Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
File: Omhc-Ip_xD_hx_40pv8927QU8LU.mft (raw, json)
Hash identifier: XBnRFg1mNTZic3SzonH9qRBnq3rKTO3HNLl94V0/US4=
Subject key identifier: AA:18:A8:20:D4:2C:3A:3B:89:86:21:45:A3:08:1B:71:1B:ED:C9:EB
Authority key identifier: 3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
Certificate issuer: /CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Certificate serial: 01A19F90E56089CB1FA9884FB7C2B168607D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
Manifest number: 1A1C
Signing time: Tue 03 Nov 2026 04:00:35 +0000
Manifest this update: Tue 03 Nov 2026 04:00:35 +0000
Manifest next update: Wed 04 Nov 2026 04:00:35 +0000
Files and hashes: 1: 4CWfekzf4x-HS1fJIidism45k8I.roa (hash: BHdLLhr5F9G9d810caL7Kieqc8ckL+IwjTONjFXfuYQ=)
2: AleCDdJblQdVI-S091EQULB75VY.roa (hash: eSD+DKApi4DxBKaxewRCjm2s463W9mcSqjdhdutCm0w=)
3: Omhc-Ip_xD_hx_40pv8927QU8LU.crl (hash: clxeGtWe96mEbBZhmk7GwY3i7N90DI2cHbX4rQkrw7E=)
4: Sl9bNPBsXlBI0DeUAp-mjVlbQuQ.roa (hash: OCH6KKa8NHD+YpgJ2LuApSob95p9PeDsu1ZA6J3sKlc=)
5: mYNh-Bk4y33XhOAMSs0MQA7LbcE.roa (hash: iBLXRuhftJlhiPxjhOMoBQKlQtMobGlCuN55cj0Y6VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9f:90:e5:60:89:cb:1f:a9:88:4f:b7:c2:b1:68:60:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Validity
Not Before: Nov 3 04:00:35 2026 GMT
Not After : Nov 4 04:00:35 2026 GMT
Subject: CN=aa18a820d42c3a3b89862145a3081b711bedc9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:13:9a:56:e1:97:3f:87:d0:44:ca:89:7c:
78:36:e0:78:9a:f1:cc:d1:29:d7:a5:4b:78:e4:0c:
cc:57:73:8f:95:76:60:57:c5:dd:84:f6:c3:37:ec:
ff:4a:94:b6:0b:5a:f1:cf:c4:c0:5c:b8:68:fa:53:
32:6c:8f:ab:0b:38:19:e2:04:43:37:ca:8f:aa:59:
02:7f:f9:68:f3:c4:51:2e:9d:64:9f:8e:cb:e2:99:
2b:1d:ca:7a:c4:c1:c3:7e:cd:e0:76:69:67:89:cf:
f5:8f:3d:84:f1:0c:2e:98:de:33:6a:89:bd:65:e4:
04:26:d8:47:06:3b:a1:7c:e2:f4:13:23:d8:53:72:
57:d5:ab:d3:56:4f:7e:92:ff:d4:43:72:6c:e1:a6:
ef:75:a2:2e:d9:9b:b2:80:8a:d2:6c:5f:cc:82:b2:
7d:90:64:30:1f:c0:6d:f4:51:38:73:5d:15:0a:84:
e6:54:67:1b:70:4d:bc:7a:e8:1b:b7:5c:76:31:fa:
a3:c6:91:8f:b0:ad:ce:25:c9:98:1f:60:a1:85:e2:
33:b7:83:09:23:3c:84:45:cc:90:e1:f6:47:6d:9f:
66:8e:f0:06:86:15:11:c8:75:03:ec:ba:f0:79:a7:
2d:3e:96:62:ca:6f:4c:df:61:0f:db:78:bc:d2:46:
30:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:18:A8:20:D4:2C:3A:3B:89:86:21:45:A3:08:1B:71:1B:ED:C9:EB
X509v3 Authority Key Identifier:
keyid:3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8b:b8:88:db:3c:a9:61:0f:99:2d:c5:0d:2c:4d:15:2f:44:
1b:60:29:b8:10:60:82:15:ad:29:90:a8:7e:63:b2:59:4d:23:
30:a1:05:0d:d1:c2:0b:96:32:94:49:19:c8:2b:0d:1e:6b:c2:
ec:17:08:36:31:21:5a:4a:49:56:59:6b:5b:cd:34:1e:ca:65:
2f:e4:db:c6:ef:3e:94:1e:42:74:8a:d5:48:f0:bd:1a:18:f6:
2f:51:87:31:55:db:2d:5a:f6:74:6c:da:16:57:93:46:c0:d3:
2f:4c:82:e0:7b:cc:26:2f:79:af:ed:79:54:9a:4c:52:22:3f:
71:1c:ce:f2:ea:8e:f2:4e:f7:d8:99:81:72:58:cf:60:2f:21:
f6:2a:39:12:ab:30:29:b8:80:97:40:2f:e0:53:2c:e3:24:3a:
6d:a4:37:ac:0e:16:36:9f:65:8c:40:01:bb:0f:8c:3a:3f:05:
35:69:f4:26:02:7a:b8:64:0f:08:87:74:9a:07:d3:4a:a3:0b:
2b:94:d3:4d:67:14:f8:40:98:1e:2e:a3:ec:c4:8e:12:01:16:
cf:07:44:44:fa:21:76:68:b1:63:db:cc:e1:78:2e:13:a3:0c:
95:f9:90:5b:49:66:40:2c:40:4f:d1:9a:50:00:ba:a6:76:9b:
66:9d:e9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 12:05:44 2026 by rpki-client