Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft
File: oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft (raw, json)
Hash identifier: enN+1Vr8ULAd+/bXnu8odFmuRdG5DFHKTxaGSFaAUIs=
Subject key identifier: 56:E6:CA:11:37:A4:E2:79:26:5C:12:DB:63:40:2F:20:0B:C0:EC:8F
Authority key identifier: A0:CA:33:E7:F6:72:5E:B4:EE:87:BA:91:B1:DD:2E:1C:42:16:8C:39
Certificate issuer: /CN=a0ca33e7f6725eb4ee87ba91b1dd2e1c42168c39
Certificate serial: 019D386651047C58FB9974D233B21A6E0E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft
Manifest number: 145F
Signing time: Sun 29 Mar 2026 07:02:02 +0000
Manifest this update: Sun 29 Mar 2026 07:02:02 +0000
Manifest next update: Mon 30 Mar 2026 07:02:02 +0000
Files and hashes: 1: oMoz5_ZyXrTuh7qRsd0uHEIWjDk.crl (hash: lLxx/UEg7aD9o6IpkZf2BNRWunJE6Y38U8YtASSSdmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:51:04:7c:58:fb:99:74:d2:33:b2:1a:6e:0e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ca33e7f6725eb4ee87ba91b1dd2e1c42168c39
Validity
Not Before: Mar 29 07:02:02 2026 GMT
Not After : Mar 30 07:02:02 2026 GMT
Subject: CN=56e6ca1137a4e279265c12db63402f200bc0ec8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:25:49:2a:61:eb:d7:b2:84:ab:9f:8b:d6:
e9:d9:c0:17:3b:9e:be:75:c5:84:4e:3a:9e:ac:ae:
03:50:52:24:fc:9c:12:fa:c5:c8:88:7d:e1:c8:25:
4d:c3:c8:b3:03:11:c0:86:ec:fd:3b:b1:09:f6:ab:
43:72:62:73:5c:25:e0:5f:8c:71:c9:03:26:56:b4:
7d:af:97:0a:fc:40:61:e5:ce:cd:06:75:ac:0c:3b:
a6:d8:bf:b0:5f:61:62:0f:23:28:bc:91:81:18:62:
65:f2:b7:00:35:be:3e:34:f5:46:66:32:0b:fd:f2:
13:be:50:79:41:fb:46:f2:ed:6e:d4:4d:c7:8a:83:
d8:a1:db:28:65:8e:07:a0:f1:03:1a:40:67:10:f3:
06:c5:c9:fc:39:d7:b2:ce:b7:68:c9:58:78:2e:7b:
2f:c6:39:5f:42:f1:f6:39:c4:ce:64:5f:11:53:28:
bc:b9:11:a1:13:db:f4:3c:d6:8a:87:f4:90:97:23:
a9:7c:71:18:ee:6d:c5:8d:25:ec:2e:72:3a:8d:1d:
96:54:99:5b:1f:d3:f4:80:f3:e5:e8:ca:d5:6d:44:
23:03:dd:be:50:3f:c7:e9:ac:04:9d:a8:52:3f:d7:
1d:fc:bc:55:fa:25:a3:cc:3a:81:15:0f:48:4b:b5:
9f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E6:CA:11:37:A4:E2:79:26:5C:12:DB:63:40:2F:20:0B:C0:EC:8F
X509v3 Authority Key Identifier:
keyid:A0:CA:33:E7:F6:72:5E:B4:EE:87:BA:91:B1:DD:2E:1C:42:16:8C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:75:79:c1:e8:20:68:27:26:fb:ed:f1:5a:d4:14:3a:18:05:
4e:bc:4a:c0:51:f6:8f:2d:b0:ec:53:a1:9e:a7:05:57:52:ea:
86:83:52:72:35:50:48:ef:73:f6:60:d5:51:6a:a4:7d:62:fc:
36:be:bf:61:c7:19:ff:db:0a:58:4c:54:13:55:25:f3:bf:b7:
4d:d0:b8:24:43:99:a8:2c:2f:41:7a:24:fe:95:73:01:92:94:
ec:8e:95:63:43:62:40:aa:60:4d:17:ec:92:4f:cc:ee:39:bb:
bb:3f:02:a7:16:71:af:fd:89:32:23:47:87:c4:42:7a:60:17:
e3:f4:50:7b:1a:13:1b:c9:76:47:1b:df:3e:b7:61:25:41:64:
5e:3c:a9:98:60:98:e8:02:35:fe:8e:98:14:e7:01:f4:14:58:
aa:e6:d1:f5:c2:21:41:0f:2a:38:d8:45:0a:60:93:11:62:21:
2a:56:fc:ce:f1:a7:0d:20:20:9c:a1:d5:8c:ab:b6:47:f9:50:
5d:6f:07:bc:36:7d:63:14:20:7d:91:73:99:31:9e:2f:81:93:
0d:76:09:8c:32:78:ea:b5:35:05:03:16:cc:52:23:3b:7c:01:
98:64:72:86:8e:6b:18:f3:2c:f3:a9:17:e7:f4:d5:b8:e3:eb:
4c:47:e7:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZlEEfFj7mXTSM7Iabg43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwY2EzM2U3ZjY3MjVlYjRlZTg3YmE5MWIxZGQyZTFjNDIx
NjhjMzkwHhcNMjYwMzI5MDcwMjAyWhcNMjYwMzMwMDcwMjAyWjAzMTEwLwYDVQQD
Eyg1NmU2Y2ExMTM3YTRlMjc5MjY1YzEyZGI2MzQwMmYyMDBiYzBlYzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpolSSph69eyhKufi9bp2cAXO56+
dcWETjqerK4DUFIk/JwS+sXIiH3hyCVNw8izAxHAhuz9O7EJ9qtDcmJzXCXgX4xx
yQMmVrR9r5cK/EBh5c7NBnWsDDum2L+wX2FiDyMovJGBGGJl8rcANb4+NPVGZjIL
/fITvlB5QftG8u1u1E3HioPYodsoZY4HoPEDGkBnEPMGxcn8OdeyzrdoyVh4Lnsv
xjlfQvH2OcTOZF8RUyi8uRGhE9v0PNaKh/SQlyOpfHEY7m3FjSXsLnI6jR2WVJlb
H9P0gPPl6MrVbUQjA92+UD/H6awEnahSP9cd/LxV+iWjzDqBFQ9IS7WfLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbmyhE3pOJ5JlwS22NALyALwOyPMB8GA1UdIwQY
MBaAFKDKM+f2cl607oe6kbHdLhxCFow5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb01vejVfWnlYclR1aDdxUnNkMHVIRUlXakRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jNGI0MDEtZTU5NS00YTAwLTkxMjMt
ZjIxYWI3ZTllMWY1LzEvb01vejVfWnlYclR1aDdxUnNkMHVIRUlXakRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9jNGI0MDEtZTU5NS00YTAwLTkxMjMtZjIxYWI3ZTllMWY1
LzEvb01vejVfWnlYclR1aDdxUnNkMHVIRUlXakRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHV5wegg
aCcm++3xWtQUOhgFTrxKwFH2jy2w7FOhnqcFV1LqhoNScjVQSO9z9mDVUWqkfWL8
Nr6/YccZ/9sKWExUE1Ul87+3TdC4JEOZqCwvQXok/pVzAZKU7I6VY0NiQKpgTRfs
kk/M7jm7uz8CpxZxr/2JMiNHh8RCemAX4/RQexoTG8l2RxvfPrdhJUFkXjypmGCY
6AI1/o6YFOcB9BRYqubR9cIhQQ8qONhFCmCTEWIhKlb8zvGnDSAgnKHVjKu2R/lQ
XW8HvDZ9YxQgfZFzmTGeL4GTDXYJjDJ46rU1BQMWzFIjO3wBmGRyho5rGPMs86kX
5/TVuOPrTEfnHg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:08 2026 by rpki-client