Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
File: Omhc-Ip_xD_hx_40pv8927QU8LU.mft (raw, json)
Hash identifier: cfnVfdBj1WVQQBSfu0z4mPD6dhmMpdirPue9xRXmGkE=
Subject key identifier: 9D:07:EC:7F:A2:7B:F0:2E:6C:06:E6:97:27:8B:AD:F7:A5:21:25:6B
Authority key identifier: 3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
Certificate issuer: /CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Certificate serial: 019CECA6BDE5C498EB93ED37A36C90BD99C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
Manifest number: 17AD
Signing time: Sat 14 Mar 2026 14:01:16 +0000
Manifest this update: Sat 14 Mar 2026 14:01:16 +0000
Manifest next update: Sun 15 Mar 2026 14:01:16 +0000
Files and hashes: 1: 4CWfekzf4x-HS1fJIidism45k8I.roa (hash: BHdLLhr5F9G9d810caL7Kieqc8ckL+IwjTONjFXfuYQ=)
2: AleCDdJblQdVI-S091EQULB75VY.roa (hash: eSD+DKApi4DxBKaxewRCjm2s463W9mcSqjdhdutCm0w=)
3: Omhc-Ip_xD_hx_40pv8927QU8LU.crl (hash: 7Uod7JPNlNnkPaC54JWkT3ARKPdep9/374pFIAJfcdg=)
4: Sl9bNPBsXlBI0DeUAp-mjVlbQuQ.roa (hash: OCH6KKa8NHD+YpgJ2LuApSob95p9PeDsu1ZA6J3sKlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:a6:bd:e5:c4:98:eb:93:ed:37:a3:6c:90:bd:99:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Validity
Not Before: Mar 14 14:01:16 2026 GMT
Not After : Mar 15 14:01:16 2026 GMT
Subject: CN=9d07ec7fa27bf02e6c06e697278badf7a521256b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6c:1b:65:c6:23:4b:fb:28:a1:68:1a:bb:79:
35:70:87:2d:ea:27:36:d3:e0:cf:83:40:62:d4:34:
ae:91:9d:55:45:75:22:88:e7:56:e9:7c:8a:b2:34:
36:90:ff:c1:be:83:40:bf:a3:7c:29:46:9c:61:4d:
eb:a2:aa:db:a0:80:2e:05:23:c2:c3:ea:86:5a:18:
71:44:85:36:8a:cd:10:e6:f8:75:e8:24:73:35:98:
1c:15:84:2c:38:05:86:f1:1f:82:87:69:d4:78:66:
53:d4:c0:da:bf:c5:bf:49:69:2d:d6:cd:cd:89:00:
f1:70:de:d8:b4:df:26:78:b4:8d:5a:40:49:6a:47:
0c:a0:c2:1c:bd:3e:c0:27:3f:98:f8:59:72:da:d3:
bd:18:80:10:d2:01:93:f5:e4:47:7a:72:45:13:91:
35:fd:8a:43:8b:f6:d9:d5:0c:07:17:05:af:b7:0b:
81:6b:18:58:61:cc:40:32:7f:33:12:dc:26:de:88:
68:a4:e7:12:b5:72:95:e5:94:be:e9:09:23:1a:98:
ec:ed:61:05:85:9e:06:5d:a6:28:b6:52:21:8e:d9:
b3:77:13:e7:b9:c0:6e:bd:3d:ee:63:5a:32:20:19:
44:0e:fc:8e:de:34:b9:00:f3:c0:95:05:88:66:ef:
5e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:07:EC:7F:A2:7B:F0:2E:6C:06:E6:97:27:8B:AD:F7:A5:21:25:6B
X509v3 Authority Key Identifier:
keyid:3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:76:c0:67:ed:1c:c5:53:1a:22:6a:b2:71:c4:29:1a:34:50:
ea:4e:99:7f:15:4e:4d:f5:13:76:e0:6d:ea:b6:5d:3c:ef:44:
c9:37:22:d2:13:5e:25:13:51:6f:50:d5:2d:e5:e3:18:87:d1:
92:48:a3:16:a0:b5:6d:62:8e:bc:a8:33:c8:9f:37:38:3d:1c:
07:b7:67:73:58:00:4a:d3:41:21:5c:99:40:05:66:f2:3b:d7:
bd:2c:1a:97:1f:3f:92:30:82:ed:6e:dc:c8:9a:91:d1:42:07:
0c:7b:41:54:9a:77:57:ac:d5:af:b0:fa:5d:e9:3a:77:e1:a1:
d6:30:81:20:83:4d:d1:04:ee:f7:5d:4c:4a:5c:55:39:08:e4:
bf:9e:2b:ed:e4:6d:39:75:e0:66:44:ba:66:c8:b5:75:df:31:
ba:d1:e6:a5:b4:a1:18:1f:69:99:16:df:d9:58:d6:5a:dd:ff:
25:1f:f9:60:50:21:61:11:92:03:5b:d7:2e:13:a9:83:fa:7c:
72:9a:62:3f:4d:e2:5d:42:d4:35:52:11:08:f5:dd:1d:50:43:
bf:d4:cb:2b:71:58:48:17:b5:f5:fd:62:22:e6:e1:5f:11:c2:
ac:9f:58:d8:fb:d5:3f:2e:9b:a1:6a:c6:75:ff:62:6a:ce:0e:
7c:60:36:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 22:58:05 2026 by rpki-client