Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
File: OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft (raw, json)
Hash identifier: 61Ks71XwuYDfjDKdTT/5wRShONgrlvkm1hWXqSxTBO4=
Subject key identifier: 4A:44:E9:2E:00:39:B3:E5:F8:31:B6:66:9F:C3:A8:9D:FB:0E:86:66
Authority key identifier: 3A:64:AC:3C:23:EE:4A:BE:E3:06:C9:9D:67:80:B1:3F:5C:B6:5C:DA
Certificate issuer: /CN=3a64ac3c23ee4abee306c99d6780b13f5cb65cda
Certificate serial: 01A0D382CA397F4018285891D661782A9B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
Manifest number: 0155
Signing time: Thu 24 Sep 2026 13:02:38 +0000
Manifest this update: Thu 24 Sep 2026 13:02:38 +0000
Manifest next update: Fri 25 Sep 2026 13:02:38 +0000
Files and hashes: 1: OmSsPCPuSr7jBsmdZ4CxP1y2XNo.crl (hash: Q0OVotSaWR4rCIf86hdkQ8eoNgmXdZguS20p59rfR4w=)
2: gkTf7nQTsreRRFr_69F3-1CTYmo.asa (hash: 6ZWz3HOG4yY5iF+Cf+k2WgBB6OwjzBCJK4BD/nVdTag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:82:ca:39:7f:40:18:28:58:91:d6:61:78:2a:9b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a64ac3c23ee4abee306c99d6780b13f5cb65cda
Validity
Not Before: Sep 24 13:02:38 2026 GMT
Not After : Sep 25 13:02:38 2026 GMT
Subject: CN=4a44e92e0039b3e5f831b6669fc3a89dfb0e8666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:6d:60:fb:4a:7b:ed:bd:21:dc:dc:8d:1d:
5b:63:8e:98:1a:63:5a:dd:79:28:a8:d0:d9:0b:d9:
91:a4:13:03:1c:36:46:eb:eb:2b:70:f6:02:34:99:
54:8e:91:d6:17:af:ba:f5:41:bd:18:99:65:c8:0b:
cc:77:1c:1b:83:00:26:f5:f1:2c:bc:ab:c9:69:dd:
00:bc:17:11:39:cc:03:20:d0:60:d3:93:bf:6e:10:
e8:ba:54:ce:cb:d8:3f:b8:15:f0:d9:ac:fd:ad:db:
1e:ae:a9:06:6f:31:b8:83:71:f4:f6:ae:01:ef:db:
4c:7d:9d:e8:fb:e2:11:df:b1:08:05:29:73:ad:a3:
00:c0:33:fa:56:1f:b0:12:b6:9c:50:3d:e8:2c:b5:
30:06:ec:e1:b3:f4:29:fb:e0:d3:4b:83:27:93:ce:
98:f5:62:19:6c:92:12:32:c7:66:b4:67:52:df:84:
8a:89:f1:dd:36:f4:14:b4:2b:3c:d4:af:6d:74:3b:
22:e6:20:5d:01:5f:3e:d7:93:ab:d3:7c:a4:80:4b:
3c:96:e4:43:2c:4b:3e:29:5f:59:ea:2f:23:ac:8a:
87:ba:43:42:3a:a7:21:6b:4c:f7:8d:94:aa:03:b7:
74:7a:c0:6d:65:e9:5e:de:a0:65:a3:10:b2:fc:81:
ca:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:44:E9:2E:00:39:B3:E5:F8:31:B6:66:9F:C3:A8:9D:FB:0E:86:66
X509v3 Authority Key Identifier:
keyid:3A:64:AC:3C:23:EE:4A:BE:E3:06:C9:9D:67:80:B1:3F:5C:B6:5C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:04:50:6e:ef:3b:fa:a3:1e:32:3b:86:51:5a:7f:12:55:77:
36:31:08:91:5b:41:56:01:27:e4:1b:55:23:58:d8:27:68:53:
85:dd:78:9a:ec:a1:a1:d3:78:ba:82:0e:95:04:81:b5:95:30:
76:b3:a3:2d:88:93:f1:4f:b0:4a:60:11:08:9d:c8:6a:85:49:
04:9f:5d:52:5f:51:e3:fe:e9:f7:2f:aa:3e:61:21:07:50:a7:
a6:00:19:c3:b1:ac:8d:a1:0d:ac:ad:39:73:f4:c1:f2:95:f0:
4e:be:53:55:37:2d:a0:b4:e8:56:8a:ca:a7:30:dd:90:5b:df:
be:fa:08:00:80:eb:ee:4a:13:69:bb:40:22:7b:5e:10:47:d5:
c1:bd:ae:ba:03:d9:a0:ac:62:f1:a3:88:30:c3:6a:fd:86:e5:
59:95:76:2d:94:37:c5:2b:13:e8:e6:fb:53:45:63:f3:e7:82:
14:d0:2f:9c:25:27:c2:a6:34:c8:7f:d1:fe:b2:9e:a7:df:c2:
c4:25:b2:3f:7d:03:c6:6d:8d:92:29:f6:ac:2a:b7:25:1e:b0:
b6:82:61:f8:b1:f2:a1:8b:e9:5d:2e:11:1c:95:fc:3e:91:16:
72:e6:9a:5c:f9:17:79:7b:ad:2f:73:e2:66:83:5b:35:db:02:
71:06:fa:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:54:19 2026 by rpki-client