Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
File: OmaGndGplxZLpPoj4P1B-zrLEL4.mft (raw, json)
Hash identifier: uEj9Mwc8XdzlzTpz7v8IZCVJkotFFxBiXMBpmVf+LKc=
Subject key identifier: 69:1D:3F:9F:28:9A:D8:0F:F7:C7:63:DB:2C:7F:32:BF:A8:97:35:66
Authority key identifier: 3A:66:86:9D:D1:A9:97:16:4B:A4:FA:23:E0:FD:41:FB:3A:CB:10:BE
Certificate issuer: /CN=3a66869dd1a997164ba4fa23e0fd41fb3acb10be
Certificate serial: 019D382E6373602BED8E24C7BAFB48F5E9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
Manifest number: 1475
Signing time: Sun 29 Mar 2026 06:00:57 +0000
Manifest this update: Sun 29 Mar 2026 06:00:57 +0000
Manifest next update: Mon 30 Mar 2026 06:00:57 +0000
Files and hashes: 1: OmaGndGplxZLpPoj4P1B-zrLEL4.crl (hash: oBCu7JnZJ2fmj4rmTeGwfj7THb0VKZV+NGGxqOfynww=)
2: Whf025AQDA8tBzOKuKXx8fPC43Q.roa (hash: dUevim2/BiChkKpYz6TYK8JPdP42XFVj+fxwUEJ/mxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:63:73:60:2b:ed:8e:24:c7:ba:fb:48:f5:e9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a66869dd1a997164ba4fa23e0fd41fb3acb10be
Validity
Not Before: Mar 29 06:00:57 2026 GMT
Not After : Mar 30 06:00:57 2026 GMT
Subject: CN=691d3f9f289ad80ff7c763db2c7f32bfa8973566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:bf:8f:b9:e0:1e:13:d4:b6:da:0b:68:e8:
37:16:d2:13:df:d4:59:ac:3b:ae:66:e3:ab:fe:57:
e8:d3:53:73:99:92:b3:49:1c:71:18:ad:2d:7f:ba:
74:11:70:2f:0e:7f:7a:20:6f:c2:a2:d6:8a:ed:b8:
2e:11:6b:1b:6d:c8:0e:d4:38:1b:a6:94:17:dd:5f:
85:bf:90:07:fe:0f:fd:6e:f2:27:b2:1d:19:f2:50:
65:13:17:b2:b8:9f:3f:cf:c4:b3:95:ae:fc:89:58:
0e:fe:65:6a:db:b8:0e:a8:70:3e:28:00:d3:08:20:
d8:26:b7:94:08:7c:96:fc:91:03:cf:6f:10:de:17:
0c:f7:3e:3c:50:ba:56:da:3a:63:fa:6d:91:de:d2:
07:58:92:a0:c9:d5:b3:8a:5a:0b:f9:ab:ef:41:a8:
37:45:d9:b0:d0:c0:44:5c:ca:aa:9a:e8:07:2c:c0:
94:b7:7d:81:6f:db:a2:ef:78:03:68:19:e4:6e:c3:
b7:77:3b:be:e6:79:9b:9f:81:a9:82:46:68:79:64:
9e:f0:f4:85:a4:be:16:8c:db:2c:cc:45:23:e4:67:
aa:3f:7e:b7:58:65:cb:bf:d4:e9:91:4e:ab:5f:04:
e0:4b:af:cc:20:64:ce:5b:7b:0c:f1:97:c0:d0:87:
e1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1D:3F:9F:28:9A:D8:0F:F7:C7:63:DB:2C:7F:32:BF:A8:97:35:66
X509v3 Authority Key Identifier:
keyid:3A:66:86:9D:D1:A9:97:16:4B:A4:FA:23:E0:FD:41:FB:3A:CB:10:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d0:6b:63:be:cc:1c:ca:0c:1c:d2:81:12:64:a0:a4:ac:7c:
a2:0a:17:0b:1a:d7:0b:49:cd:71:11:cf:1a:87:db:3d:6d:8c:
41:af:80:a6:b8:5b:18:f4:f5:80:69:c5:a1:ac:20:54:26:c5:
8a:d7:b3:19:de:92:a5:a3:77:68:a1:73:6a:4f:8c:e9:d2:32:
35:e7:9b:cb:64:78:47:e5:32:b2:a2:f8:aa:66:ce:0c:c6:30:
36:60:42:bd:be:40:06:91:82:88:86:76:67:43:04:4f:97:a4:
9f:73:87:c8:f4:c0:01:48:61:45:1e:15:fb:7a:a5:89:0d:cb:
24:39:07:ba:ab:c4:db:f4:db:09:d7:39:ab:45:17:2c:65:9a:
b1:a8:b7:5a:5d:2b:a0:ef:a6:48:e3:73:3e:de:e5:46:d4:59:
35:7b:e1:f5:f7:4b:6c:5d:b6:fd:83:25:12:f3:54:93:30:08:
46:4f:0e:e6:0c:12:44:e9:5a:ad:c7:d6:e3:f2:1f:06:e8:60:
0d:77:80:87:5d:d5:9f:d8:9d:e3:b5:53:22:7d:67:21:95:94:
f7:cc:cb:04:4d:8f:44:b1:66:2d:cf:82:20:e0:86:51:85:39:
06:dd:e6:b2:8e:8f:a5:4c:06:6c:8f:01:2c:e1:90:86:08:bb:
b8:ab:7f:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LmNzYCvtjiTHuvtI9enQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNjY4NjlkZDFhOTk3MTY0YmE0ZmEyM2UwZmQ0MWZiM2Fj
YjEwYmUwHhcNMjYwMzI5MDYwMDU3WhcNMjYwMzMwMDYwMDU3WjAzMTEwLwYDVQQD
Eyg2OTFkM2Y5ZjI4OWFkODBmZjdjNzYzZGIyYzdmMzJiZmE4OTczNTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTS/j7ngHhPUttoLaOg3FtIT39RZ
rDuuZuOr/lfo01NzmZKzSRxxGK0tf7p0EXAvDn96IG/CotaK7bguEWsbbcgO1Dgb
ppQX3V+Fv5AH/g/9bvInsh0Z8lBlExeyuJ8/z8Szla78iVgO/mVq27gOqHA+KADT
CCDYJreUCHyW/JEDz28Q3hcM9z48ULpW2jpj+m2R3tIHWJKgydWziloL+avvQag3
Rdmw0MBEXMqqmugHLMCUt32Bb9ui73gDaBnkbsO3dzu+5nmbn4GpgkZoeWSe8PSF
pL4WjNsszEUj5GeqP363WGXLv9TpkU6rXwTgS6/MIGTOW3sM8ZfA0IfhhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkdP58omtgP98dj2yx/Mr+olzVmMB8GA1UdIwQY
MBaAFDpmhp3RqZcWS6T6I+D9Qfs6yxC+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT21hR25kR3BseFpMcFBvajRQMUItenJMRUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85MTE4ZTMtMTNkYS00ZDQ4LTljMzgt
NzExZmMxYTJkMGEwLzEvT21hR25kR3BseFpMcFBvajRQMUItenJMRUw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85MTE4ZTMtMTNkYS00ZDQ4LTljMzgtNzExZmMxYTJkMGEw
LzEvT21hR25kR3BseFpMcFBvajRQMUItenJMRUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtBrY77M
HMoMHNKBEmSgpKx8ogoXCxrXC0nNcRHPGofbPW2MQa+AprhbGPT1gGnFoawgVCbF
itezGd6SpaN3aKFzak+M6dIyNeeby2R4R+UysqL4qmbODMYwNmBCvb5ABpGCiIZ2
Z0MET5ekn3OHyPTAAUhhRR4V+3qliQ3LJDkHuqvE2/TbCdc5q0UXLGWasai3Wl0r
oO+mSONzPt7lRtRZNXvh9fdLbF22/YMlEvNUkzAIRk8O5gwSROlarcfW4/IfBuhg
DXeAh13Vn9id47VTIn1nIZWU98zLBE2PRLFmLc+CIOCGUYU5Bt3mso6PpUwGbI8B
LOGQhgi7uKt/5w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:52 2026 by rpki-client