
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
File: omhVmAsnPlrlfcG56yLp9fOnzfc.mft (raw, json)
Hash identifier: hS0MGfi+sZ3WHUvYbqsHc4Loz88xWR8vyw4Bb+zwU+M=
Subject key identifier: 61:82:37:06:D3:BD:BE:0E:52:02:36:07:D4:34:FE:D2:BE:F0:EF:25
Authority key identifier: A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
Certificate issuer: /CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Certificate serial: 019F9091759FD78AA1BE66022DDCCEDDD5F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 20:01:19 +0000
Manifest this update: Thu 23 Jul 2026 20:01:19 +0000
Manifest next update: Fri 24 Jul 2026 20:01:19 +0000
Files and hashes: 1: DHTVOspVelmD6hKbvHHdFSxrQgA.roa (hash: A7Oq6WR9f6YTO2BNgRao+GzDKScqL9wSwbqMrDuqnLc=)
2: omhVmAsnPlrlfcG56yLp9fOnzfc.crl (hash: MjjaFzp3mekVpbjHRSiDeCLrNqiXQr73Za9qk3qlMIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:75:9f:d7:8a:a1:be:66:02:2d:dc:ce:dd:d5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Validity
Not Before: Jul 23 20:01:19 2026 GMT
Not After : Jul 24 20:01:19 2026 GMT
Subject: CN=61823706d3bdbe0e52023607d434fed2bef0ef25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0e:43:34:ce:97:6f:69:12:6d:70:10:f9:f6:
e0:9b:aa:e4:eb:04:36:87:5a:46:78:7b:79:53:22:
6a:83:fe:95:de:95:16:5f:76:89:bf:3b:9b:1c:51:
d6:ed:df:74:91:25:e6:5e:75:29:50:cd:a4:8b:d7:
7d:f9:58:61:40:08:54:1a:f4:b5:39:41:56:68:da:
86:f9:df:07:05:e6:8c:28:b9:66:f7:fa:c5:af:fd:
db:b5:b4:1d:3b:4b:46:c2:c8:03:b6:73:24:f3:ff:
89:b6:c0:82:23:68:5b:05:26:3a:4e:24:dd:06:24:
76:5b:6d:7c:18:89:66:08:dd:b8:f5:1b:e2:31:3a:
4f:68:f5:46:13:22:91:50:65:8c:80:61:75:2b:05:
fa:53:6f:cf:13:d3:34:cc:04:f3:e4:dc:b4:a9:f4:
54:2c:b0:73:12:d5:4e:d6:a2:a5:4c:b2:de:1e:5a:
a4:42:58:7d:e9:08:71:3e:00:5f:2b:8f:e6:f9:8c:
25:fe:ce:94:08:1d:bf:f5:76:cf:a4:c9:bb:94:3f:
8d:6f:2f:ce:3f:de:77:f0:3b:1a:62:71:88:d9:06:
e3:ee:33:9d:7a:b1:24:e4:48:17:36:9e:94:7e:6e:
33:c4:b7:10:ed:54:7c:b0:a0:a3:61:2a:d6:77:9c:
68:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:82:37:06:D3:BD:BE:0E:52:02:36:07:D4:34:FE:D2:BE:F0:EF:25
X509v3 Authority Key Identifier:
keyid:A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:13:2d:87:5e:01:8a:74:fc:8f:36:5e:f6:76:01:d3:3c:ff:
db:6e:3a:aa:66:13:b9:f3:6c:51:b2:d1:92:f9:4f:11:e4:f7:
b6:72:75:39:54:cf:1b:42:5f:f4:77:09:5a:12:d3:52:d8:00:
13:40:5b:d0:85:2c:79:9a:90:71:8f:6f:5f:c5:0f:cb:f8:29:
ea:1d:0c:47:c3:9e:00:7b:d6:22:6d:03:ed:07:82:b8:8d:93:
a1:47:68:71:2b:c5:3d:ba:a9:35:7d:9d:df:d1:f5:14:3a:5a:
c7:3f:ed:4c:76:0b:7a:49:f4:27:8b:2a:27:ce:c0:22:63:4c:
f6:a2:98:8a:88:04:f4:31:1d:23:cd:0f:5b:e5:f8:5d:6e:b1:
01:47:fb:b8:68:45:08:ff:8c:96:5e:06:12:b5:bc:bd:ac:1d:
1c:8a:bc:26:64:64:c7:22:4e:b4:2e:3b:9e:d0:ed:d1:b2:9b:
80:fc:52:6b:07:e4:e7:ca:89:3c:be:cc:48:3f:0c:ce:51:44:
61:7f:05:ca:88:4d:ca:29:e0:aa:ef:25:01:fc:d7:2d:c7:7a:
54:81:00:ce:16:77:6d:27:a8:68:a0:f2:39:13:93:63:0a:07:
0b:42:c4:26:28:59:4f:8b:2e:7b:59:ee:f4:65:af:dc:81:91:
de:17:93:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:09:41 2026 by rpki-client