Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
File: OmaGndGplxZLpPoj4P1B-zrLEL4.mft (raw, json)
Hash identifier: HhfZb4A810R2gRjGW+eDGXPkccUXmbA0buSDP2/8e/Q=
Subject key identifier: E9:12:C4:ED:40:B3:2F:DD:B1:E4:FE:49:35:37:36:B8:0D:9C:D7:67
Authority key identifier: 3A:66:86:9D:D1:A9:97:16:4B:A4:FA:23:E0:FD:41:FB:3A:CB:10:BE
Certificate issuer: /CN=3a66869dd1a997164ba4fa23e0fd41fb3acb10be
Certificate serial: 019A729344117661CAB0ECBA76F7BA32E820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
Manifest number: 1305
Signing time: Tue 11 Nov 2025 11:00:45 +0000
Manifest this update: Tue 11 Nov 2025 11:00:45 +0000
Manifest next update: Wed 12 Nov 2025 11:00:45 +0000
Files and hashes: 1: FFjeL0IuCbzbDGWfr7U5gi5W5Os.roa (hash: 3sG/fd8pRrUXnkWnOf6agMt6Javmg7cQv1NVJ7eO+0w=)
2: OmaGndGplxZLpPoj4P1B-zrLEL4.crl (hash: qBhPEp23DX11rK0uzJq10BPdE1ALYlq1bAAzuvc/T2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:44:11:76:61:ca:b0:ec:ba:76:f7:ba:32:e8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a66869dd1a997164ba4fa23e0fd41fb3acb10be
Validity
Not Before: Nov 11 11:00:45 2025 GMT
Not After : Nov 12 11:00:45 2025 GMT
Subject: CN=e912c4ed40b32fddb1e4fe49353736b80d9cd767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:ab:17:f5:8d:a1:ff:34:1a:3a:36:90:23:
d7:a9:d4:6b:8a:40:59:bf:25:52:28:3b:fb:2d:8d:
ed:91:d8:0b:e7:3c:2d:c5:cb:5b:5b:a7:cb:10:d5:
b0:35:3e:fc:51:94:2c:c6:99:8e:6c:1d:90:c8:73:
11:97:51:33:8d:c4:4d:80:57:15:ae:ec:91:25:f8:
69:9b:a3:21:03:a1:23:39:70:ed:35:79:ed:5f:9e:
9a:65:3d:d6:8d:bc:f4:be:0a:9e:62:56:04:86:69:
16:1b:f2:75:dc:b4:ab:a2:4c:84:ed:ae:18:ea:a7:
ff:60:45:ea:be:11:d3:23:ea:4c:d8:b2:e0:66:3f:
8a:71:c8:93:c3:1a:34:a2:28:67:bc:40:0d:45:b4:
0c:95:2d:27:22:8c:32:45:18:e9:3e:f3:8b:1c:52:
04:e9:6f:11:bc:42:20:3c:93:dd:33:e2:7f:52:c6:
86:a3:01:b9:78:62:46:40:12:8c:43:a9:00:e3:7c:
fe:32:38:5a:9b:c6:56:1e:8c:65:ba:ac:56:f7:97:
40:82:1a:83:d5:c0:f2:92:6e:a1:ab:09:56:8b:59:
19:22:38:0b:7e:3c:5d:86:49:f5:b9:ec:d3:a6:31:
be:06:bd:49:74:aa:21:f9:2c:38:6b:64:83:30:87:
e4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:12:C4:ED:40:B3:2F:DD:B1:E4:FE:49:35:37:36:B8:0D:9C:D7:67
X509v3 Authority Key Identifier:
keyid:3A:66:86:9D:D1:A9:97:16:4B:A4:FA:23:E0:FD:41:FB:3A:CB:10:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:61:19:77:11:5e:f4:85:22:33:7b:ca:de:e3:2d:45:36:4d:
aa:47:2f:ef:73:0e:c9:5b:89:08:c3:2e:35:4f:38:4e:50:38:
20:86:7f:a4:66:51:69:5d:b2:58:89:62:1f:8f:30:cf:da:8e:
7a:38:00:ff:f4:4e:88:c5:3d:40:3f:ce:f8:8a:4c:d8:6c:23:
00:74:21:9d:65:e2:a8:cc:cd:2e:69:e7:4a:48:55:50:78:cf:
4d:b1:68:6c:19:e6:b0:00:1d:9e:53:4c:b5:f7:82:10:e0:97:
1d:ca:18:67:9c:aa:54:db:51:9f:92:15:a3:58:50:4f:24:11:
dd:c9:f1:70:5f:67:c4:73:aa:a2:f3:22:0e:26:c6:9f:d0:72:
3f:d9:9a:4e:49:ff:ef:e1:75:56:f2:7b:c3:92:1c:ed:26:fc:
66:29:f6:b3:ff:a9:10:88:1d:ae:9f:5a:d7:d7:f2:7c:57:e1:
92:13:3c:6f:ef:2d:d6:da:32:e4:0d:e8:48:a5:6a:4f:f0:fa:
2f:f2:7c:c7:d9:1d:21:a9:fc:93:58:5e:d5:50:40:28:db:c7:
99:ab:6b:4b:e2:ff:f2:bf:49:03:99:c4:1f:1b:fe:6f:c1:cf:
24:f0:26:da:d5:9e:ee:01:47:a2:1d:e9:dc:4a:a2:f2:20:2c:
ed:42:da:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk0QRdmHKsOy6dve6MuggMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNjY4NjlkZDFhOTk3MTY0YmE0ZmEyM2UwZmQ0MWZiM2Fj
YjEwYmUwHhcNMjUxMTExMTEwMDQ1WhcNMjUxMTEyMTEwMDQ1WjAzMTEwLwYDVQQD
EyhlOTEyYzRlZDQwYjMyZmRkYjFlNGZlNDkzNTM3MzZiODBkOWNkNzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEWrF/WNof80Gjo2kCPXqdRrikBZ
vyVSKDv7LY3tkdgL5zwtxctbW6fLENWwNT78UZQsxpmObB2QyHMRl1EzjcRNgFcV
ruyRJfhpm6MhA6EjOXDtNXntX56aZT3Wjbz0vgqeYlYEhmkWG/J13LSrokyE7a4Y
6qf/YEXqvhHTI+pM2LLgZj+KcciTwxo0oihnvEANRbQMlS0nIowyRRjpPvOLHFIE
6W8RvEIgPJPdM+J/UsaGowG5eGJGQBKMQ6kA43z+Mjham8ZWHoxluqxW95dAghqD
1cDykm6hqwlWi1kZIjgLfjxdhkn1uezTpjG+Br1JdKoh+Sw4a2SDMIfk3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkSxO1Asy/dseT+STU3NrgNnNdnMB8GA1UdIwQY
MBaAFDpmhp3RqZcWS6T6I+D9Qfs6yxC+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT21hR25kR3BseFpMcFBvajRQMUItenJMRUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85MTE4ZTMtMTNkYS00ZDQ4LTljMzgt
NzExZmMxYTJkMGEwLzEvT21hR25kR3BseFpMcFBvajRQMUItenJMRUw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85MTE4ZTMtMTNkYS00ZDQ4LTljMzgtNzExZmMxYTJkMGEw
LzEvT21hR25kR3BseFpMcFBvajRQMUItenJMRUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuGEZdxFe
9IUiM3vK3uMtRTZNqkcv73MOyVuJCMMuNU84TlA4IIZ/pGZRaV2yWIliH48wz9qO
ejgA//ROiMU9QD/O+IpM2GwjAHQhnWXiqMzNLmnnSkhVUHjPTbFobBnmsAAdnlNM
tfeCEOCXHcoYZ5yqVNtRn5IVo1hQTyQR3cnxcF9nxHOqovMiDibGn9ByP9maTkn/
7+F1VvJ7w5Ic7Sb8Zin2s/+pEIgdrp9a19fyfFfhkhM8b+8t1toy5A3oSKVqT/D6
L/J8x9kdIan8k1he1VBAKNvHmatrS+L/8r9JA5nEHxv+b8HPJPAm2tWe7gFHoh3p
3Eqi8iAs7ULayA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:27 2025 by rpki-client