Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
File: omhVmAsnPlrlfcG56yLp9fOnzfc.mft (raw, json)
Hash identifier: 6gmLcziUapd1l4zWmFd+VBoKEdI8DJa5lj++mycPSVY=
Subject key identifier: DE:CB:D9:CB:31:32:36:E8:FC:1D:BE:64:50:07:74:28:B3:7F:CA:0C
Authority key identifier: A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
Certificate issuer: /CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Certificate serial: 019D28BB2ED771A7F69722393D563645E0F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:00:48 +0000
Manifest this update: Thu 26 Mar 2026 06:00:48 +0000
Manifest next update: Fri 27 Mar 2026 06:00:48 +0000
Files and hashes: 1: bLAwkpsQ7D6caU7zIeAaY5nux8E.roa (hash: KqLO/vffpcb+/IGfGAsD+PmTdmluxkrnPOhEPWZAu6E=)
2: omhVmAsnPlrlfcG56yLp9fOnzfc.crl (hash: YlWNdsjFgchOIn4aIC7CzHY4U1eh2v+9coxlLNe8Zuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:2e:d7:71:a7:f6:97:22:39:3d:56:36:45:e0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Validity
Not Before: Mar 26 06:00:48 2026 GMT
Not After : Mar 27 06:00:48 2026 GMT
Subject: CN=decbd9cb313236e8fc1dbe6450077428b37fca0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b4:06:cc:6a:6f:82:d5:4b:51:67:3a:6b:c3:
ac:4d:01:2c:d1:a2:ad:1e:84:2d:8d:bc:a3:12:0d:
4c:1b:dd:fb:a2:c5:29:08:f5:63:f1:f8:ad:11:a5:
e4:cb:0c:1c:c8:aa:ec:3f:ec:b9:f0:bd:32:bf:1a:
3c:8c:67:b0:19:bb:7f:92:f9:c8:5c:29:6c:a7:77:
5b:fa:df:4c:77:91:b6:26:a9:65:88:ed:f8:02:ae:
97:79:9f:14:71:d2:03:ef:28:53:05:aa:d7:3c:13:
c9:18:95:a8:6a:c5:23:ee:99:96:23:5e:3d:d7:93:
1e:fd:a0:0f:4c:89:b0:81:09:6f:da:ba:4a:92:32:
76:b7:7a:05:43:14:9f:d0:fa:43:03:c6:ed:72:ae:
bd:65:82:35:02:12:db:0f:76:04:29:08:6c:bc:6b:
46:72:57:10:c5:e9:be:6d:da:80:9c:3c:e6:4a:83:
05:9d:d1:dc:93:b4:d8:9b:0c:5e:6e:d3:17:aa:a3:
0a:0d:f2:81:87:66:36:72:b2:b9:3e:cd:4f:29:ac:
e9:4d:ad:7b:c2:86:31:db:c0:6e:44:db:80:76:c8:
b4:1d:7b:9d:23:bc:9f:b3:43:bb:8b:7f:4c:d8:c6:
d9:43:ed:f5:53:29:5a:68:0f:f0:a0:61:2f:f3:a5:
d2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CB:D9:CB:31:32:36:E8:FC:1D:BE:64:50:07:74:28:B3:7F:CA:0C
X509v3 Authority Key Identifier:
keyid:A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c8:65:17:65:f5:0d:1b:f5:87:53:fb:a7:8b:0b:48:07:36:
36:fb:87:c8:5c:4f:c0:1a:a7:81:7e:1b:62:75:ec:e0:66:6c:
70:ff:c6:ea:6b:73:1f:fa:3b:9e:c0:10:ca:d4:73:7c:56:cc:
44:84:7b:e0:3d:a9:26:e9:68:39:20:9a:8d:65:ea:63:df:07:
8f:ec:10:0c:d0:7e:01:5c:4d:8c:81:a4:de:3e:72:68:23:f7:
e6:5f:99:d5:31:e0:26:a7:07:a8:34:cf:f5:89:b7:ac:f1:a0:
a3:93:ce:ea:2b:be:a6:4f:4e:ac:79:44:fe:b6:69:7c:b6:b0:
19:84:43:2d:00:34:41:d0:3b:69:c1:7b:38:e0:05:45:9c:3c:
55:ab:43:18:b0:22:1c:0a:da:0e:e1:cf:e0:bc:3f:e2:45:ec:
0e:d1:ee:2f:a2:f1:00:a0:73:31:05:ef:39:95:05:a2:56:4e:
07:51:c1:d9:bc:46:c9:e0:3e:ac:6b:55:76:53:6b:97:0b:18:
a4:17:f8:87:47:10:2f:40:a9:0d:80:5f:9f:57:d3:b2:31:e1:
7b:b8:f9:a4:69:cd:ff:e4:f7:bd:69:af:a1:28:33:53:2e:01:
00:52:59:34:d0:a1:2e:22:5f:66:f9:60:58:71:40:d3:3a:0c:
6a:90:b9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:34 2026 by rpki-client