
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
File: oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft (raw, json)
Hash identifier: zbIOlxZIoDRdZhaf2ku4LopuFFMgpldQO44Q2iQ97Aw=
Subject key identifier: BF:18:05:CE:EB:50:98:34:25:FB:51:E7:CD:5F:47:C9:3C:DE:DB:85
Authority key identifier: A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
Certificate issuer: /CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
Certificate serial: 019F93921EBD998A0A1E647D8A0763FDFC63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
Manifest number: 0B3A
Signing time: Fri 24 Jul 2026 10:00:54 +0000
Manifest this update: Fri 24 Jul 2026 10:00:54 +0000
Manifest next update: Sat 25 Jul 2026 10:00:54 +0000
Files and hashes: 1: AtniHnWS_m5XJnsdI3EUIOstzH4.roa (hash: KMRx9/qM9+4wF0F9XLzExOU323HbvcZo4zC4bgJQesg=)
2: oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl (hash: 8V+zfrROkgqdSqxMbz1TB6VhKWduaU7mzTljyQSqObM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:1e:bd:99:8a:0a:1e:64:7d:8a:07:63:fd:fc:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
Validity
Not Before: Jul 24 10:00:54 2026 GMT
Not After : Jul 25 10:00:54 2026 GMT
Subject: CN=bf1805ceeb50983425fb51e7cd5f47c93cdedb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:3a:ec:ce:75:f3:9d:2b:71:98:df:b0:d0:
c2:db:f2:7c:e7:0e:33:7d:e5:28:e8:1a:a9:16:0a:
e2:b6:fc:86:01:95:93:5e:93:dc:02:35:34:fa:8e:
e3:e7:a1:91:74:24:27:a8:9d:9b:2d:76:ee:bf:7f:
16:c8:f5:1f:20:45:50:7b:9e:9e:bc:9f:34:e2:fa:
29:b3:b1:d9:e9:8d:b8:86:8a:06:96:b9:d3:fa:19:
b4:25:09:11:05:1a:73:fd:6e:e5:fa:ba:a2:9a:fc:
f3:31:0c:01:c5:3d:b0:d7:16:0b:5e:72:27:c7:ce:
80:f7:ee:5d:2a:42:4c:a6:bd:a2:a0:0b:c2:84:62:
8e:2e:80:93:0f:da:85:15:ea:3e:86:d8:c7:25:93:
41:d6:81:70:19:1b:3b:e2:df:24:5a:f4:2b:27:fc:
40:dd:b9:ec:3f:0b:7b:84:6a:7a:87:e7:52:d7:d4:
a6:3c:23:83:47:80:a0:2f:f1:0e:9a:df:e5:a8:70:
aa:62:d4:c0:ae:ff:42:d7:2b:03:74:81:6b:18:34:
37:bb:29:72:3b:ff:a9:39:9e:77:e7:b1:e6:26:a3:
34:3e:67:af:01:b5:4a:6f:3f:c6:40:28:74:57:33:
73:9f:54:d5:6f:10:67:37:d3:82:2f:cd:a4:18:f7:
bb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:18:05:CE:EB:50:98:34:25:FB:51:E7:CD:5F:47:C9:3C:DE:DB:85
X509v3 Authority Key Identifier:
keyid:A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7b:2e:c8:3f:e4:ff:8e:c6:48:50:c3:39:5c:3d:e3:da:7f:
7f:20:69:34:19:06:ed:47:aa:f9:f2:f1:2b:50:e9:b9:1f:6c:
1c:ca:b1:38:46:cb:2f:5a:37:16:97:f5:72:79:39:a0:af:d3:
cc:f7:aa:42:49:18:e9:22:f5:1f:81:97:57:ed:3f:a6:e4:ba:
ba:ab:fc:d3:17:53:90:ba:2a:71:d2:77:14:73:3a:00:47:9a:
b7:67:c0:d7:ab:c5:3c:c3:a9:d5:08:03:23:90:6a:58:15:85:
ea:76:80:a3:62:55:72:2c:65:4f:a2:fc:7c:2a:69:61:8f:84:
9c:70:9d:d4:3e:bd:58:45:cf:07:4a:92:ab:c0:ad:1b:de:75:
d5:2b:f4:94:21:f5:68:28:25:3d:42:25:4a:8c:f7:78:7b:fe:
bf:10:f6:08:c3:b8:fe:1f:7d:79:c9:ac:6d:34:7a:e9:99:95:
cd:72:53:08:58:c2:18:2c:c3:8f:a1:3a:c7:d7:e2:4b:ee:71:
00:7f:31:83:b3:04:ee:b9:e4:30:86:91:cb:7b:b3:6c:93:1f:
e7:54:40:35:16:05:7a:7f:b8:6c:39:55:75:a1:fd:42:81:cd:
71:4d:df:e7:17:f7:8c:8a:2e:5a:b5:19:cc:b1:71:4c:c4:34:
a5:90:86:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Tkh69mYoKHmR9igdj/fxjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZTMxMjhmZDA5ZGMxOGU2NmVlNDIxMmE3ZTY0ZjNlNGU3
NGE4MTQwHhcNMjYwNzI0MTAwMDU0WhcNMjYwNzI1MTAwMDU0WjAzMTEwLwYDVQQD
EyhiZjE4MDVjZWViNTA5ODM0MjVmYjUxZTdjZDVmNDdjOTNjZGVkYjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFM67M51850rcZjfsNDC2/J85w4z
feUo6BqpFgritvyGAZWTXpPcAjU0+o7j56GRdCQnqJ2bLXbuv38WyPUfIEVQe56e
vJ804vops7HZ6Y24hooGlrnT+hm0JQkRBRpz/W7l+rqimvzzMQwBxT2w1xYLXnIn
x86A9+5dKkJMpr2ioAvChGKOLoCTD9qFFeo+htjHJZNB1oFwGRs74t8kWvQrJ/xA
3bnsPwt7hGp6h+dS19SmPCODR4CgL/EOmt/lqHCqYtTArv9C1ysDdIFrGDQ3uyly
O/+pOZ5357HmJqM0PmevAbVKbz/GQCh0VzNzn1TVbxBnN9OCL82kGPe7mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8YBc7rUJg0JftR581fR8k83tuFMB8GA1UdIwQY
MBaAFKDjEo/QncGOZu5CEqfmTz5OdKgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb09NU2o5Q2R3WTVtN2tJU3AtWlBQazUwcUJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wYjRlNzMtYTE1NC00MDU5LWI2MjIt
OGZkNWNhYmE1NGU5LzEvb09NU2o5Q2R3WTVtN2tJU3AtWlBQazUwcUJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wYjRlNzMtYTE1NC00MDU5LWI2MjItOGZkNWNhYmE1NGU5
LzEvb09NU2o5Q2R3WTVtN2tJU3AtWlBQazUwcUJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHsuyD/k
/47GSFDDOVw949p/fyBpNBkG7Ueq+fLxK1DpuR9sHMqxOEbLL1o3Fpf1cnk5oK/T
zPeqQkkY6SL1H4GXV+0/puS6uqv80xdTkLoqcdJ3FHM6AEeat2fA16vFPMOp1QgD
I5BqWBWF6naAo2JVcixlT6L8fCppYY+EnHCd1D69WEXPB0qSq8CtG9511Sv0lCH1
aCglPUIlSoz3eHv+vxD2CMO4/h99ecmsbTR66ZmVzXJTCFjCGCzDj6E6x9fiS+5x
AH8xg7ME7rnkMIaRy3uzbJMf51RANRYFen+4bDlVdaH9QoHNcU3f5xf3jIouWrUZ
zLFxTMQ0pZCG0w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:15 2026 by rpki-client