Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
File: oMWM0HH3gLesNAwBROsE-1DMu_E.mft (raw, json)
Hash identifier: ezuvmlxGbxxkokE4bLP5PQFYbqWYMkjJCvodwpiw2Js=
Subject key identifier: 25:58:07:91:D7:D9:83:CB:48:F5:2C:53:0B:9D:AD:15:C4:D0:A4:34
Authority key identifier: A0:C5:8C:D0:71:F7:80:B7:AC:34:0C:01:44:EB:04:FB:50:CC:BB:F1
Certificate issuer: /CN=a0c58cd071f780b7ac340c0144eb04fb50ccbbf1
Certificate serial: 01A1193DDCF0C4039A8D2C2B2DC1F5C41E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
Manifest number: 1A82
Signing time: Thu 08 Oct 2026 02:00:46 +0000
Manifest this update: Thu 08 Oct 2026 02:00:46 +0000
Manifest next update: Fri 09 Oct 2026 02:00:46 +0000
Files and hashes: 1: ZbTeBAO3QTTIszF0pdw52UodjGY.roa (hash: Zcq4v6bJvVoVndPkmRTnPcyoC19uifQNUAxqTObWOg4=)
2: oMWM0HH3gLesNAwBROsE-1DMu_E.crl (hash: DWEPpjDe89R0xpO/7kHFUOHoTxDh/ec2EJp1SNReIMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:3d:dc:f0:c4:03:9a:8d:2c:2b:2d:c1:f5:c4:1e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0c58cd071f780b7ac340c0144eb04fb50ccbbf1
Validity
Not Before: Oct 8 02:00:46 2026 GMT
Not After : Oct 9 02:00:46 2026 GMT
Subject: CN=25580791d7d983cb48f52c530b9dad15c4d0a434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:3a:63:ed:bf:61:44:0f:40:b7:f3:65:71:
4c:52:2a:a4:1e:48:f3:a8:ed:3c:32:9e:be:aa:ef:
b1:5e:2b:55:78:79:97:77:1d:3a:f4:ac:e2:9c:c1:
c5:70:f7:84:21:62:57:91:d6:ea:3c:8e:4f:a2:e0:
ea:38:df:6c:f8:71:56:8b:2e:79:a5:42:80:84:02:
b3:81:40:b2:2d:37:1a:33:2b:e2:ee:2f:f8:e1:21:
34:d2:d3:29:ff:f9:3a:8a:70:da:b7:63:8a:f9:82:
61:f1:df:a7:0f:a6:63:3f:22:00:5f:bc:92:ae:f3:
4e:ed:47:32:96:ca:e4:1a:9f:8b:a9:0a:f4:2b:be:
f4:ba:10:43:b2:72:24:14:23:d8:4c:08:0c:0c:bf:
a3:f8:29:65:5e:a3:de:64:a2:51:58:90:38:d7:05:
e4:ae:9a:e3:2e:56:a5:0d:f8:02:ce:16:47:43:69:
34:3f:16:8a:2f:e9:66:82:23:83:1d:c4:c6:36:f7:
7b:2e:6c:89:20:66:9e:94:a7:1e:10:27:6f:72:e9:
ef:99:54:44:6e:5c:f8:2e:73:42:c3:91:57:7f:ec:
1e:37:e6:89:f1:85:00:5d:9f:89:72:b9:cd:c2:63:
1f:6f:9d:21:c3:2d:1e:ae:a5:a0:3a:03:a6:f2:ba:
72:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:58:07:91:D7:D9:83:CB:48:F5:2C:53:0B:9D:AD:15:C4:D0:A4:34
X509v3 Authority Key Identifier:
keyid:A0:C5:8C:D0:71:F7:80:B7:AC:34:0C:01:44:EB:04:FB:50:CC:BB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:93:4e:a9:46:c4:a1:c3:3f:c1:6c:9b:34:a6:3c:75:25:a7:
73:45:88:77:d7:85:bb:41:3d:50:ae:de:b1:96:59:0b:b0:7f:
3f:14:3e:44:ba:61:7e:8d:08:5d:3b:3b:52:56:80:7d:e7:74:
7d:16:5a:bf:16:e8:56:bc:11:64:c2:2f:8b:fe:05:f0:02:d1:
e7:bb:b9:11:0f:96:82:ae:3b:ef:e1:04:da:0f:f4:33:1d:ed:
14:24:6e:6b:20:74:2c:22:c6:21:31:8c:c8:f3:b5:fd:f5:0f:
86:0a:02:65:6a:0c:f8:b5:29:70:a4:26:07:fa:b5:34:28:eb:
bf:84:98:35:82:13:76:d7:e4:0e:c8:c4:57:7c:f7:1c:b2:9e:
b4:70:90:8a:37:c0:10:64:99:dd:86:e3:b1:33:89:cb:c3:0d:
db:7e:b8:bc:7b:d5:c6:67:e1:d2:85:28:f6:a9:bc:11:a0:92:
2c:85:1a:c4:e4:a3:67:b6:a4:de:49:17:23:39:46:df:e9:83:
a5:b4:d9:28:14:08:6d:9e:68:de:cd:7d:0b:71:f2:33:1f:39:
43:99:4c:8a:cc:47:f8:62:73:4e:93:c2:68:21:a4:ba:23:b7:
e4:b4:4b:e6:90:38:71:a7:66:fa:5a:7a:d0:8d:85:d6:d4:eb:
44:f5:b5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:24:30 2026 by rpki-client