Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
File: OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft (raw, json)
Hash identifier: R11S655wcoDhj5jjbgfFqJmUdtMN+4/wdD5LmqhiLC8=
Subject key identifier: 61:43:73:F4:C6:C0:08:65:8D:FA:E9:CA:C9:46:58:6E:F1:62:F0:D5
Authority key identifier: 3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C
Certificate issuer: /CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c
Certificate serial: 019D378984A3CD1E67239234470D003CA730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 03:00:52 +0000
Manifest this update: Sun 29 Mar 2026 03:00:52 +0000
Manifest next update: Mon 30 Mar 2026 03:00:52 +0000
Files and hashes: 1: OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl (hash: /K9qv92R76N6YyOKKllEKFQ8LPAhsV+t4XM/SUwEx0k=)
2: g6LflxVUqJ6UcpGu8wQciw7t30I.roa (hash: jf55mddW2DvJtTkk+2SE+AEw8KLhuZMEYNNyLaLfpSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:84:a3:cd:1e:67:23:92:34:47:0d:00:3c:a7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c
Validity
Not Before: Mar 29 03:00:52 2026 GMT
Not After : Mar 30 03:00:52 2026 GMT
Subject: CN=614373f4c6c008658dfae9cac946586ef162f0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:30:df:53:31:22:4f:a4:8a:cc:5b:ef:a2:
ea:5b:bf:b6:66:11:90:67:4f:a3:df:55:2a:82:4e:
49:36:b3:78:2c:b3:d1:d4:a6:d2:78:4e:a0:63:a8:
6f:97:d1:17:3f:52:d1:91:dd:62:04:c3:6b:9d:9c:
6e:10:d1:3c:8f:fc:9b:98:93:a9:96:19:24:b8:90:
e1:3e:de:0e:b7:fa:d9:58:2e:08:71:a8:a6:ed:fd:
3a:0d:b1:81:17:fc:d2:7f:8e:56:c3:b1:1e:f4:5f:
86:b8:9d:08:dd:0c:ec:a6:b2:05:18:47:b7:0a:38:
ab:45:39:e4:e1:d0:dd:d6:a6:1a:5a:d2:a3:85:3c:
df:95:47:f0:5f:56:93:88:3f:f4:09:26:1e:df:96:
6b:27:8c:13:06:c4:b1:4c:4d:18:06:fb:1e:c4:d6:
97:0b:f4:84:26:74:bb:e0:cb:b6:96:15:45:77:c4:
30:41:54:34:1e:0e:53:19:02:16:a9:42:6c:48:f6:
d9:31:5f:da:15:8a:b4:46:a2:04:d2:e8:ce:63:ac:
8e:e0:7b:0f:b4:c9:32:fa:1b:1e:c2:dd:e1:94:d2:
6d:7d:52:48:3b:3e:4a:5a:b9:9f:4a:84:a6:36:64:
22:3f:4a:f9:ae:2b:f1:87:2c:64:1f:ac:94:de:2f:
2e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:43:73:F4:C6:C0:08:65:8D:FA:E9:CA:C9:46:58:6E:F1:62:F0:D5
X509v3 Authority Key Identifier:
keyid:3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a9:7c:77:66:62:0d:7e:ec:a4:b1:81:14:dd:c4:93:37:92:
62:ab:27:44:fb:de:2e:b7:5a:de:4b:18:9a:59:82:b6:93:3a:
4b:d7:1f:31:9b:b9:91:c0:b8:29:89:41:94:5e:a3:62:81:9c:
0e:9b:63:6b:33:90:bd:99:71:17:b5:53:7e:50:95:23:48:85:
03:22:4a:ab:8b:99:4e:64:8a:41:10:14:a0:36:59:80:6d:df:
8e:73:ac:20:06:16:78:79:9d:c6:1e:ae:4f:4a:46:0d:f9:ff:
c3:9f:6e:f0:e5:4d:99:e2:8a:67:f1:9f:24:d6:79:75:c6:17:
9f:2a:49:de:07:93:19:d6:3f:4d:95:a0:b3:ab:f7:74:68:38:
23:3a:fe:63:7c:40:d6:90:0f:0b:5c:fd:26:df:39:84:cb:1d:
2a:6b:8d:e3:2e:a4:0f:9e:a6:4b:fb:91:75:8c:71:ea:08:13:
fc:6f:cf:85:d8:72:b2:c2:66:13:6d:69:68:2d:91:cb:d7:28:
81:8e:88:76:ce:9a:a0:20:a6:0c:80:64:2e:c0:07:c1:9e:74:
74:1a:52:65:a0:aa:da:ff:bc:bf:8c:24:2f:2d:cb:e0:cd:8c:
58:1b:1d:83:1e:4a:90:38:59:16:2e:71:d5:17:04:25:58:7a:
23:72:4b:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iYSjzR5nI5I0Rw0APKcwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNmM2MDZmMjBjZWNmZTMxMmNjNmM4MTRkZWM5OTA0YjZk
YjdjM2MwHhcNMjYwMzI5MDMwMDUyWhcNMjYwMzMwMDMwMDUyWjAzMTEwLwYDVQQD
Eyg2MTQzNzNmNGM2YzAwODY1OGRmYWU5Y2FjOTQ2NTg2ZWYxNjJmMGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGcw31MxIk+kisxb76LqW7+2ZhGQ
Z0+j31Uqgk5JNrN4LLPR1KbSeE6gY6hvl9EXP1LRkd1iBMNrnZxuENE8j/ybmJOp
lhkkuJDhPt4Ot/rZWC4Icaim7f06DbGBF/zSf45Ww7Ee9F+GuJ0I3QzsprIFGEe3
CjirRTnk4dDd1qYaWtKjhTzflUfwX1aTiD/0CSYe35ZrJ4wTBsSxTE0YBvsexNaX
C/SEJnS74Mu2lhVFd8QwQVQ0Hg5TGQIWqUJsSPbZMV/aFYq0RqIE0ujOY6yO4HsP
tMky+hsewt3hlNJtfVJIOz5KWrmfSoSmNmQiP0r5rivxhyxkH6yU3i8uMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFDc/TGwAhljfrpyslGWG7xYvDVMB8GA1UdIwQY
MBaAFDpsYG8gzs/jEsxsgU3smQS223w8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT214Z2J5RE96LU1Tekd5QlRleVpCTGJiZkR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi84YzNmNmYtNWFlOS00OTJlLTlkM2Et
NzUwZDYyZTllNTNhLzEvT214Z2J5RE96LU1Tekd5QlRleVpCTGJiZkR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi84YzNmNmYtNWFlOS00OTJlLTlkM2EtNzUwZDYyZTllNTNh
LzEvT214Z2J5RE96LU1Tekd5QlRleVpCTGJiZkR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWql8d2Zi
DX7spLGBFN3EkzeSYqsnRPveLrda3ksYmlmCtpM6S9cfMZu5kcC4KYlBlF6jYoGc
DptjazOQvZlxF7VTflCVI0iFAyJKq4uZTmSKQRAUoDZZgG3fjnOsIAYWeHmdxh6u
T0pGDfn/w59u8OVNmeKKZ/GfJNZ5dcYXnypJ3geTGdY/TZWgs6v3dGg4Izr+Y3xA
1pAPC1z9Jt85hMsdKmuN4y6kD56mS/uRdYxx6ggT/G/PhdhyssJmE21paC2Ry9co
gY6Ids6aoCCmDIBkLsAHwZ50dBpSZaCq2v+8v4wkLy3L4M2MWBsdgx5KkDhZFi5x
1RcEJVh6I3JLiQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:32 2026 by rpki-client