Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: m/aOlu2vXpz8jtxQn9rKhgdV53TvB5SlPAlLO8rX04g=
Subject key identifier: 12:63:C6:D4:62:D4:F0:FF:FA:82:94:FD:9D:B5:EB:E5:0D:CA:FD:A3
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 019E1F10A3E6AE9CEF967D249EF236858FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 0957
Signing time: Wed 13 May 2026 02:00:44 +0000
Manifest this update: Wed 13 May 2026 02:00:44 +0000
Manifest next update: Thu 14 May 2026 02:00:44 +0000
Files and hashes: 1: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: aQF6vRDMndz2L4MyA9i+rX/jlYU73WlSaNRjIMWH7DE=)
2: znDve5CjV618M32KGB6DWBGicnw.roa (hash: ijbBK+p6F9dsyDrBRAIbTBjRD23gRWQsjidlNNmRMxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:a3:e6:ae:9c:ef:96:7d:24:9e:f2:36:85:8f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: May 13 02:00:44 2026 GMT
Not After : May 14 02:00:44 2026 GMT
Subject: CN=1263c6d462d4f0fffa8294fd9db5ebe50dcafda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:44:db:09:8a:c5:3c:a8:34:ef:4d:72:b1:
d8:fe:fd:a0:70:ba:fe:84:3a:65:af:c6:b6:35:f1:
f8:da:24:6a:f8:cd:00:b7:be:c7:62:54:77:34:0f:
c2:62:39:64:b7:34:8d:09:81:93:c8:48:19:0b:13:
80:f1:3a:05:b0:4b:37:31:83:13:35:b9:b8:49:a2:
55:f7:37:8c:82:8c:c0:0b:6b:61:a8:d7:4a:a8:8a:
43:76:11:0a:6d:de:40:72:66:b9:87:e1:ed:fe:5c:
8e:ff:2a:cc:64:66:21:0c:80:5e:bd:9f:02:6f:c9:
1d:b1:12:2b:44:a6:97:8d:20:88:ce:88:bf:10:3a:
32:d4:b7:25:b9:31:2a:4b:01:ef:4d:1e:c9:e2:c4:
09:84:47:2c:a5:8d:54:5d:79:23:50:a7:07:75:71:
89:51:6a:48:4d:57:15:cd:61:5b:2c:ab:6d:6e:1c:
69:c7:2c:94:ed:f0:cc:81:07:95:95:8c:05:19:ba:
27:61:58:0c:b2:a8:76:e0:c5:88:5f:ce:93:54:71:
8b:1a:33:01:3a:c4:35:8c:37:d8:06:e5:d3:aa:3a:
08:90:3a:b2:e4:e5:32:7e:3d:c4:46:84:87:7a:e8:
d8:d4:9a:45:59:fb:02:67:50:66:53:46:4d:7e:a9:
f4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:63:C6:D4:62:D4:F0:FF:FA:82:94:FD:9D:B5:EB:E5:0D:CA:FD:A3
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:07:3b:16:42:2a:fa:07:a3:39:c4:22:40:30:ee:e6:ee:e5:
ec:3b:ae:e1:a6:49:86:75:3e:ee:9c:80:0a:2d:38:04:d3:c8:
99:d5:65:97:16:d4:f4:bd:eb:98:1a:37:d2:9a:8c:c8:27:16:
06:7e:32:82:a9:34:44:f7:03:fb:91:b3:5d:0f:c1:77:40:fc:
44:80:6e:c8:43:61:b5:b3:39:a3:80:25:0a:1a:1d:f4:bc:b6:
38:01:3a:bf:b4:d0:5a:63:22:0a:c6:55:45:4f:02:c8:87:eb:
56:97:4d:e6:ad:cf:d0:98:17:7b:c7:82:8c:ff:d3:e3:e1:ba:
31:0c:89:4d:b6:e9:7a:a1:73:aa:f2:6d:9f:2e:2c:10:c5:20:
4b:d7:e4:54:bc:60:2d:08:d5:48:00:d1:31:22:b1:fa:e3:7b:
6e:5f:45:3d:da:c2:6c:16:86:e8:0b:64:f0:8c:31:07:db:ef:
c0:c5:f4:14:e1:25:d0:68:eb:03:a9:58:78:71:ef:a9:1d:67:
66:06:10:b3:93:37:04:9d:d4:35:13:ec:cb:8a:95:e6:f3:90:
bc:6a:34:f1:a4:ad:cc:1f:33:4d:9b:33:55:98:fd:dd:6b:19:
6b:30:73:b0:48:44:9b:b8:94:3d:b3:31:c2:09:d2:c5:6c:b9:
2c:d9:be:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEKPmrpzvln0knvI2hY+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MDJjNzk4NzAwNGFlNzgxOTBlNjkxZTM3MGRlNTA5ZmY1
OTEyN2IwHhcNMjYwNTEzMDIwMDQ0WhcNMjYwNTE0MDIwMDQ0WjAzMTEwLwYDVQQD
EygxMjYzYzZkNDYyZDRmMGZmZmE4Mjk0ZmQ5ZGI1ZWJlNTBkY2FmZGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9NE2wmKxTyoNO9NcrHY/v2gcLr+
hDplr8a2NfH42iRq+M0At77HYlR3NA/CYjlktzSNCYGTyEgZCxOA8ToFsEs3MYMT
Nbm4SaJV9zeMgozAC2thqNdKqIpDdhEKbd5Acma5h+Ht/lyO/yrMZGYhDIBevZ8C
b8kdsRIrRKaXjSCIzoi/EDoy1LcluTEqSwHvTR7J4sQJhEcspY1UXXkjUKcHdXGJ
UWpITVcVzWFbLKttbhxpxyyU7fDMgQeVlYwFGbonYVgMsqh24MWIX86TVHGLGjMB
OsQ1jDfYBuXTqjoIkDqy5OUyfj3ERoSHeujY1JpFWfsCZ1BmU0ZNfqn08wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJjxtRi1PD/+oKU/Z216+UNyv2jMB8GA1UdIwQY
MBaAFDgCx5hwBK54GQ5pHjcN5Qn/WRJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9mZTVhYzEtMjhmZS00M2VjLTg3MDAt
YmYyNWNlMGY4MzkzLzEvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9mZTVhYzEtMjhmZS00M2VjLTg3MDAtYmYyNWNlMGY4Mzkz
LzEvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwc7FkIq
+gejOcQiQDDu5u7l7Duu4aZJhnU+7pyACi04BNPImdVllxbU9L3rmBo30pqMyCcW
Bn4ygqk0RPcD+5GzXQ/Bd0D8RIBuyENhtbM5o4AlChod9Ly2OAE6v7TQWmMiCsZV
RU8CyIfrVpdN5q3P0JgXe8eCjP/T4+G6MQyJTbbpeqFzqvJtny4sEMUgS9fkVLxg
LQjVSADRMSKx+uN7bl9FPdrCbBaG6Atk8IwxB9vvwMX0FOEl0GjrA6lYeHHvqR1n
ZgYQs5M3BJ3UNRPsy4qV5vOQvGo08aStzB8zTZszVZj93WsZazBzsEhEm7iUPbMx
wgnSxWy5LNm+aw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:16:24 2026 by rpki-client