
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
File: Omhc-Ip_xD_hx_40pv8927QU8LU.mft (raw, json)
Hash identifier: JR2kq8aOYPlb105gW3GEfzZMNsDPHdiX24FO+kWBwL4=
Subject key identifier: A0:BA:D5:B1:DC:58:AC:0A:0C:8D:70:87:46:5A:23:FD:BC:B7:4E:EE
Authority key identifier: 3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
Certificate issuer: /CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Certificate serial: 019FAD88F2434C81D0D9575A347EA0064B96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
Manifest number: 191A
Signing time: Wed 29 Jul 2026 11:01:00 +0000
Manifest this update: Wed 29 Jul 2026 11:01:00 +0000
Manifest next update: Thu 30 Jul 2026 11:01:00 +0000
Files and hashes: 1: 4CWfekzf4x-HS1fJIidism45k8I.roa (hash: BHdLLhr5F9G9d810caL7Kieqc8ckL+IwjTONjFXfuYQ=)
2: AleCDdJblQdVI-S091EQULB75VY.roa (hash: eSD+DKApi4DxBKaxewRCjm2s463W9mcSqjdhdutCm0w=)
3: Omhc-Ip_xD_hx_40pv8927QU8LU.crl (hash: Iz6LfUKAwcx/MsB6Tkp5mm6GigExA48eF3//YW8Y1bU=)
4: Sl9bNPBsXlBI0DeUAp-mjVlbQuQ.roa (hash: OCH6KKa8NHD+YpgJ2LuApSob95p9PeDsu1ZA6J3sKlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:f2:43:4c:81:d0:d9:57:5a:34:7e:a0:06:4b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Validity
Not Before: Jul 29 11:01:00 2026 GMT
Not After : Jul 30 11:01:00 2026 GMT
Subject: CN=a0bad5b1dc58ac0a0c8d7087465a23fdbcb74eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:13:7e:ca:ac:d2:99:af:51:55:e6:7c:9f:
44:20:cf:6c:8a:f0:7e:92:bc:91:7c:b3:7b:ac:fe:
2e:01:65:0a:ff:a7:07:91:1a:ff:35:b4:d1:bf:fd:
0b:d6:fd:ac:98:cc:98:b6:39:02:95:55:b1:40:63:
69:c7:52:21:c1:5d:94:d7:ca:a8:16:1a:0f:af:5a:
48:81:ae:f7:64:c6:6a:27:ac:1a:e9:45:d0:26:34:
89:0e:ff:92:c4:f9:ed:d0:fc:70:1d:44:bd:d7:07:
d3:dd:ce:e1:71:ae:c7:67:ab:44:1a:4a:9c:41:11:
7b:ce:8a:43:d8:a9:08:bc:ec:ca:ba:50:eb:5b:65:
69:03:42:09:bb:ab:c8:16:47:cb:68:c3:6c:2d:62:
92:a3:40:22:6f:02:72:06:92:57:e3:3b:dd:e4:b7:
ed:8b:9e:cb:04:c2:94:fa:a6:46:30:ba:50:1c:d6:
e8:c2:f5:86:01:2c:11:b7:2f:16:69:3a:32:cb:52:
ed:a2:ae:6f:94:71:84:fc:bb:08:6d:d4:74:93:2c:
a3:16:f3:37:07:5f:49:34:04:08:f5:79:98:b0:a4:
b8:b8:b1:4d:9a:bc:35:dd:e6:12:76:ff:17:a3:3f:
cd:fb:62:fe:ab:72:d7:c7:7e:72:12:f9:21:0f:34:
f3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BA:D5:B1:DC:58:AC:0A:0C:8D:70:87:46:5A:23:FD:BC:B7:4E:EE
X509v3 Authority Key Identifier:
keyid:3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:a1:ab:4e:26:75:a2:97:7d:88:c3:60:66:50:cd:49:0d:43:
68:43:84:02:8a:5d:a8:28:9c:17:4c:20:18:aa:f8:c5:c5:96:
f8:d2:a4:5f:ee:b1:a6:68:d1:fa:32:9d:0d:74:4f:4e:66:50:
b2:ed:b4:fa:c2:3e:35:b7:ef:56:db:96:c8:a1:a7:a0:be:72:
e3:12:28:37:be:83:5e:e2:52:82:1f:5b:0e:0d:70:11:43:ca:
49:40:ff:97:60:5e:bd:af:f4:f3:7f:10:0e:71:a0:97:1b:2d:
08:c1:ca:8a:22:03:aa:fc:16:25:9e:09:d9:00:f4:20:af:93:
3e:75:7d:80:9e:21:26:35:db:ef:8c:1d:a4:a8:6a:98:f3:64:
75:47:2d:96:ef:dd:29:7b:47:60:b1:76:46:e5:dc:0e:20:ab:
5b:95:d8:b6:72:f9:4e:21:92:c9:39:25:1b:a9:ae:b2:61:ba:
5c:f5:42:b3:3d:fe:25:10:dd:dc:7e:cb:bd:d9:58:db:93:a6:
73:b1:37:39:11:3a:d8:98:ed:6b:f9:c8:38:69:a2:79:21:15:
2c:49:66:db:cd:84:d7:1f:e3:1b:17:5f:5c:60:20:1f:08:db:
d9:0d:59:04:6c:9a:3f:f7:33:65:c6:e6:04:2c:c8:85:8d:00:
5e:cf:35:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:27:31 2026 by rpki-client