Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
File: omhVmAsnPlrlfcG56yLp9fOnzfc.mft (raw, json)
Hash identifier: rChl4XBEJrvCgY1D+0nP7bjxPK0VCj/w4sbQxthhma8=
Subject key identifier: D4:8C:33:24:76:BB:77:D5:32:73:D9:56:27:0B:7D:E3:03:D5:1B:62
Authority key identifier: A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
Certificate issuer: /CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Certificate serial: 01A146F2E6A8BA6B7113BA66EA0B67A681E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
Manifest number: 1AAA
Signing time: Fri 16 Oct 2026 23:01:26 +0000
Manifest this update: Fri 16 Oct 2026 23:01:26 +0000
Manifest next update: Sat 17 Oct 2026 23:01:26 +0000
Files and hashes: 1: DHTVOspVelmD6hKbvHHdFSxrQgA.roa (hash: A7Oq6WR9f6YTO2BNgRao+GzDKScqL9wSwbqMrDuqnLc=)
2: omhVmAsnPlrlfcG56yLp9fOnzfc.crl (hash: qI3+Bx9nLCinMDQpovNrk2V23Gw7hmX9Yo3Hqe2R0eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:f2:e6:a8:ba:6b:71:13:ba:66:ea:0b:67:a6:81:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Validity
Not Before: Oct 16 23:01:26 2026 GMT
Not After : Oct 17 23:01:26 2026 GMT
Subject: CN=d48c332476bb77d53273d956270b7de303d51b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:df:94:8d:d2:13:e9:b7:5a:1a:50:64:ca:
e5:75:f3:ba:22:a8:95:6c:0d:39:50:5b:d2:96:f2:
e1:64:69:4c:d7:45:75:74:4a:1f:aa:b7:98:38:17:
e4:9c:14:35:31:53:00:d1:35:19:e6:67:95:40:4f:
73:1b:b3:78:c6:9c:7e:ef:6f:7f:e2:3e:43:ae:c7:
d7:6a:e3:b1:61:f6:c1:61:ed:7b:4b:ce:36:d9:a9:
b2:1b:ae:dc:83:6a:21:6e:ee:73:5e:df:90:47:2f:
16:b9:a0:59:54:e1:34:32:ca:f2:be:e7:3a:dc:da:
a1:06:54:d4:7e:4d:46:30:95:58:63:26:1e:0c:f5:
3e:01:6a:54:27:58:76:38:9d:87:a2:2b:81:89:5d:
73:2f:9c:fa:66:88:6c:1b:9e:33:f4:31:fd:d4:bd:
f6:41:0d:51:ba:54:81:a9:ed:ce:03:1a:b3:dd:4d:
16:c9:08:3e:3a:13:8a:22:10:42:66:5f:c8:a2:0a:
ec:45:c2:cc:ee:84:b2:b0:7a:d7:9c:13:33:58:01:
53:9c:fd:6d:65:9a:d1:41:9d:ca:73:bc:7b:5a:2b:
76:ba:b5:6f:45:b6:71:44:ba:d1:10:9b:f1:4b:91:
b2:58:b8:e5:c8:84:60:2f:ef:e0:1f:65:75:94:99:
24:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8C:33:24:76:BB:77:D5:32:73:D9:56:27:0B:7D:E3:03:D5:1B:62
X509v3 Authority Key Identifier:
keyid:A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:dc:7f:cb:1e:19:8e:23:42:f3:ea:c7:07:7e:55:77:62:46:
55:1f:c0:bc:a1:1d:f8:62:3d:ea:f8:7c:58:01:66:a1:e7:09:
27:d1:00:b1:93:2b:9c:5e:e9:4c:5e:ed:80:e1:52:55:1f:78:
1c:d5:ed:58:0c:7f:d0:ba:ab:ae:e1:93:f1:0d:3f:66:a4:92:
61:9f:7e:b1:cb:83:af:f3:1f:d8:ef:9b:0e:12:28:d5:77:12:
43:41:1c:94:e5:04:93:63:24:a0:df:2b:7e:6e:84:a7:12:68:
80:0d:a1:06:5e:a8:8e:39:d4:f8:89:52:2a:00:52:16:1d:c8:
88:c0:df:36:6b:3d:a9:1e:22:83:ea:6d:bb:ef:04:b5:62:99:
f9:52:52:08:38:bf:09:c3:f0:23:ba:70:ea:e7:f1:b7:24:21:
0d:c8:42:67:c6:23:b9:2a:d1:cc:ef:16:6a:84:7d:a9:de:c9:
7e:51:21:80:bb:fb:ba:38:0d:bb:0e:bb:3d:17:e6:78:0f:68:
f3:8b:46:cc:d3:7b:08:02:98:0b:ea:5c:b7:2a:23:da:c1:ff:
05:91:db:2c:5f:12:54:83:e8:ca:f4:66:ba:fb:f7:a2:42:74:
81:0d:8a:db:ff:5b:0d:13:ef:a8:01:14:e7:79:e5:b9:81:c6:
84:0c:c2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:51:29 2026 by rpki-client