Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
File: om-n7jCto1qx_ATzQP7fZHqfgWI.mft (raw, json)
Hash identifier: qkXetn8xvpSVDxKm1QTRHc5Aluu34Yjs+RGKr9mjLsk=
Subject key identifier: 55:A3:F3:A1:1F:1A:A4:C7:15:F4:58:E4:63:33:65:13:CB:A4:66:57
Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
Certificate issuer: /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Certificate serial: 019D26286E4240C33C03F1862CB2CE2C7636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
Manifest number: 1819
Signing time: Wed 25 Mar 2026 18:01:16 +0000
Manifest this update: Wed 25 Mar 2026 18:01:16 +0000
Manifest next update: Thu 26 Mar 2026 18:01:16 +0000
Files and hashes: 1: nlwPCqdx2lOTVgz8lZL0i1VNbYM.roa (hash: 2DCxPDKTN3hjXlK5stoi0CcHybhnZoUg5yfutSyUspU=)
2: om-n7jCto1qx_ATzQP7fZHqfgWI.crl (hash: k2felcB1mGyYnd5oEZq6ARMlWtt4GOuUxOlr0aqqjz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:6e:42:40:c3:3c:03:f1:86:2c:b2:ce:2c:76:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Validity
Not Before: Mar 25 18:01:16 2026 GMT
Not After : Mar 26 18:01:16 2026 GMT
Subject: CN=55a3f3a11f1aa4c715f458e463336513cba46657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e8:f9:e7:c0:47:1e:2a:4f:d2:7f:51:cf:dc:
d3:49:ab:dd:55:30:cb:d7:35:91:bf:da:91:f0:86:
e6:e4:57:d7:f2:25:6c:6e:e3:36:1e:f1:03:c0:2a:
9c:ef:c7:d0:45:c2:db:38:5e:f9:05:64:1b:b8:38:
37:bc:5a:1a:a9:08:5c:3e:3c:3d:81:d5:3d:8e:91:
28:d0:7f:ee:d5:ab:af:d2:f5:78:4f:9a:4b:d2:8a:
57:93:4f:bf:3b:f5:74:15:9e:3f:d2:51:84:0f:52:
ba:0a:1c:c6:f9:a8:59:f6:6a:07:65:df:99:72:34:
21:2e:16:5b:11:d1:3b:3e:89:29:14:ab:f7:0a:a5:
6d:98:a5:16:97:d3:63:83:d6:9e:e4:6d:b7:ad:f8:
3b:4b:40:4d:a8:26:1b:7a:c3:b5:0d:ba:fc:09:e6:
a5:c3:32:ac:c4:20:0d:dd:b9:8c:0b:73:56:75:81:
da:60:83:da:a9:9d:ed:ed:14:15:c0:5f:f6:cd:60:
3d:81:06:db:50:89:9f:a3:cf:d9:79:07:07:ce:06:
1f:c2:d6:f5:b9:11:98:42:8e:00:2f:2d:ae:1e:de:
58:b9:ac:79:1f:c4:14:93:6a:4b:89:5f:c9:2e:ff:
fd:d0:90:b5:20:55:c3:e7:82:ad:ec:c4:84:1a:74:
19:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A3:F3:A1:1F:1A:A4:C7:15:F4:58:E4:63:33:65:13:CB:A4:66:57
X509v3 Authority Key Identifier:
keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f5:ba:ef:e0:4c:99:c4:76:0c:e8:39:ba:2c:27:dd:4b:54:
a5:41:b6:15:54:3f:2b:ea:5a:fd:b0:96:2f:83:8d:b1:38:e8:
32:bb:41:62:fe:6a:38:4e:56:55:6c:e0:db:05:d5:2b:ac:c1:
e0:91:63:68:5f:5d:c1:2f:c9:d3:21:e1:56:de:e2:82:5a:5b:
71:e5:12:16:5b:86:07:00:4c:4d:2e:42:07:37:88:d0:cd:a7:
c0:74:0d:de:04:ab:0b:99:c8:b3:10:d6:a7:ac:47:e6:cf:f0:
3b:ac:95:ba:e7:3b:ee:4e:48:bb:db:b4:f5:db:26:83:06:a0:
1d:75:2e:12:90:d6:6d:10:9b:46:c1:3a:6f:a6:15:17:86:70:
4a:06:27:1f:a7:6b:6d:0e:eb:4a:d5:57:e2:72:42:37:2b:81:
18:11:c3:0e:b3:40:68:95:52:58:c3:6b:56:4c:10:1f:65:a9:
24:8e:a9:a0:ee:2c:5b:75:70:f6:49:f8:5a:1e:98:76:12:8f:
0e:30:77:d9:cf:05:f2:f5:db:d3:3b:8a:c9:27:91:94:9b:b0:
b5:4c:25:55:64:5f:c5:ec:62:ac:9b:89:d7:ec:fe:5b:b9:37:
6b:40:2f:2d:ca:60:6e:1e:2d:3f:69:bb:dd:98:9f:af:e1:2b:
f8:50:f9:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKG5CQMM8A/GGLLLOLHY2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNmZhN2VlMzBhZGEzNWFiMWZjMDRmMzQwZmVkZjY0N2E5
ZjgxNjIwHhcNMjYwMzI1MTgwMTE2WhcNMjYwMzI2MTgwMTE2WjAzMTEwLwYDVQQD
Eyg1NWEzZjNhMTFmMWFhNGM3MTVmNDU4ZTQ2MzMzNjUxM2NiYTQ2NjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuj558BHHipP0n9Rz9zTSavdVTDL
1zWRv9qR8Ibm5FfX8iVsbuM2HvEDwCqc78fQRcLbOF75BWQbuDg3vFoaqQhcPjw9
gdU9jpEo0H/u1auv0vV4T5pL0opXk0+/O/V0FZ4/0lGED1K6ChzG+ahZ9moHZd+Z
cjQhLhZbEdE7PokpFKv3CqVtmKUWl9Njg9ae5G23rfg7S0BNqCYbesO1Dbr8Ceal
wzKsxCAN3bmMC3NWdYHaYIPaqZ3t7RQVwF/2zWA9gQbbUImfo8/ZeQcHzgYfwtb1
uRGYQo4ALy2uHt5Yuax5H8QUk2pLiV/JLv/90JC1IFXD54Kt7MSEGnQZLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWj86EfGqTHFfRY5GMzZRPLpGZXMB8GA1UdIwQY
MBaAFKJvp+4wraNasfwE80D+32R6n4FiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb20tbjdqQ3RvMXF4X0FUelFQN2ZaSHFmZ1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iODdhMGQtY2M0Yy00ODI1LWE3ZTQt
ZTkyNGNlNWE3NWIzLzEvb20tbjdqQ3RvMXF4X0FUelFQN2ZaSHFmZ1dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9iODdhMGQtY2M0Yy00ODI1LWE3ZTQtZTkyNGNlNWE3NWIz
LzEvb20tbjdqQ3RvMXF4X0FUelFQN2ZaSHFmZ1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvW67+BM
mcR2DOg5uiwn3UtUpUG2FVQ/K+pa/bCWL4ONsTjoMrtBYv5qOE5WVWzg2wXVK6zB
4JFjaF9dwS/J0yHhVt7iglpbceUSFluGBwBMTS5CBzeI0M2nwHQN3gSrC5nIsxDW
p6xH5s/wO6yVuuc77k5Iu9u09dsmgwagHXUuEpDWbRCbRsE6b6YVF4ZwSgYnH6dr
bQ7rStVX4nJCNyuBGBHDDrNAaJVSWMNrVkwQH2WpJI6poO4sW3Vw9kn4Wh6YdhKP
DjB32c8F8vXb0zuKySeRlJuwtUwlVWRfxexirJuJ1+z+W7k3a0AvLcpgbh4tP2m7
3Zifr+Er+FD5aQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:56 2026 by rpki-client