Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: YzjxOwXKQ7KY9beoRx0Qp3GEp7FcI0q+SVKD/AriPro=
Subject key identifier: EF:68:E1:40:07:31:30:6B:7E:98:75:DB:5A:2F:49:77:D8:CE:3D:4E
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 019D99D02693D8CFD6B62DC9E1F4718BC034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 0912
Signing time: Fri 17 Apr 2026 05:00:48 +0000
Manifest this update: Fri 17 Apr 2026 05:00:48 +0000
Manifest next update: Sat 18 Apr 2026 05:00:48 +0000
Files and hashes: 1: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: ISd6Nit8tat/66ymTdgxZ3sMOozWtjaTj6IhEm/aFMU=)
2: znDve5CjV618M32KGB6DWBGicnw.roa (hash: ijbBK+p6F9dsyDrBRAIbTBjRD23gRWQsjidlNNmRMxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:26:93:d8:cf:d6:b6:2d:c9:e1:f4:71:8b:c0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: Apr 17 05:00:48 2026 GMT
Not After : Apr 18 05:00:48 2026 GMT
Subject: CN=ef68e1400731306b7e9875db5a2f4977d8ce3d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:86:86:1c:02:fc:d7:71:c3:3d:a3:cc:ae:d6:
4c:f9:b7:02:57:e2:69:be:fc:34:38:7c:e9:a4:50:
e6:d2:68:2e:27:e9:40:f4:76:8a:6b:29:de:0f:bb:
c2:4b:da:27:2f:42:7c:b0:58:ab:16:5f:84:a1:b5:
0e:20:11:36:a4:3f:ac:82:fe:89:6a:0c:cc:9c:45:
61:c8:a1:19:c9:88:0e:4a:50:9d:23:e2:82:5e:cc:
5c:a0:40:2a:12:66:17:9b:ac:b6:56:0c:d2:e9:05:
8b:51:54:1e:5b:d0:89:69:12:90:d6:87:30:2d:a5:
9d:c2:5d:df:78:18:ea:f1:56:41:96:90:18:7a:e3:
67:0f:df:ff:90:6c:30:c3:66:04:95:45:a1:20:17:
2e:02:3b:87:b8:6d:b9:41:d4:95:7f:95:5c:c3:c4:
8e:c5:e7:2a:22:b4:1d:fc:4d:48:ee:0c:3b:e1:63:
d3:df:c1:b3:60:9b:88:9b:84:d1:69:c7:b9:eb:9e:
c9:a3:b5:96:e0:f1:ee:43:f8:1c:01:3d:64:d1:62:
78:6a:a5:1a:0c:e6:80:77:63:ee:3e:cf:ca:21:6f:
8f:c7:3c:99:3d:6a:c8:39:fd:00:1f:8e:37:5d:37:
59:7f:69:d5:83:af:5c:cd:d0:94:fc:b6:dd:1f:01:
9a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:68:E1:40:07:31:30:6B:7E:98:75:DB:5A:2F:49:77:D8:CE:3D:4E
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0f:79:58:4b:77:07:ea:2f:ac:39:f3:f0:32:21:75:ec:1b:
a0:0f:c3:9b:96:27:3f:78:f0:14:82:fb:df:f6:dd:81:36:79:
2b:a7:e3:5a:b3:6d:f5:8b:2c:d4:d8:b9:d5:e7:6a:49:35:eb:
e7:3c:0c:84:25:28:84:75:7a:ba:20:fa:a2:6e:01:91:a9:fb:
41:9d:54:d0:ed:3c:f8:22:b7:50:57:e7:13:a2:5e:9e:a8:e4:
a5:4b:b4:b5:30:dc:a4:b4:fa:e0:27:ad:8b:e0:1b:44:ad:60:
2a:5e:44:ce:36:1e:86:d7:f8:7d:79:f2:8c:bb:6c:16:ba:c7:
b3:9f:0d:0e:df:1f:d5:11:c6:1a:21:11:0d:ba:57:22:c3:4d:
9b:40:76:2b:c5:1f:37:a7:cd:49:97:8f:99:a6:c6:64:13:97:
67:2a:eb:70:fe:35:42:73:f1:b7:7f:fe:db:c3:72:8d:8b:45:
90:75:55:46:5c:91:4d:74:d9:c1:53:a3:a7:73:45:7f:65:60:
17:1a:0f:47:76:a0:eb:12:f6:b8:0f:25:20:6e:26:f0:96:4c:
ff:61:73:fd:88:e6:2f:c5:a0:7c:b5:dd:68:4d:bf:1f:59:df:
62:69:be:46:91:26:d3:60:34:b0:8b:49:e3:47:7a:c6:49:94:
54:a3:9b:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0CaT2M/Wti3J4fRxi8A0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MDJjNzk4NzAwNGFlNzgxOTBlNjkxZTM3MGRlNTA5ZmY1
OTEyN2IwHhcNMjYwNDE3MDUwMDQ4WhcNMjYwNDE4MDUwMDQ4WjAzMTEwLwYDVQQD
EyhlZjY4ZTE0MDA3MzEzMDZiN2U5ODc1ZGI1YTJmNDk3N2Q4Y2UzZDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIaGHAL813HDPaPMrtZM+bcCV+Jp
vvw0OHzppFDm0mguJ+lA9HaKayneD7vCS9onL0J8sFirFl+EobUOIBE2pD+sgv6J
agzMnEVhyKEZyYgOSlCdI+KCXsxcoEAqEmYXm6y2VgzS6QWLUVQeW9CJaRKQ1ocw
LaWdwl3feBjq8VZBlpAYeuNnD9//kGwww2YElUWhIBcuAjuHuG25QdSVf5Vcw8SO
xecqIrQd/E1I7gw74WPT38GzYJuIm4TRace5657Jo7WW4PHuQ/gcAT1k0WJ4aqUa
DOaAd2PuPs/KIW+PxzyZPWrIOf0AH443XTdZf2nVg69czdCU/LbdHwGaPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9o4UAHMTBrfph121ovSXfYzj1OMB8GA1UdIwQY
MBaAFDgCx5hwBK54GQ5pHjcN5Qn/WRJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9mZTVhYzEtMjhmZS00M2VjLTg3MDAt
YmYyNWNlMGY4MzkzLzEvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9mZTVhYzEtMjhmZS00M2VjLTg3MDAtYmYyNWNlMGY4Mzkz
LzEvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlg95WEt3
B+ovrDnz8DIhdewboA/Dm5YnP3jwFIL73/bdgTZ5K6fjWrNt9Yss1Ni51edqSTXr
5zwMhCUohHV6uiD6om4Bkan7QZ1U0O08+CK3UFfnE6JenqjkpUu0tTDcpLT64Cet
i+AbRK1gKl5EzjYehtf4fXnyjLtsFrrHs58NDt8f1RHGGiERDbpXIsNNm0B2K8Uf
N6fNSZePmabGZBOXZyrrcP41QnPxt3/+28NyjYtFkHVVRlyRTXTZwVOjp3NFf2Vg
FxoPR3ag6xL2uA8lIG4m8JZM/2Fz/YjmL8WgfLXdaE2/H1nfYmm+RpEm02A0sItJ
40d6xkmUVKObjQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:42 2026 by rpki-client