Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
File: om-n7jCto1qx_ATzQP7fZHqfgWI.mft (raw, json)
Hash identifier: SWySqa5bUMu4MN3jQcOSvyMIpvZsOQ7U5u1853Fe2mc=
Subject key identifier: 0D:F1:A5:80:25:B6:1A:50:52:D4:E6:F6:DC:97:D1:41:B4:D0:EF:AC
Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
Certificate issuer: /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Certificate serial: 019D37890D7891146FA46F340C03C81CB1FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 03:00:21 +0000
Manifest this update: Sun 29 Mar 2026 03:00:21 +0000
Manifest next update: Mon 30 Mar 2026 03:00:21 +0000
Files and hashes: 1: nlwPCqdx2lOTVgz8lZL0i1VNbYM.roa (hash: 2DCxPDKTN3hjXlK5stoi0CcHybhnZoUg5yfutSyUspU=)
2: om-n7jCto1qx_ATzQP7fZHqfgWI.crl (hash: OesyyZgluyWUQ5ucE6Ds8tHn/vYCUr1rOba+Aq5MV7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:0d:78:91:14:6f:a4:6f:34:0c:03:c8:1c:b1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Validity
Not Before: Mar 29 03:00:21 2026 GMT
Not After : Mar 30 03:00:21 2026 GMT
Subject: CN=0df1a58025b61a5052d4e6f6dc97d141b4d0efac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:04:94:78:80:4e:a9:ca:84:d4:06:b7:fd:f9:
cc:ca:de:1d:68:73:6b:11:49:0e:d3:cc:9d:ad:db:
c5:5c:9e:92:13:59:c2:06:a0:97:d5:e6:2d:c5:2f:
f9:54:3a:20:59:01:6b:35:10:69:fd:42:ad:8b:4d:
90:f3:35:7a:36:9f:af:dd:1f:ef:dd:74:8f:55:d1:
76:39:eb:27:8f:ee:e9:df:2c:e8:a5:cc:79:fd:c7:
86:d1:52:a3:22:ab:f2:8c:98:32:6d:6c:30:d0:f3:
f2:56:9e:1f:33:12:59:11:a7:7a:eb:53:ed:a5:a5:
a0:5f:5c:d2:a6:48:b3:f6:df:f8:77:44:d1:c8:87:
7b:6f:06:ab:88:3e:0f:e6:13:0f:c0:8d:de:5b:09:
0c:44:42:69:e3:08:01:a3:cb:a4:57:39:ba:c3:83:
66:35:02:1b:13:6f:8d:d7:48:c1:ef:39:6b:af:01:
cc:ba:bf:a9:58:2d:21:7f:03:47:b0:3e:65:c5:42:
c2:27:c9:7b:18:fd:6d:e7:67:d3:3b:3c:15:7c:5e:
59:b7:33:e6:b5:a4:4a:88:a6:db:60:33:72:67:74:
4b:e1:72:e5:58:fb:d3:73:91:87:b0:b5:97:72:a5:
57:d5:6a:82:ea:05:a5:ad:37:d6:85:0d:8b:15:74:
55:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F1:A5:80:25:B6:1A:50:52:D4:E6:F6:DC:97:D1:41:B4:D0:EF:AC
X509v3 Authority Key Identifier:
keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:4a:28:a3:62:42:dc:dc:66:af:72:2d:a4:ef:48:42:b5:1c:
74:9d:d7:54:73:e1:23:01:46:ad:a1:ec:87:ff:52:d0:dc:10:
73:c1:ea:91:87:e3:bb:a4:91:85:73:ba:23:90:e8:f2:c3:13:
95:af:46:d5:66:81:51:55:d8:ca:53:73:72:85:0e:2e:9c:ae:
eb:69:87:09:53:00:f0:eb:3b:bd:54:fc:fa:0f:0a:f0:90:fe:
ad:10:3c:cf:16:93:3c:cd:91:f1:b9:91:6c:11:12:64:e4:c5:
c8:4a:eb:f2:8d:43:3c:75:ae:36:a3:7a:6c:76:46:af:96:6a:
c4:77:ba:d3:16:21:a6:ce:3c:f7:d5:03:cf:c5:99:a8:cd:4d:
d7:9c:73:01:f0:28:4b:48:42:c5:a8:9c:b6:47:e5:41:3e:1d:
ed:58:50:63:d9:70:d9:71:dc:c3:13:04:ce:59:fd:b4:ce:d0:
ff:40:6b:84:99:82:2a:f5:8d:c6:e1:51:62:09:48:32:2d:cd:
b7:5a:2d:ae:37:32:9e:3f:75:d1:03:1d:49:8d:6b:b2:9a:98:
cf:c2:54:9b:81:3f:dc:61:20:c5:82:10:b7:d7:be:39:0a:c3:
74:9a:df:39:81:a7:8f:23:79:69:1c:39:b0:96:7c:e5:99:96:
3a:50:6f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:01 2026 by rpki-client