Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
File: om1GISmD2nHzGuV-WcOeCbM5ygI.mft (raw, json)
Hash identifier: YxGrLxzm6tbEINS7XhnVOp+sP8Vu7n3CLOjiyeMkAIg=
Subject key identifier: 89:69:38:CB:12:A0:8D:4C:4C:4A:01:98:00:E0:3D:56:5F:DF:66:0B
Authority key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
Certificate issuer: /CN=a26d46212983da71f31ae57e59c39e09b339ca02
Certificate serial: 019D28F2BF5C7E97633764116898B2F7EE20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
Manifest number: 0F53
Signing time: Thu 26 Mar 2026 07:01:30 +0000
Manifest this update: Thu 26 Mar 2026 07:01:30 +0000
Manifest next update: Fri 27 Mar 2026 07:01:30 +0000
Files and hashes: 1: 48VETktm8u5cwxfi5tzhrXCS1PA.roa (hash: pocJNPkIQ+wfrZHo23pdtb1YIKYD79x6IBlh2144Vzk=)
2: om1GISmD2nHzGuV-WcOeCbM5ygI.crl (hash: g1AVtfnWrDIl6TIqOhDTTYK0o+AXPErmE0ehC4CUDdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:bf:5c:7e:97:63:37:64:11:68:98:b2:f7:ee:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26d46212983da71f31ae57e59c39e09b339ca02
Validity
Not Before: Mar 26 07:01:30 2026 GMT
Not After : Mar 27 07:01:30 2026 GMT
Subject: CN=896938cb12a08d4c4c4a019800e03d565fdf660b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:7b:8b:0f:cd:3f:69:7f:6b:a0:26:39:86:
58:55:9a:99:ce:7c:3b:fe:d6:e6:85:38:ae:58:77:
cb:8b:c5:c4:0e:23:2f:fb:b7:67:ee:64:54:ec:f3:
d9:aa:7e:0b:bf:95:9c:20:1f:81:16:e6:39:91:72:
21:46:cd:bd:1a:17:a8:6b:24:1e:8e:cb:ba:23:72:
56:ec:4c:31:11:29:a8:b9:3e:f9:e2:30:61:4a:56:
c3:73:65:5c:ef:e2:92:f1:9d:5e:48:66:9c:44:38:
87:d0:d3:a5:e3:68:80:28:78:34:3e:6d:ca:38:37:
ad:8f:66:37:a5:4d:75:90:7a:ff:51:26:8f:bc:d7:
72:97:26:10:e2:e1:c0:21:8b:60:f9:51:be:a3:0a:
28:a1:e0:9c:15:e8:72:89:5a:2d:7d:d8:b5:e6:28:
bd:15:6d:c7:8b:ee:9e:67:3a:ed:5e:68:a5:b8:e8:
e8:e6:93:c3:0a:26:c8:46:dc:36:43:ae:31:c2:7c:
bc:95:5f:0e:10:be:6b:03:a0:2a:db:44:5f:3d:72:
5d:48:81:08:37:e6:16:12:ff:74:05:bf:a5:e2:fe:
cc:12:65:3e:0a:85:62:53:5b:63:ef:ba:4b:86:46:
7d:d9:82:56:b5:6d:c1:3c:b8:c0:c1:30:51:99:c8:
a8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:69:38:CB:12:A0:8D:4C:4C:4A:01:98:00:E0:3D:56:5F:DF:66:0B
X509v3 Authority Key Identifier:
keyid:A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:77:7f:45:db:f3:a4:84:4a:e5:85:96:03:81:40:21:c0:f9:
1e:89:82:64:ca:98:1c:d0:32:0e:c8:fc:dd:ac:89:3c:d6:96:
29:2d:41:21:83:59:db:e2:b8:8c:ca:a8:c5:b8:4b:fa:0e:a4:
b9:4f:4e:b9:88:b5:29:d7:76:f8:4d:af:c8:b7:49:33:1d:51:
50:19:62:4e:c9:e2:3d:4b:bb:2a:79:29:f5:05:94:39:a4:f3:
07:21:5c:59:78:67:f7:a9:2d:12:7f:04:80:6c:6e:91:ef:4c:
43:86:e4:49:9f:f8:67:14:74:f0:c2:bf:e8:87:e0:00:c4:0e:
f4:80:82:6b:ec:f9:be:fb:34:78:99:ca:d9:2d:b1:9d:42:9e:
ee:8e:89:18:fa:3b:96:82:e1:24:f0:b1:d7:3c:36:f9:22:3e:
54:47:ac:5b:ad:57:e0:83:19:37:70:f6:5d:77:36:0f:eb:16:
c3:0e:0c:7e:13:6d:d9:5f:50:f9:40:b0:94:0b:e3:c5:d3:f3:
cc:65:3a:f8:f5:81:32:ac:6d:66:2f:a0:45:f4:0c:21:a5:e6:
63:ce:e8:1f:e2:98:84:7b:e0:8f:90:5d:40:39:97:71:10:ae:
d8:4c:c4:d7:57:3a:1a:2c:14:e8:1c:46:b4:39:b4:16:21:c9:
be:05:41:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:18 2026 by rpki-client