Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: rcZ4UieIxmb9MgBVKRBEnco7gaGg2PG9qUm7Q0MIMV0=
Subject key identifier: D3:50:BA:03:52:4E:BD:F6:E5:66:45:B7:58:B7:84:8C:DD:24:00:30
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 01A0ED78ABD1BA2A14BD078EAEFF48F35556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 0ACB
Signing time: Tue 29 Sep 2026 14:01:43 +0000
Manifest this update: Tue 29 Sep 2026 14:01:43 +0000
Manifest next update: Wed 30 Sep 2026 14:01:43 +0000
Files and hashes: 1: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: 1ox3o5j67LGiENDkXz6oESv8XBcyNM1v56dV73fykOk=)
2: znDve5CjV618M32KGB6DWBGicnw.roa (hash: ijbBK+p6F9dsyDrBRAIbTBjRD23gRWQsjidlNNmRMxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:78:ab:d1:ba:2a:14:bd:07:8e:ae:ff:48:f3:55:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: Sep 29 14:01:43 2026 GMT
Not After : Sep 30 14:01:43 2026 GMT
Subject: CN=d350ba03524ebdf6e56645b758b7848cdd240030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:33:22:aa:1f:0e:77:6d:dc:be:b7:a8:ab:78:
5d:1d:c4:8c:e0:82:60:d8:d2:77:2d:9c:4e:a7:57:
8d:19:80:38:75:66:ba:4f:7a:dc:1a:95:56:68:34:
ec:27:b7:db:87:01:71:6b:04:1a:e7:59:43:e5:2a:
1e:23:6f:ff:e3:2e:9d:9d:47:ed:7f:5b:5e:96:83:
95:94:87:a8:66:71:3d:df:87:26:9a:18:c2:9a:ea:
76:5e:36:83:4d:1a:0c:3b:5d:46:ae:65:d4:64:5a:
a2:a1:c6:97:3d:3c:fa:b8:51:21:f5:04:2c:ae:f4:
0d:93:26:ce:9e:bb:eb:df:e5:b9:b6:a9:74:a8:9c:
65:0c:a7:88:87:99:bb:06:ce:c3:9b:f2:5f:a6:59:
e6:59:14:86:d9:78:47:6d:86:39:a3:3a:e4:b7:da:
e7:41:73:2c:9c:14:e8:45:74:55:10:f4:9d:6d:3d:
fa:15:33:1f:78:e9:25:dc:18:e9:be:28:d9:89:29:
af:2a:03:39:cb:de:5a:b2:16:c3:a3:18:52:71:b3:
5b:de:67:8d:6e:fc:b6:80:bb:bf:e5:88:fc:0a:b1:
42:4b:85:67:15:c7:41:96:64:e6:35:5e:10:d4:fb:
46:b3:31:b1:e3:fb:83:9b:97:40:b4:32:4d:71:1f:
58:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:50:BA:03:52:4E:BD:F6:E5:66:45:B7:58:B7:84:8C:DD:24:00:30
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:37:99:95:10:2f:14:e3:e3:3b:0a:c0:54:02:c2:09:3d:1b:
b7:b1:85:e8:63:8f:7b:8f:1a:5f:a0:fc:20:36:ec:05:af:f5:
ed:e5:82:7f:72:86:52:e9:e0:6f:1b:a4:9f:53:de:60:4e:ec:
ba:43:36:05:d7:d9:3e:84:45:8e:b0:a5:51:da:73:96:4c:9d:
ec:7a:01:38:3a:ee:9a:dd:68:ff:e9:05:6d:22:8c:fe:b5:db:
61:2e:28:0b:eb:1c:32:2f:24:42:64:99:b3:56:65:a5:6f:16:
cc:1a:fd:2b:fd:bd:01:c8:48:c0:59:d5:2d:61:68:08:3c:3f:
50:bb:b8:ac:7d:64:aa:9e:f4:b5:17:cc:f7:22:73:ec:fc:5e:
9c:fa:7c:15:ef:6b:dc:5b:06:44:fd:a2:dc:43:62:ce:f3:cf:
90:92:e6:da:aa:8d:3f:38:e7:3e:61:2b:c3:fa:be:5f:17:17:
c1:dd:8a:c9:69:5c:ae:8b:d7:e4:32:80:6d:e5:dc:f7:1d:3e:
36:83:6a:7f:4d:be:34:73:d5:54:5f:46:95:f1:fc:6c:6e:6b:
ed:9c:7d:4a:48:e8:9c:1f:38:21:24:bd:3c:b9:84:ee:86:5b:
17:fb:d6:0f:98:ad:75:42:de:d7:b6:6b:96:73:24:91:ef:64:
8b:6f:5c:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDteKvRuioUvQeOrv9I81VWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MDJjNzk4NzAwNGFlNzgxOTBlNjkxZTM3MGRlNTA5ZmY1
OTEyN2IwHhcNMjYwOTI5MTQwMTQzWhcNMjYwOTMwMTQwMTQzWjAzMTEwLwYDVQQD
EyhkMzUwYmEwMzUyNGViZGY2ZTU2NjQ1Yjc1OGI3ODQ4Y2RkMjQwMDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TMiqh8Od23cvreoq3hdHcSM4IJg
2NJ3LZxOp1eNGYA4dWa6T3rcGpVWaDTsJ7fbhwFxawQa51lD5SoeI2//4y6dnUft
f1teloOVlIeoZnE934cmmhjCmup2XjaDTRoMO11GrmXUZFqiocaXPTz6uFEh9QQs
rvQNkybOnrvr3+W5tql0qJxlDKeIh5m7Bs7Dm/JfplnmWRSG2XhHbYY5ozrkt9rn
QXMsnBToRXRVEPSdbT36FTMfeOkl3BjpvijZiSmvKgM5y95ashbDoxhScbNb3meN
bvy2gLu/5Yj8CrFCS4VnFcdBlmTmNV4Q1PtGszGx4/uDm5dAtDJNcR9Y6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNQugNSTr325WZFt1i3hIzdJAAwMB8GA1UdIwQY
MBaAFDgCx5hwBK54GQ5pHjcN5Qn/WRJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9mZTVhYzEtMjhmZS00M2VjLTg3MDAt
YmYyNWNlMGY4MzkzLzEvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9mZTVhYzEtMjhmZS00M2VjLTg3MDAtYmYyNWNlMGY4Mzkz
LzEvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDeZlRAv
FOPjOwrAVALCCT0bt7GF6GOPe48aX6D8IDbsBa/17eWCf3KGUungbxukn1PeYE7s
ukM2BdfZPoRFjrClUdpzlkyd7HoBODrumt1o/+kFbSKM/rXbYS4oC+scMi8kQmSZ
s1ZlpW8WzBr9K/29AchIwFnVLWFoCDw/ULu4rH1kqp70tRfM9yJz7PxenPp8Fe9r
3FsGRP2i3ENizvPPkJLm2qqNPzjnPmErw/q+XxcXwd2KyWlcrovX5DKAbeXc9x0+
NoNqf02+NHPVVF9GlfH8bG5r7Zx9SkjonB84ISS9PLmE7oZbF/vWD5itdULe17Zr
lnMkke9ki29cnQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 19:10:29 2026 by rpki-client