Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
File: OmaGndGplxZLpPoj4P1B-zrLEL4.mft (raw, json)
Hash identifier: xngPhBL8324ZQdCZH5QiBsEm/IaOw54g7Ss03VEB2qU=
Subject key identifier: 19:37:C7:EB:D3:00:7E:1D:20:86:C5:97:75:EA:58:56:A0:05:15:69
Authority key identifier: 3A:66:86:9D:D1:A9:97:16:4B:A4:FA:23:E0:FD:41:FB:3A:CB:10:BE
Certificate issuer: /CN=3a66869dd1a997164ba4fa23e0fd41fb3acb10be
Certificate serial: 01A089E7EC152464F6ACE88A1BCF206D67EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
Manifest number: 162D
Signing time: Thu 10 Sep 2026 06:01:12 +0000
Manifest this update: Thu 10 Sep 2026 06:01:12 +0000
Manifest next update: Fri 11 Sep 2026 06:01:12 +0000
Files and hashes: 1: OmaGndGplxZLpPoj4P1B-zrLEL4.crl (hash: 3mGyh60f60qbbh1wT7jxpxC4x3c8qIAGY2Kq/vydeo0=)
2: Whf025AQDA8tBzOKuKXx8fPC43Q.roa (hash: dUevim2/BiChkKpYz6TYK8JPdP42XFVj+fxwUEJ/mxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:ec:15:24:64:f6:ac:e8:8a:1b:cf:20:6d:67:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a66869dd1a997164ba4fa23e0fd41fb3acb10be
Validity
Not Before: Sep 10 06:01:12 2026 GMT
Not After : Sep 11 06:01:12 2026 GMT
Subject: CN=1937c7ebd3007e1d2086c59775ea5856a0051569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:91:b6:b4:ae:7b:3a:57:a2:87:44:75:ea:b9:
23:60:44:e4:b6:71:ba:06:ec:91:18:1a:a9:f3:04:
7f:94:78:18:e0:c7:eb:7b:cb:48:7b:bc:32:c9:a3:
6b:0d:21:d3:75:62:2f:6e:96:5d:cd:28:69:0a:ff:
8e:59:cc:16:bb:b1:9b:28:53:74:6a:de:28:7a:40:
69:5c:16:81:f7:3a:8a:78:15:c3:d3:ba:ef:9f:01:
c0:01:a9:d6:74:0c:ed:21:9b:d4:fd:47:2f:1f:04:
9f:07:80:08:4f:bb:2c:0c:18:d7:79:97:38:20:8b:
cb:ba:78:1c:b3:54:19:99:82:dc:87:27:b9:9a:68:
00:cb:cc:7d:a5:9d:1f:80:3f:06:5e:18:15:f3:14:
e9:a7:92:39:62:2f:3a:b2:ac:1b:ae:20:f8:f1:4f:
14:c4:6c:d5:df:c2:d9:15:c0:c8:25:05:fe:ee:c7:
bd:5d:92:2e:67:f1:74:6f:ae:dd:4b:ea:35:cf:a8:
ec:9e:b0:78:60:5f:dd:80:dd:c4:54:87:94:6b:53:
29:9f:69:1a:59:1c:1f:42:0f:a0:99:21:a9:40:55:
42:00:f9:87:a4:2d:b2:4e:f6:50:ab:88:4d:3f:1b:
5c:dc:3b:6f:36:f5:39:14:9e:20:68:e8:46:4f:e8:
12:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:37:C7:EB:D3:00:7E:1D:20:86:C5:97:75:EA:58:56:A0:05:15:69
X509v3 Authority Key Identifier:
keyid:3A:66:86:9D:D1:A9:97:16:4B:A4:FA:23:E0:FD:41:FB:3A:CB:10:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:02:ca:23:83:8c:47:c6:b6:90:49:ef:9d:7f:c5:35:54:d3:
03:da:c6:7f:43:2a:6c:1b:4f:c8:52:93:ec:44:a7:04:50:b5:
07:f2:a9:81:45:c6:36:59:9a:68:d5:86:e3:cf:21:67:db:8f:
79:5e:51:39:94:fc:c9:9f:bb:7a:62:72:3a:2c:ec:d5:4e:3f:
8b:fd:1a:92:3d:ad:7f:bd:7c:64:66:cd:8e:ff:a6:6f:b5:7d:
09:e6:27:56:6c:8f:b4:84:8f:21:95:a8:3d:d5:84:c3:07:85:
46:7c:cf:95:e0:22:1c:11:29:71:cc:e1:87:09:84:60:f1:e2:
1a:7a:0f:2f:b3:f9:2b:67:b2:aa:2b:7b:1d:37:c8:f4:ff:8a:
29:0a:44:94:b0:60:4b:bf:51:7b:75:3a:e6:25:93:c8:28:8e:
f8:62:97:cc:24:4a:e2:35:78:b6:c7:c7:65:cb:cd:36:14:d9:
dc:eb:4c:2b:50:56:cd:2c:39:6e:da:90:b6:23:28:f1:6f:1c:
8f:09:0f:90:88:1b:37:08:65:64:fc:62:ac:96:c5:3d:11:35:
3d:6e:fe:9a:f0:dd:b2:05:c8:fd:0e:be:dd:c4:db:8d:75:87:
de:e3:98:3a:85:d4:28:bd:b2:54:c7:58:97:2b:d0:f5:3f:7c:
88:e6:98:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJ5+wVJGT2rOiKG88gbWfqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNjY4NjlkZDFhOTk3MTY0YmE0ZmEyM2UwZmQ0MWZiM2Fj
YjEwYmUwHhcNMjYwOTEwMDYwMTEyWhcNMjYwOTExMDYwMTEyWjAzMTEwLwYDVQQD
EygxOTM3YzdlYmQzMDA3ZTFkMjA4NmM1OTc3NWVhNTg1NmEwMDUxNTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZG2tK57Oleih0R16rkjYETktnG6
BuyRGBqp8wR/lHgY4Mfre8tIe7wyyaNrDSHTdWIvbpZdzShpCv+OWcwWu7GbKFN0
at4oekBpXBaB9zqKeBXD07rvnwHAAanWdAztIZvU/UcvHwSfB4AIT7ssDBjXeZc4
IIvLungcs1QZmYLchye5mmgAy8x9pZ0fgD8GXhgV8xTpp5I5Yi86sqwbriD48U8U
xGzV38LZFcDIJQX+7se9XZIuZ/F0b67dS+o1z6jsnrB4YF/dgN3EVIeUa1Mpn2ka
WRwfQg+gmSGpQFVCAPmHpC2yTvZQq4hNPxtc3DtvNvU5FJ4gaOhGT+gSRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBk3x+vTAH4dIIbFl3XqWFagBRVpMB8GA1UdIwQY
MBaAFDpmhp3RqZcWS6T6I+D9Qfs6yxC+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT21hR25kR3BseFpMcFBvajRQMUItenJMRUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85MTE4ZTMtMTNkYS00ZDQ4LTljMzgt
NzExZmMxYTJkMGEwLzEvT21hR25kR3BseFpMcFBvajRQMUItenJMRUw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85MTE4ZTMtMTNkYS00ZDQ4LTljMzgtNzExZmMxYTJkMGEw
LzEvT21hR25kR3BseFpMcFBvajRQMUItenJMRUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYALKI4OM
R8a2kEnvnX/FNVTTA9rGf0MqbBtPyFKT7ESnBFC1B/KpgUXGNlmaaNWG488hZ9uP
eV5ROZT8yZ+7emJyOizs1U4/i/0akj2tf718ZGbNjv+mb7V9CeYnVmyPtISPIZWo
PdWEwweFRnzPleAiHBEpcczhhwmEYPHiGnoPL7P5K2eyqit7HTfI9P+KKQpElLBg
S79Re3U65iWTyCiO+GKXzCRK4jV4tsfHZcvNNhTZ3OtMK1BWzSw5btqQtiMo8W8c
jwkPkIgbNwhlZPxirJbFPRE1PW7+mvDdsgXI/Q6+3cTbjXWH3uOYOoXUKL2yVMdY
lyvQ9T98iOaYMw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:09:36 2026 by rpki-client