thu 15 Oct 2026 05:01:47 +0000
Files and hashes: 1: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: uGGrUa4eNnf6tSxUk4ji5q72z+FOzmxge8NBP0s7uEA=)
2: znDve5CjV618M32KGB6DWBGicnw.roa (hash: ijbBK+p6F9dsyDrBRAIbTBjRD23gRWQsjidlNNmRMxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:c9:be:12:17:03:a8:80:86:26:dc:9c:6d:77:51:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: Oct 14 05:01:47 2026 GMT
Not After : Oct 15 05:01:47 2026 GMT
Subject: CN=df87bb50850957ce0c7770484c1ddd87ec8b8ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:95:11:3d:46:b3:ee:bc:d9:d1:84:9c:8f:55:
9a:50:15:01:21:be:d3:6e:c1:ed:88:14:54:84:c5:
e2:73:2b:04:70:42:40:69:9b:f2:6b:d2:0e:07:d5:
06:1b:98:4d:c4:fe:5a:93:8d:78:a4:9d:7a:24:d4:
87:23:5a:23:54:57:22:3d:02:0e:9f:11:e4:c5:0f:
55:56:1b:83:89:d7:63:e4:ab:6f:c0:5f:8c:98:1b:
5b:a1:7d:d1:b4:d4:e7:57:af:b6:00:ea:5f:10:e4:
c1:33:db:a1:71:3e:c3:6c:87:06:af:7e:06:03:b4:
5b:58:bc:d3:97:b5:8e:3f:86:5f:50:8c:c5:ae:95:
78:f9:25:9a:94:b2:40:e2:98:ff:a2:a8:4f:ac:09:
b4:6b:84:af:a9:68:88:bb:ab:18:9b:89:1d:d2:21:
19:94:07:9a:5b:8a:18:99:0d:20:56:ed:54:4f:1b:
c9:f6:4a:31:23:70:01:c0:55:5b:a9:3b:17:91:f1:
b2:61:43:2c:1a:0c:b0:8b:2a:e1:cf:90:af:4c:a3:
35:61:27:18:f1:d3:2e:71:07:b0:f5:c8:57:86:91:
59:16:87:b5:75:ec:63:b2:a6:8b:fd:d3:61:79:75:
20:fb:6d:fd:2d:fc:2e:ec:aa:44:ea:aa:51:81:13:
60:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:87:BB:50:85:09:57:CE:0C:77:70:48:4C:1D:DD:87:EC:8B:8A:C3
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:15:1c:44:64:ae:7e:26:d2:2c:4e:fe:5e:80:96:a9:a4:e6:
90:21:fa:19:0c:49:c5:9d:59:f3:fb:6b:27:5a:b4:f1:31:bc:
93:60:f0:f9:6d:7e:34:18:36:e4:22:82:2a:65:57:54:a3:b9:
fd:ea:74:11:6e:b9:31:de:3e:76:ae:ad:03:34:c6:1d:6a:f7:
2e:e5:6f:c9:70:03:74:80:d7:5b:cb:6c:3e:ac:4b:3c:60:8c:
d9:38:9c:01:b0:d9:b7:98:5a:dd:93:1a:76:28:8c:f0:51:52:
09:10:28:b5:ca:84:35:59:c7:8c:36:3f:e1:de:a2:7f:d3:d0:
98:62:1e:b0:31:20:ea:64:a6:80:da:82:f5:cc:d4:37:c5:5d:
2a:b9:2f:55:4b:57:17:0b:56:92:f6:c0:f4:04:2b:98:6c:c9:
81:53:e2:9e:1f:67:6a:66:2e:b8:db:c8:3e:99:4c:27:54:17:
c8:73:11:50:6a:a2:7e:e0:65:bf:ba:7e:b1:55:2c:12:d2:1d:
bd:0a:79:d2:6c:9f:fb:45:d7:bd:d0:c0:94:77:87:0c:e3:f4:
fd:a3:dc:41:79:57:2e:d6:4b:76:86:44:d4:c1:ab:cc:7d:b5:
3e:5e:22:8a:c2:f7:e5:17:c3:89:83:4e:a7:4f:c5:b6:9b:7d:
6c:cf:e5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:08:50 2026 by rpki-client