Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
File: OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft (raw, json)
Hash identifier: MZ1trMKGWDKifW6DSJbnHzLoXlx5l6x6uXjG2PBZwPI=
Subject key identifier: B9:0B:A9:AD:BD:B6:68:06:D0:66:D8:C5:C5:90:83:03:7C:01:19:B6
Authority key identifier: 38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D
Certificate issuer: /CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
Certificate serial: 019D29295D55F736367FF3CE08B8F0277AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
Manifest number: 189E
Signing time: Thu 26 Mar 2026 08:01:09 +0000
Manifest this update: Thu 26 Mar 2026 08:01:09 +0000
Manifest next update: Fri 27 Mar 2026 08:01:09 +0000
Files and hashes: 1: JgeqMp-5oO_S80v0VekWcg72-Eg.roa (hash: tVMPOaelruFEfeEIzj1RQOAzlajxyQUW4rwlWncH9tQ=)
2: OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl (hash: 18h6VPigPbMeb5cbxZbWvAZcCQ8t0vqO+HfGbTl6M40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:5d:55:f7:36:36:7f:f3:ce:08:b8:f0:27:7a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
Validity
Not Before: Mar 26 08:01:09 2026 GMT
Not After : Mar 27 08:01:09 2026 GMT
Subject: CN=b90ba9adbdb66806d066d8c5c59083037c0119b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:df:e0:4c:53:90:97:e6:d4:97:1b:c8:e3:44:
51:49:76:7b:3b:0f:77:ff:66:15:f6:c4:89:9f:30:
01:4a:c4:f2:a4:ad:36:15:e6:0b:20:d4:bb:79:48:
fc:53:13:91:55:d6:71:4a:78:5f:14:7c:08:52:07:
c6:23:aa:6c:f9:67:31:b1:20:2a:0f:55:61:5b:65:
84:8e:27:fb:fe:bf:fc:95:36:36:df:5f:07:5b:33:
80:5c:ef:ee:11:81:b8:fd:80:0b:ef:05:15:9a:55:
58:26:53:fe:10:5b:39:33:17:ac:4b:b4:69:ac:c4:
78:f5:65:d1:79:5e:ad:bc:c3:0f:44:fe:80:05:e8:
85:75:dc:07:5d:64:cb:23:12:99:ff:34:57:fb:65:
24:78:c7:1c:87:1e:43:0f:88:85:24:4c:4c:4e:21:
0a:5e:a8:0d:b1:93:8f:5b:67:70:e7:2c:28:db:16:
56:c3:8a:90:97:7e:c8:61:e7:fc:8c:43:9f:b1:93:
8c:f7:c0:b6:53:79:8f:0e:a6:d0:13:11:e8:3f:33:
04:09:70:e8:bd:d3:df:92:aa:63:e9:79:ba:0f:c5:
9f:18:26:b0:a8:3a:56:b1:d1:14:4c:2f:29:92:5f:
28:4c:23:af:e7:be:5b:84:d5:cb:c3:2a:f0:3e:e6:
99:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0B:A9:AD:BD:B6:68:06:D0:66:D8:C5:C5:90:83:03:7C:01:19:B6
X509v3 Authority Key Identifier:
keyid:38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:bb:a5:04:1e:96:8c:92:5b:81:48:fe:8c:33:58:ef:79:05:
f6:79:9f:43:50:35:c8:c6:0b:23:96:5d:90:2e:73:b0:29:ef:
21:81:84:36:b3:5a:1b:28:18:fa:e4:bd:7a:0d:7e:72:33:8a:
70:b2:ed:ac:a7:f2:fe:e5:d5:18:20:71:fe:ee:1d:45:88:4f:
83:37:19:de:c7:a9:8e:6a:94:a8:1a:23:08:31:7f:5e:65:e3:
36:ae:3e:af:1d:fd:a5:60:9b:49:83:6c:00:d5:5d:6e:b3:b3:
de:36:0a:b5:61:d7:56:1e:64:39:5d:15:33:5b:6a:bf:58:ca:
59:ac:ff:36:b6:fb:c1:5b:f3:48:e3:8d:5f:a0:60:c6:36:99:
91:a7:1a:74:d2:93:e4:45:8e:63:b9:ad:07:ac:ac:08:7a:63:
bb:07:65:c9:87:15:c1:4b:66:4b:f7:5a:2d:14:e7:48:87:29:
91:6a:73:7f:ad:5c:d6:8e:69:b7:31:ec:41:30:01:a5:83:ca:
26:da:1c:cb:a6:03:af:3e:6f:f8:10:67:10:99:d2:c1:e3:60:
76:32:ac:40:80:41:03:21:dc:0c:46:ea:8d:fb:f1:58:61:92:
6f:98:dc:56:78:a8:22:29:a7:9a:67:b0:e1:d0:a1:16:ed:ef:
4b:09:83:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:37:19 2026 by rpki-client