Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
File: Om4uf_LHAsirUUn-6nF1mRxzQJw.mft (raw, json)
Hash identifier: WUQIcRnNCV3cX67WDJAFO/9ZA1KBr2NK35Z+NjoOaHw=
Subject key identifier: 95:7B:E0:FB:08:35:36:CB:42:ED:01:16:07:86:03:9C:7C:0B:48:7C
Authority key identifier: 3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
Certificate issuer: /CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Certificate serial: 019F159D94C50855E2040477E14E282AF8BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
Manifest number: 09A0
Signing time: Mon 29 Jun 2026 23:01:16 +0000
Manifest this update: Mon 29 Jun 2026 23:01:16 +0000
Manifest next update: Tue 30 Jun 2026 23:01:16 +0000
Files and hashes: 1: 2vFmTEXL4sIOGvvxET_z9OsJtkM.roa (hash: hE+J8l/9QyGd/yFHBwyjIvFqStRGpbN8ok17t6YgQA4=)
2: Om4uf_LHAsirUUn-6nF1mRxzQJw.crl (hash: gcUI55s7cYEHiOxb0PurphiByCxnOqGZqBYsZWZcmiM=)
3: ngZkQQAAmyzs-8i5NBKDT7ozzfE.roa (hash: 6UMNzj0BfpUOXrwKXdq5vGzZXckdpCxU0zZpgK6Silc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:15:9d:94:c5:08:55:e2:04:04:77:e1:4e:28:2a:f8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Validity
Not Before: Jun 29 23:01:16 2026 GMT
Not After : Jun 30 23:01:16 2026 GMT
Subject: CN=957be0fb083536cb42ed01160786039c7c0b487c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9e:0b:de:85:1e:3d:52:d3:b8:3c:cf:f4:16:
c1:8e:8d:12:d6:0e:fe:c9:56:36:7b:33:96:1c:d2:
01:25:37:8d:0c:71:2b:48:04:fe:da:24:4f:a2:b6:
cd:37:52:ea:06:12:24:23:dd:fb:63:f4:02:77:f1:
3d:b0:82:f3:42:9a:14:b7:d0:9a:e2:64:02:5d:31:
45:b8:f1:64:2b:97:e9:5a:bf:19:46:3b:09:1d:2c:
f3:d1:a3:89:17:59:4a:97:72:2b:12:09:4b:55:77:
43:14:cc:bc:bd:92:82:ae:dc:47:25:88:54:70:4c:
f7:85:e5:5b:dd:31:2f:e0:19:57:91:10:c6:cc:b0:
dd:4f:76:fb:14:50:d6:99:a6:94:e1:47:f9:e7:92:
c8:8a:61:5c:bd:d3:5f:5a:be:9f:c3:b7:c0:ef:6f:
ac:f7:fb:e0:ea:73:fb:f2:db:05:d1:6b:23:c6:4e:
df:11:0a:b9:e4:23:bd:76:01:46:c3:68:b0:58:02:
12:5d:1f:9b:d2:bf:a8:ba:94:6d:38:e9:98:b6:dd:
c8:a2:c8:26:60:e3:93:8b:8e:60:d8:f3:a0:9b:f1:
93:29:df:a5:51:f4:7d:a9:69:3c:62:ec:2a:1e:73:
c6:df:6e:0f:6b:ea:89:eb:6f:53:f8:26:ac:3d:4d:
08:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7B:E0:FB:08:35:36:CB:42:ED:01:16:07:86:03:9C:7C:0B:48:7C
X509v3 Authority Key Identifier:
keyid:3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ae:15:de:d5:35:52:82:7f:c4:d0:13:d5:f8:5f:11:b1:43:
dc:97:69:eb:d8:ad:17:1f:da:e3:97:66:8f:1e:57:b7:6b:25:
7b:4d:84:88:36:75:8c:27:91:5b:53:b8:82:d4:5a:97:d2:96:
48:e5:1b:87:59:f2:86:9b:83:d6:60:09:70:c0:00:19:a0:74:
b9:94:aa:63:37:27:a2:3e:05:f8:88:2b:7d:db:25:88:06:83:
0f:d6:9a:ef:2d:6f:38:e6:48:d2:7e:af:0d:33:f7:0d:38:be:
19:e3:f7:b3:82:9c:db:5e:c9:3c:58:dc:ef:de:54:21:4e:99:
9c:dc:1f:de:f1:a4:75:ba:6d:b8:47:fa:ce:df:80:0f:81:70:
5d:ca:90:13:58:3e:ee:12:22:d2:e8:90:02:a1:33:d7:7a:f0:
96:ab:01:5f:85:f1:2a:cb:1a:52:a4:a3:4b:ff:00:0c:7d:6f:
d3:a4:0a:a9:28:6c:bd:03:b8:f3:58:93:fe:77:4e:ad:ed:50:
e6:dd:b2:f7:91:25:51:5e:bb:58:56:69:6e:eb:9b:71:00:cc:
33:44:4a:28:0a:07:b0:f3:94:ad:66:22:e3:62:9b:d2:ff:da:
4f:0b:39:63:51:53:d7:6f:e4:ea:8e:c2:d3:d5:d7:fc:be:b4:
79:3d:0d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 08:26:55 2026 by rpki-client