Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
File: OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft (raw, json)
Hash identifier: LdOje1P3lauW4XtnWIQffAfCDoUbRi/0oeb0twn0THI=
Subject key identifier: 25:ED:C4:A1:62:70:3D:1F:81:4D:0D:3C:73:36:E2:3C:F4:7A:53:2E
Authority key identifier: 3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C
Certificate issuer: /CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c
Certificate serial: 019D281715892F7E903488C448CA429E5A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 03:01:34 +0000
Manifest this update: Thu 26 Mar 2026 03:01:34 +0000
Manifest next update: Fri 27 Mar 2026 03:01:34 +0000
Files and hashes: 1: OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl (hash: ioc58sMVfnNyd6l/qL6x1LmjzxTrVwpEH3PjrmdWn3U=)
2: g6LflxVUqJ6UcpGu8wQciw7t30I.roa (hash: jf55mddW2DvJtTkk+2SE+AEw8KLhuZMEYNNyLaLfpSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:15:89:2f:7e:90:34:88:c4:48:ca:42:9e:5a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c
Validity
Not Before: Mar 26 03:01:34 2026 GMT
Not After : Mar 27 03:01:34 2026 GMT
Subject: CN=25edc4a162703d1f814d0d3c7336e23cf47a532e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:32:fe:78:8f:12:ca:fa:0b:55:00:ec:0f:7a:
96:42:f0:c0:b3:1a:f6:3a:df:ee:41:61:e3:b2:fa:
0a:e1:cc:9f:32:04:4e:37:ab:e4:a2:1b:85:5f:69:
86:14:05:07:22:66:f6:c1:bc:1a:d2:e0:f4:ed:e6:
8a:f6:a0:9e:93:d0:a6:1a:54:23:62:09:64:fb:40:
52:7a:ab:6b:2e:d4:79:26:d5:81:98:d4:91:63:11:
3b:78:86:07:74:29:d2:0a:40:29:0c:f4:91:28:1d:
01:9d:bd:19:ff:94:c2:5b:41:e6:09:c7:f7:5b:fd:
c2:5f:ba:04:26:78:84:6a:54:69:b4:e0:f3:1a:10:
8b:f0:67:67:d5:12:61:66:f2:0c:e2:b9:ef:74:55:
c2:73:5c:06:d8:17:6a:bd:dc:5e:e8:40:fa:63:3d:
70:4b:35:3a:b9:72:22:f5:39:c2:1f:08:e9:79:d5:
a9:59:d0:b6:ce:b8:d1:09:25:8e:3e:32:54:74:ee:
f9:48:79:a5:b9:9d:15:35:06:56:41:4e:6d:86:4d:
1b:d5:0f:8a:df:b8:d5:45:77:5a:e1:38:7e:bc:42:
e3:8b:be:70:1c:91:fb:9d:61:a2:9a:fe:6c:a4:6d:
35:14:26:e5:1a:cc:a7:f1:2c:5a:68:be:f0:f5:ba:
82:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:ED:C4:A1:62:70:3D:1F:81:4D:0D:3C:73:36:E2:3C:F4:7A:53:2E
X509v3 Authority Key Identifier:
keyid:3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e9:b4:ed:25:45:1a:44:a7:e3:4a:ce:8f:6f:b2:7a:5d:d5:
34:e6:ad:a5:a0:84:e6:5c:3e:b1:ef:b9:1b:43:76:3d:56:74:
45:02:65:96:7e:f9:b1:be:42:93:95:80:55:53:73:12:b3:d3:
09:37:5d:5e:24:16:99:3c:f8:28:b4:21:82:ff:08:20:09:94:
52:00:45:e0:62:2b:0f:52:ff:3a:4a:16:b4:f4:d1:45:b9:38:
53:1f:93:50:bf:ee:87:ed:d3:af:7b:53:1e:49:db:d9:00:ef:
59:f5:b9:d4:6c:af:9a:64:ce:7b:de:31:af:3c:f7:f3:19:fb:
05:72:2f:44:ee:91:03:81:95:37:04:d0:21:f4:d7:17:a5:7e:
d8:18:f0:d4:3d:3f:69:4e:9d:06:46:04:5e:1b:0b:e3:6d:b5:
37:e0:69:80:6a:12:69:2b:cb:f8:b3:7a:5a:d7:e9:63:ea:b0:
32:92:ec:9d:32:6c:fe:65:40:bf:82:67:ce:02:e3:bb:55:ba:
49:0b:20:9e:a8:4a:f0:43:48:29:d9:bc:00:a1:2b:82:3f:eb:
ad:5c:d3:e3:81:9b:4f:bd:4f:8e:35:3d:7d:12:79:05:7d:c9:
c8:e9:51:c2:a5:b9:98:45:5a:8b:89:be:56:ca:b9:9e:33:40:
b8:ff:77:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:12 2026 by rpki-client