Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: hGI0RZFsN0ao5FjWFbngeHw2NuTQ0aIch4FLge+9/Kw=
Subject key identifier: 27:F6:A3:C4:0B:D5:75:8B:57:51:41:65:DC:DD:C4:A3:BB:A0:09:2E
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 019D29CE1E9999C05B140DF804EEFBDC5411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 08D8
Signing time: Thu 26 Mar 2026 11:01:07 +0000
Manifest this update: Thu 26 Mar 2026 11:01:07 +0000
Manifest next update: Fri 27 Mar 2026 11:01:07 +0000
Files and hashes: 1: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: GpbuK9kiGMpfX2wvxq/6pvvJTTcaBMq05ohnmUUvCU8=)
2: znDve5CjV618M32KGB6DWBGicnw.roa (hash: ijbBK+p6F9dsyDrBRAIbTBjRD23gRWQsjidlNNmRMxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:1e:99:99:c0:5b:14:0d:f8:04:ee:fb:dc:54:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: Mar 26 11:01:07 2026 GMT
Not After : Mar 27 11:01:07 2026 GMT
Subject: CN=27f6a3c40bd5758b57514165dcddc4a3bba0092e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e0:89:6e:53:09:3c:68:bf:c7:76:6e:aa:5e:
e0:72:31:da:e5:f3:b9:d1:8e:65:f6:cc:1a:e1:d9:
0c:19:ba:00:c2:c6:db:bb:aa:75:8c:5f:af:e5:25:
02:dc:82:55:a8:f5:35:62:68:1f:76:78:97:89:15:
9d:8f:b2:82:ae:fd:90:30:b5:a0:f3:1a:85:d1:58:
77:98:55:45:1a:4c:76:c4:06:26:a8:1f:89:af:df:
34:86:17:a2:77:cc:43:cc:19:fe:6b:fe:cd:1b:4a:
eb:fe:36:f0:50:27:70:5e:d2:41:f8:80:07:af:f0:
8f:40:d5:1a:29:7c:32:5c:e5:35:8e:42:22:98:e6:
65:42:f1:ff:48:73:ca:b0:5e:87:2d:30:78:f8:f9:
26:fc:92:14:93:80:4e:aa:b3:01:52:1a:0c:7c:af:
8f:ef:c0:1a:4b:e5:87:1b:2d:a2:20:d2:66:5a:bb:
fc:66:f7:d4:a6:c2:94:13:e5:57:23:7a:d1:80:c2:
8e:f2:10:84:b9:fb:c3:ff:39:64:ac:47:8d:15:9b:
ec:8f:ca:05:3c:e4:01:a0:26:c6:85:b8:e0:53:02:
7b:ff:27:c8:7b:7d:dc:3c:54:e4:ef:87:ef:07:61:
e2:52:39:c2:b0:c1:fa:07:38:23:7f:3d:53:50:2d:
23:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F6:A3:C4:0B:D5:75:8B:57:51:41:65:DC:DD:C4:A3:BB:A0:09:2E
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:50:b9:2e:14:28:39:6a:4c:be:6e:4a:ca:9e:db:f9:65:a1:
cf:bd:03:b5:0a:fe:84:01:41:19:03:a7:0c:0b:c6:e8:b2:fd:
11:c5:ae:1b:df:72:2a:16:eb:0c:b7:aa:08:8c:9b:2a:ec:12:
87:fb:5f:48:5d:95:6b:72:36:95:ee:6f:fd:a4:a5:cd:5b:0c:
a6:0d:15:43:7a:aa:18:e0:9a:14:f5:ba:81:cb:a5:89:bf:47:
01:ea:c4:12:23:c4:1f:3e:2a:1a:68:0d:a2:c9:ea:d3:b3:42:
01:17:ab:91:01:0a:5e:b0:e3:81:76:f9:4c:cb:a3:dd:c6:ca:
12:d7:eb:fc:94:48:f6:c8:b2:1e:d2:6d:63:f5:c7:18:e9:ee:
99:55:71:2f:88:b9:43:70:da:52:3d:bc:19:f7:71:2c:ad:d9:
11:89:6f:74:05:82:89:b3:cc:b0:c4:2d:ff:0a:c9:fc:06:d5:
bf:08:b2:b5:44:d1:12:09:d2:ff:07:b7:4e:84:17:59:ab:17:
d5:2a:5a:d4:78:2b:1a:fe:51:d3:d7:56:01:18:04:3c:ce:a2:
43:99:00:e2:fb:f5:42:e0:d1:30:c3:09:c8:fe:e6:da:08:4c:
ff:e3:09:88:ac:5e:4e:81:4d:3f:57:34:bf:65:8e:0c:59:0d:
6f:2e:ad:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:42 2026 by rpki-client