Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
File: om1GISmD2nHzGuV-WcOeCbM5ygI.mft (raw, json)
Hash identifier: JE9dWeXmtS+g47IAI7E1ueTvoZVivWIImNAYPshwiY8=
Subject key identifier: 6E:1C:07:F2:AE:39:67:D6:15:9C:71:53:96:0A:71:B3:DB:55:30:DB
Authority key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
Certificate issuer: /CN=a26d46212983da71f31ae57e59c39e09b339ca02
Certificate serial: 019D3865E97D434B1C597C55F18F1C2CBCED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
Manifest number: 0F5B
Signing time: Sun 29 Mar 2026 07:01:35 +0000
Manifest this update: Sun 29 Mar 2026 07:01:35 +0000
Manifest next update: Mon 30 Mar 2026 07:01:35 +0000
Files and hashes: 1: 48VETktm8u5cwxfi5tzhrXCS1PA.roa (hash: pocJNPkIQ+wfrZHo23pdtb1YIKYD79x6IBlh2144Vzk=)
2: om1GISmD2nHzGuV-WcOeCbM5ygI.crl (hash: yerjhz+JISSRBnSsyl1EuhiZAic9q/JPcuhuvafH4H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e9:7d:43:4b:1c:59:7c:55:f1:8f:1c:2c:bc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26d46212983da71f31ae57e59c39e09b339ca02
Validity
Not Before: Mar 29 07:01:35 2026 GMT
Not After : Mar 30 07:01:35 2026 GMT
Subject: CN=6e1c07f2ae3967d6159c7153960a71b3db5530db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:21:b3:d1:c6:e5:8e:47:33:1c:08:e9:03:
d8:e3:8c:33:15:9f:ad:45:8e:43:0c:c8:2d:a4:f2:
c6:b9:3c:57:5d:38:2f:fd:2b:c3:4c:14:30:80:9f:
b0:48:0e:d8:54:55:59:40:02:c4:23:cb:11:60:a6:
f3:76:0e:13:80:0a:5c:b2:65:9e:c9:a1:18:e2:0f:
d5:ae:59:1c:8f:63:24:52:57:ff:fe:83:95:4c:02:
f9:35:a0:78:36:28:4a:49:39:86:8e:cf:26:1a:f1:
85:5b:f2:1d:63:76:4c:e2:b9:a2:4b:be:41:01:fc:
04:8f:75:39:4f:0d:4b:18:93:55:34:0f:34:bb:19:
79:fe:75:04:d9:1d:86:6d:6a:1c:27:7c:12:c1:21:
d4:fc:0f:10:77:b1:dc:e4:a1:2f:98:bf:11:6e:f8:
3d:9e:57:d4:ec:03:de:ba:33:cf:ad:85:52:25:e3:
04:d8:a1:81:cd:78:ad:bc:04:7f:9f:80:6c:7f:e2:
dc:c1:89:98:22:fc:eb:75:75:56:0d:30:24:6f:0d:
99:04:c0:48:98:b1:f4:85:78:25:45:9e:8e:f4:44:
5f:5a:7e:46:22:cd:ee:56:ba:f2:cf:6e:cd:52:9f:
56:33:4b:87:60:ca:3f:c8:a7:6e:95:73:d9:63:44:
86:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1C:07:F2:AE:39:67:D6:15:9C:71:53:96:0A:71:B3:DB:55:30:DB
X509v3 Authority Key Identifier:
keyid:A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:88:8b:e5:5a:7b:84:3d:42:be:5d:d5:52:78:96:74:33:0b:
a1:83:0c:f5:ac:73:94:a2:ec:86:bd:a0:fb:ec:1c:e9:25:f3:
7b:a1:a6:88:a8:af:88:02:2c:cd:e0:2b:e4:9c:87:3d:d4:a4:
ab:79:82:03:6e:f5:1e:1a:af:a1:e7:fe:f1:54:85:6f:4b:03:
ce:21:bc:07:8e:b8:ec:43:45:a6:2d:8e:96:b1:f2:b4:64:ef:
f2:b6:f5:42:7c:78:96:2c:60:6d:81:95:db:30:cb:ba:09:33:
da:11:a0:49:0b:59:25:a5:60:bc:63:8a:8c:0e:1d:c5:99:d8:
5f:6f:ed:04:08:96:6e:fb:fe:c8:bd:eb:1e:a1:c0:a0:ae:64:
9c:01:bf:d7:d2:32:66:cd:59:3f:44:7a:10:94:0a:d1:9b:33:
45:44:f9:0b:e2:53:7d:52:ac:a4:5a:cc:f1:1c:5d:83:ca:ff:
b1:a6:eb:b3:5a:34:63:b9:71:1e:73:e1:62:9f:89:5b:d6:15:
1e:3c:3e:a5:d9:e9:b3:eb:67:03:64:b0:a4:eb:23:1e:6d:26:
b6:87:e5:0a:0a:ae:ef:e2:24:ea:9e:54:17:7a:bc:71:e8:4b:
af:fe:70:03:88:17:62:51:99:89:4b:84:b6:6b:13:c3:83:9d:
6b:c7:02:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:48:59 2026 by rpki-client