Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: BTtlMfF4NvJpEUwB3gJFQV38mbceQ4P+2sV3mrAKMPg=
Subject key identifier: BA:B9:7F:E4:15:BE:62:EE:CC:6B:EB:6E:D2:D5:19:10:78:F0:8E:06
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 019FACE3AD395629B01B11A55F70881B73E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 0A25
Signing time: Wed 29 Jul 2026 08:00:29 +0000
Manifest this update: Wed 29 Jul 2026 08:00:29 +0000
Manifest next update: Thu 30 Jul 2026 08:00:29 +0000
Files and hashes: 1: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: U1KHNzGmMHKFnYDK9AL6uSvHx5RvkwmU0BpYk5VToPg=)
2: znDve5CjV618M32KGB6DWBGicnw.roa (hash: ijbBK+p6F9dsyDrBRAIbTBjRD23gRWQsjidlNNmRMxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:ad:39:56:29:b0:1b:11:a5:5f:70:88:1b:73:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: Jul 29 08:00:29 2026 GMT
Not After : Jul 30 08:00:29 2026 GMT
Subject: CN=bab97fe415be62eecc6beb6ed2d5191078f08e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:80:80:26:46:ca:67:1f:fc:3e:24:ef:dc:0e:
40:f9:b1:51:79:65:61:9c:af:c5:0b:65:fe:f6:13:
d1:06:9a:88:5a:20:d5:6b:02:2d:dc:90:0e:28:8d:
9e:ed:49:10:7b:d4:cc:ef:51:db:b0:66:a0:fa:b6:
69:1d:20:20:24:d5:a0:f1:9d:2b:6a:ed:14:7a:f8:
0f:8c:1e:ac:a4:32:ff:90:34:3e:d9:48:c5:45:c9:
84:ae:92:ce:85:b8:a1:7c:82:03:72:24:1b:75:ad:
73:eb:21:76:e9:6f:a3:a1:e2:3e:9d:8c:e1:97:bb:
24:29:a0:e0:a7:c7:ca:49:09:9b:f6:c9:66:97:48:
18:b8:fa:2a:ce:1b:0b:45:59:eb:d1:57:ee:33:02:
fa:1c:63:14:40:fa:a4:3c:15:58:e5:f1:37:8b:22:
8e:2d:7b:3a:1d:31:f4:95:ca:d5:14:3b:d7:23:4f:
ca:11:30:2b:c6:ee:2e:2b:8d:ed:3a:df:2d:1a:ee:
94:03:52:c3:13:86:3f:c9:7b:56:80:f7:e5:d5:64:
0f:68:48:dc:ef:c9:36:7e:b8:e4:46:75:44:1b:fc:
aa:7c:fc:dd:1d:f8:6c:63:8c:21:b3:58:b6:56:26:
6c:97:db:56:bd:b1:bc:56:ca:f0:07:85:38:08:62:
15:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B9:7F:E4:15:BE:62:EE:CC:6B:EB:6E:D2:D5:19:10:78:F0:8E:06
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b4:7d:4a:52:f2:72:83:98:fb:ec:53:d5:1b:fa:d7:34:f1:
52:e4:e5:12:ce:f5:f0:8b:ed:cf:92:af:84:c0:f3:3b:6f:93:
8a:84:02:3f:c0:c6:04:6a:2a:ae:6c:8f:45:4b:50:cf:8f:09:
ab:7f:9b:6d:f3:cf:66:cc:dc:08:c6:62:b0:84:95:03:42:d1:
6d:86:11:73:d3:d3:7d:f4:49:b4:ac:93:17:56:86:4c:5e:90:
93:2b:c5:11:91:e5:1c:aa:e0:05:41:c2:6f:4e:91:92:47:12:
2f:ff:07:dc:4d:81:d2:70:5a:d5:a8:d3:77:44:87:5e:39:d5:
f5:7e:a3:c6:16:32:56:1f:e5:48:ff:b9:05:38:7a:02:95:80:
20:f4:05:81:aa:2d:fb:b9:b0:60:5d:cf:27:d0:f8:ab:25:5d:
e8:df:fa:dc:02:4b:59:72:d8:38:d4:a5:ef:92:3d:f3:f0:53:
5c:b0:d9:80:da:bf:2a:f6:a7:ca:df:73:7f:c8:2e:95:66:85:
8a:87:83:85:18:1c:e7:5d:d4:8a:26:a6:92:4d:37:12:4b:17:
03:b1:4b:f1:a7:75:d2:8f:02:37:e9:6f:37:8b:18:1b:fd:45:
fa:6d:86:b0:8c:60:7b:5e:0a:27:81:00:2a:59:34:08:0b:71:
09:f0:b3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:17:20 2026 by rpki-client