Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
File: omhVmAsnPlrlfcG56yLp9fOnzfc.mft (raw, json)
Hash identifier: 1BWDPkRjHMPDW5EFHt/XDNTHGHNwGqexyE+lCNqnl6Y=
Subject key identifier: 43:58:6A:36:71:76:68:79:26:30:65:9A:2A:22:BF:F3:53:F7:E8:08
Authority key identifier: A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
Certificate issuer: /CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Certificate serial: 019D382E16480D8061C44C0EA5A8A30AD634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:37 +0000
Manifest this update: Sun 29 Mar 2026 06:00:37 +0000
Manifest next update: Mon 30 Mar 2026 06:00:37 +0000
Files and hashes: 1: bLAwkpsQ7D6caU7zIeAaY5nux8E.roa (hash: KqLO/vffpcb+/IGfGAsD+PmTdmluxkrnPOhEPWZAu6E=)
2: omhVmAsnPlrlfcG56yLp9fOnzfc.crl (hash: WtduzU1vowfSGYfZco2b/0QKFu52UvAcTgtb0JK+yKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:16:48:0d:80:61:c4:4c:0e:a5:a8:a3:0a:d6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Validity
Not Before: Mar 29 06:00:37 2026 GMT
Not After : Mar 30 06:00:37 2026 GMT
Subject: CN=43586a36717668792630659a2a22bff353f7e808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:5d:c6:46:7b:63:7d:2e:b7:07:9f:07:c4:
2f:9f:d0:c7:35:85:75:f2:9e:b1:22:08:43:64:22:
f1:e0:17:fe:fe:c8:55:7b:84:34:2f:0a:a0:5c:7c:
04:02:06:31:2a:a2:e9:34:b4:10:27:aa:ed:42:1f:
89:80:48:56:3e:97:7f:b1:14:23:a4:1e:53:04:99:
62:1f:1f:3d:32:55:7f:bc:36:94:9f:f7:4e:cb:be:
36:f2:04:95:3a:68:41:1b:40:f9:48:24:0f:42:cc:
e5:97:bc:37:4a:11:f7:57:aa:d7:1f:d1:56:7c:b4:
ae:98:e7:6d:ff:55:1d:24:10:d2:5d:ef:1d:3c:62:
99:61:d7:a5:07:1e:3b:45:f3:e1:b3:56:a8:b0:10:
4f:4d:14:76:11:40:e7:0f:4e:36:c2:57:75:a0:d6:
8c:32:43:c2:36:e6:fc:c3:97:ea:cf:d0:8e:48:e6:
49:0f:3b:ae:16:1c:a2:d7:05:60:93:ec:b3:50:c9:
61:5f:c6:42:d5:c1:3d:f0:0f:aa:c2:0c:a4:f0:25:
60:d1:d7:64:14:66:60:ca:91:64:21:0c:01:8b:c2:
9d:1e:aa:d0:7e:02:57:d7:60:b1:ad:ad:bf:7f:a1:
cd:fb:0b:e1:a3:79:01:b1:1f:6e:39:82:ca:79:62:
09:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:58:6A:36:71:76:68:79:26:30:65:9A:2A:22:BF:F3:53:F7:E8:08
X509v3 Authority Key Identifier:
keyid:A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:33:a0:7a:78:2b:57:b8:be:9a:df:0c:d6:59:28:38:d0:2f:
43:b0:e2:01:2e:c4:4e:64:71:8f:c8:8b:54:ca:b0:13:ce:75:
8f:43:c6:c4:aa:56:2e:fe:07:17:51:ee:29:c4:93:16:00:a8:
cd:f4:87:96:00:5d:cc:f7:ed:02:bc:b6:47:84:8e:62:c9:2e:
15:8c:11:03:11:b4:79:7c:83:6f:1b:cb:2c:87:55:9e:79:b7:
fd:35:4d:22:4d:66:f2:b0:0e:ed:b7:29:f9:5d:5f:7e:1a:ea:
6f:f7:61:ae:c2:de:4c:64:25:88:b5:eb:f6:40:8a:ae:9b:a7:
73:46:75:00:db:90:3b:4c:a7:0d:b6:1e:33:38:39:f0:66:46:
72:f7:5e:13:08:f4:3b:b1:e6:20:d9:02:9f:cb:8b:e3:88:d3:
e2:ef:9a:88:9c:b4:bf:91:52:c2:a9:7c:02:26:b7:3f:57:fc:
c7:83:84:cb:ea:22:d4:76:e6:ca:0e:7f:21:48:3f:f1:bc:5b:
f8:40:7a:2c:ad:71:f4:49:c3:db:78:65:86:23:d7:68:af:fa:
90:5e:87:2c:61:61:39:7d:4c:ca:91:11:d8:17:2a:af:e4:4f:
80:b5:97:66:43:af:0a:8a:53:56:f3:9f:12:11:cf:c8:96:e6:
b3:41:93:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:31 2026 by rpki-client