Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
File: OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft (raw, json)
Hash identifier: 0tQCwqfymSysv7FvA2p0nKDufHy9Vd4AE6aFMzPEEIs=
Subject key identifier: 0F:6E:8D:40:20:2E:E4:CA:F7:E4:99:03:DD:93:38:EE:17:E6:D2:D1
Authority key identifier: 3A:62:74:69:67:90:0B:24:C5:9D:21:4F:40:53:2D:76:FE:FF:81:E4
Certificate issuer: /CN=3a62746967900b24c59d214f40532d76feff81e4
Certificate serial: 019DD5E55BDC9B3762FD0CA6EBA6F9F069BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
Manifest number: 1D
Signing time: Tue 28 Apr 2026 21:01:11 +0000
Manifest this update: Tue 28 Apr 2026 21:01:11 +0000
Manifest next update: Wed 29 Apr 2026 21:01:11 +0000
Files and hashes: 1: OmJ0aWeQCyTFnSFPQFMtdv7_geQ.crl (hash: X2pFYVDUMsvVlhSbJetw0UJp5hwEX2dbLY9YgTSLAK4=)
2: aIKcl8xyOE8c2T5VfSfWvfIZQIU.roa (hash: rP1uuNWiqen7TPqE1GYuJGzp+rVZ1OGQdR+rdwxUdFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 14:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d5:e5:5b:dc:9b:37:62:fd:0c:a6:eb:a6:f9:f0:69:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a62746967900b24c59d214f40532d76feff81e4
Validity
Not Before: Apr 28 21:01:11 2026 GMT
Not After : Apr 29 21:01:11 2026 GMT
Subject: CN=0f6e8d40202ee4caf7e49903dd9338ee17e6d2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:69:54:65:97:fb:01:97:fe:72:c2:a7:70:
b3:84:cc:55:72:f9:60:15:18:38:4f:ca:d8:ab:b6:
ba:ee:48:b2:56:ed:2e:62:f5:f9:59:4b:ca:45:0d:
45:99:ba:65:76:bc:6e:05:04:92:0e:44:7c:1f:2c:
51:ad:64:60:bd:c6:cc:d2:d6:98:a4:97:7d:39:80:
4a:e1:4a:36:62:29:b7:5d:08:b7:66:a7:2f:26:db:
66:f2:9e:b8:37:ac:cf:d0:15:e1:36:aa:b0:87:ac:
ab:dc:bf:67:e4:b9:c5:91:f7:eb:1b:65:ea:d0:40:
67:3e:fc:04:6c:89:72:21:04:4f:a4:a3:4f:ba:22:
de:5e:3c:a1:85:5d:fe:81:b2:6d:dc:2f:da:d7:9c:
d9:5a:bf:7d:40:51:65:97:cf:1c:21:a1:46:f8:06:
c1:46:d6:3a:08:ed:56:40:c3:f6:16:df:6f:12:d5:
27:6c:01:e1:2f:f0:ea:7b:68:1a:6d:30:cb:51:dc:
e8:60:55:29:69:47:ac:14:04:65:fc:7f:2b:6c:df:
3a:1b:73:30:da:a6:40:cd:09:2e:07:e3:94:99:0d:
f0:8d:63:92:5e:67:a3:8d:b3:48:df:a3:ac:be:71:
51:16:48:b0:c7:bb:74:80:70:91:5b:31:26:5c:48:
81:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6E:8D:40:20:2E:E4:CA:F7:E4:99:03:DD:93:38:EE:17:E6:D2:D1
X509v3 Authority Key Identifier:
keyid:3A:62:74:69:67:90:0B:24:C5:9D:21:4F:40:53:2D:76:FE:FF:81:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:35:2e:74:ef:92:35:b0:88:ec:22:73:a4:29:7b:8a:b2:93:
cc:c0:d1:2f:44:78:cf:f8:a9:98:39:6c:f1:77:95:4c:68:2d:
21:d5:c2:83:8f:cd:f7:6b:3d:3e:95:44:9b:72:4a:6d:04:ec:
4b:de:4f:05:dc:8d:b9:15:c0:aa:8a:dd:3a:16:cc:6e:70:b5:
f3:74:f5:5a:6d:e2:06:d5:25:77:db:3b:9d:0c:ea:ad:32:b0:
20:28:99:d0:a3:37:fa:8d:09:d7:5a:f3:39:d9:89:43:af:4b:
a4:39:9f:10:86:29:18:ae:13:4f:68:2d:79:8b:b3:b0:49:67:
0a:78:2d:6d:b7:7a:f1:b1:5f:a0:d2:43:8f:08:f3:16:1f:27:
64:b5:ec:bb:00:59:48:cb:75:92:84:f4:23:9a:a4:d5:72:c6:
b8:2d:20:61:4f:28:4d:4a:43:03:e6:34:ab:dc:5e:67:05:c0:
7c:cf:bc:7b:04:d6:02:9e:7b:88:3a:5c:b2:4e:5a:41:63:ef:
0f:bd:89:31:53:69:54:25:28:06:8f:39:b2:2c:ba:8c:47:ce:
9b:b7:52:5e:d6:ff:5e:ad:9f:ee:07:6c:48:b0:36:8c:f5:5b:
d1:07:73:15:f3:ab:75:6d:9f:61:e5:7d:56:ff:e6:e0:4c:da:
84:f3:0e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 00:02:12 2026 by rpki-client