Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: IaHbwZKvJ350zsuzlnWfb1xOeEln8hQH1VqYqvblN4s=
Subject key identifier: A6:03:F3:65:02:CC:B0:3D:86:90:44:DE:7D:E4:AA:87:F1:A7:60:81
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 019F93C89807322C2CC00C206019BF1479EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 0A18
Signing time: Fri 24 Jul 2026 11:00:24 +0000
Manifest this update: Fri 24 Jul 2026 11:00:24 +0000
Manifest next update: Sat 25 Jul 2026 11:00:24 +0000
Files and hashes: 1: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: mU5BKTkB4xF5Q7RYpa0l60QbtTJ8NpgZzQ1fEugBBB0=)
2: znDve5CjV618M32KGB6DWBGicnw.roa (hash: ijbBK+p6F9dsyDrBRAIbTBjRD23gRWQsjidlNNmRMxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:98:07:32:2c:2c:c0:0c:20:60:19:bf:14:79:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: Jul 24 11:00:24 2026 GMT
Not After : Jul 25 11:00:24 2026 GMT
Subject: CN=a603f36502ccb03d869044de7de4aa87f1a76081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d4:9b:1a:b6:66:5f:88:14:f4:fc:b6:21:64:
25:9b:2d:fb:a7:65:79:c2:2c:38:5f:0a:02:5e:ae:
85:a0:cc:62:c1:3f:c8:8c:62:81:33:3e:8d:38:43:
43:29:dc:64:fb:7b:3b:0d:53:c5:7c:f0:e0:24:b9:
b6:13:80:9c:26:14:ab:fb:80:1a:99:69:9e:75:c7:
f4:5a:43:80:d7:8f:19:8b:4c:ad:98:d5:df:19:2b:
d1:38:ed:4e:88:51:05:09:da:58:7f:40:ef:c0:d7:
47:f5:7a:63:64:26:8c:dc:5e:bb:cf:c8:56:ac:31:
7d:e2:9e:df:04:df:32:a0:75:75:90:9e:14:59:b7:
be:65:b7:ed:28:d3:3d:58:d5:c6:e1:3a:6e:b9:a7:
8d:7b:02:fb:ef:bf:19:56:56:e7:5c:db:10:a4:30:
ac:72:44:ff:37:68:72:be:7f:aa:59:fa:1c:4c:66:
80:7d:7f:8c:c9:06:55:2b:82:a8:ee:a6:d8:31:bf:
97:e9:1e:7a:63:d2:dd:4b:83:bc:90:5d:75:bd:2c:
42:de:f2:3a:78:91:c6:6c:46:e4:ac:77:78:3a:a0:
5b:eb:05:4e:61:d7:9d:a9:b1:19:8f:77:f8:e0:4d:
37:78:48:8f:6a:80:19:19:60:d5:5d:ec:56:97:e7:
1d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:03:F3:65:02:CC:B0:3D:86:90:44:DE:7D:E4:AA:87:F1:A7:60:81
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:df:56:9b:42:ab:9c:bb:43:3d:20:78:c7:49:42:9f:5d:65:
47:a8:0f:a1:dd:53:97:93:e4:56:cf:67:f5:76:1c:9f:ad:73:
94:5d:70:09:90:52:4a:ea:14:54:18:06:37:7f:a8:0f:85:2b:
55:d0:a7:92:9b:84:c1:2a:7f:d0:59:5d:7f:30:66:46:bd:7e:
40:0e:89:e0:70:f9:02:5c:aa:c7:e2:88:10:45:ba:cb:a0:d3:
cf:e8:69:38:12:25:a1:2e:c6:46:ab:0f:ed:3b:6f:29:2f:25:
84:62:c5:84:10:e9:53:3f:60:11:84:3b:c6:dd:89:55:a5:03:
3c:23:fc:f8:8d:a9:1c:be:17:84:e8:a9:1a:03:d6:5d:ae:b1:
8b:9f:6e:b1:5b:6c:ca:da:37:78:94:1e:d8:29:09:db:20:7c:
23:db:56:66:2e:33:6f:37:dd:ec:96:bb:aa:79:31:7b:9a:f6:
5d:e5:cc:60:b0:e2:cd:0b:49:6a:d2:5a:9c:a4:ae:8f:73:59:
82:8b:e6:81:f8:e2:a0:83:ec:07:f4:76:f6:d8:f8:2a:41:f7:
5b:d8:e8:11:c6:96:0b:65:90:f7:e6:44:72:7e:68:ad:f3:e7:
57:78:82:ca:65:23:69:c5:9c:09:55:99:c6:81:2b:93:87:0a:
65:4b:41:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:11:26 2026 by rpki-client