
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
File: Om4uf_LHAsirUUn-6nF1mRxzQJw.mft (raw, json)
Hash identifier: idmX3MFpld6/SdeC+SNEG39ifocr0Nw7uclYFB3dWq8=
Subject key identifier: 81:18:06:3F:A4:82:28:08:E1:7C:BC:1A:60:28:B7:39:0A:72:F8:99
Authority key identifier: 3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
Certificate issuer: /CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Certificate serial: 019D292953807A55834A2C0727DA79C0959D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
Manifest number: 08A1
Signing time: Thu 26 Mar 2026 08:01:07 +0000
Manifest this update: Thu 26 Mar 2026 08:01:07 +0000
Manifest next update: Fri 27 Mar 2026 08:01:07 +0000
Files and hashes: 1: 2vFmTEXL4sIOGvvxET_z9OsJtkM.roa (hash: hE+J8l/9QyGd/yFHBwyjIvFqStRGpbN8ok17t6YgQA4=)
2: Om4uf_LHAsirUUn-6nF1mRxzQJw.crl (hash: Rq/dWfAO/MdnmPA3satiIMWoHp6s3xMMjoeOKbIWXwA=)
3: ngZkQQAAmyzs-8i5NBKDT7ozzfE.roa (hash: 6UMNzj0BfpUOXrwKXdq5vGzZXckdpCxU0zZpgK6Silc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:53:80:7a:55:83:4a:2c:07:27:da:79:c0:95:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Validity
Not Before: Mar 26 08:01:07 2026 GMT
Not After : Mar 27 08:01:07 2026 GMT
Subject: CN=8118063fa4822808e17cbc1a6028b7390a72f899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:2a:7d:e5:5a:b1:55:64:b7:ce:43:f0:90:
9b:4e:6d:ee:22:b5:1d:fb:4b:0c:5a:94:89:b2:1a:
6b:d1:65:16:2d:29:66:47:00:30:27:58:81:33:46:
da:ae:1d:72:e7:0f:65:c9:46:8d:74:23:6f:5f:52:
d5:8c:04:fa:ff:7c:a3:97:fd:00:7b:12:45:73:81:
1e:d1:1f:56:01:25:16:29:d5:c9:9e:70:ed:f5:0e:
54:9e:c2:0f:ef:bd:79:fa:95:73:50:be:cf:30:3b:
ac:f2:02:d7:d1:ff:a5:51:b8:8a:a0:b4:b1:92:29:
8e:d6:1e:fe:83:de:29:03:36:8c:8c:82:c6:e7:33:
24:30:b7:e2:00:c0:75:fc:c4:59:cb:0d:87:ba:75:
1c:87:fb:0a:72:fb:b2:92:d8:28:e4:b8:e3:dd:bb:
17:ee:10:18:0b:fb:63:f1:66:0c:7f:39:3f:d8:0f:
51:38:ee:36:bd:a6:e7:cf:77:a9:e0:94:f7:fc:88:
31:ea:19:9a:3a:f8:39:2f:ba:96:9d:ae:76:48:b6:
90:b0:0e:0e:5c:f6:72:5c:88:b1:19:68:47:f9:ed:
8f:0f:04:0b:3b:57:56:d9:97:8c:da:80:81:75:a6:
ad:1f:59:a2:f4:59:7e:be:1a:fa:4f:b9:45:11:88:
42:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:18:06:3F:A4:82:28:08:E1:7C:BC:1A:60:28:B7:39:0A:72:F8:99
X509v3 Authority Key Identifier:
keyid:3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e9:05:b2:7e:1f:0f:39:28:92:3b:08:52:67:b8:43:6f:dd:
2a:d7:c8:00:02:76:79:e0:b0:ba:d5:fd:09:84:a0:68:3e:57:
a0:fa:68:42:52:4e:c4:4f:df:0f:46:f9:d1:ae:0c:ab:5e:73:
9c:30:57:ef:2e:aa:f3:36:ce:21:2f:d6:cc:36:13:c2:e7:a7:
87:14:af:c5:03:64:ab:41:1e:db:d5:8d:e6:e3:17:f9:35:8a:
c7:32:e9:c1:62:13:cb:34:ff:13:b1:99:95:99:99:01:4e:b0:
8b:bf:a4:72:92:25:9d:f8:0f:95:2f:0e:6f:f6:ca:63:30:c3:
86:8a:c4:9b:55:32:c3:8a:ed:5c:14:8d:dd:d1:db:97:c4:b6:
a2:96:ee:ba:d9:d6:8d:05:e5:0e:7c:25:74:24:7a:ff:ee:c1:
d9:41:b0:39:60:b0:8a:18:d6:eb:14:11:6f:64:cc:7d:98:e7:
50:b3:69:cc:b8:10:6c:6c:35:f6:04:95:79:d4:71:44:b5:fd:
c0:7c:16:81:8a:8a:16:d1:29:39:ae:3f:88:7b:9d:46:22:97:
52:2e:6e:07:38:07:40:23:36:08:70:0c:13:9c:0f:3c:82:53:
91:40:04:3c:65:96:0b:6c:d2:67:33:d1:3b:08:ca:7d:56:39:
69:15:51:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:38 2026 by rpki-client