Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
File: Omhc-Ip_xD_hx_40pv8927QU8LU.mft (raw, json)
Hash identifier: TGmkRVnfIJ3WeSKMTen9TmyeVRSzJD5X3GMCc+u5R2U=
Subject key identifier: 51:2D:47:EA:B7:77:33:95:5B:42:6C:AB:CE:54:01:ED:16:D2:02:19
Authority key identifier: 3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
Certificate issuer: /CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Certificate serial: 019D288481811AA91200B63E044C9A9972B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
Manifest number: 17CC
Signing time: Thu 26 Mar 2026 05:01:05 +0000
Manifest this update: Thu 26 Mar 2026 05:01:05 +0000
Manifest next update: Fri 27 Mar 2026 05:01:05 +0000
Files and hashes: 1: 4CWfekzf4x-HS1fJIidism45k8I.roa (hash: BHdLLhr5F9G9d810caL7Kieqc8ckL+IwjTONjFXfuYQ=)
2: AleCDdJblQdVI-S091EQULB75VY.roa (hash: eSD+DKApi4DxBKaxewRCjm2s463W9mcSqjdhdutCm0w=)
3: Omhc-Ip_xD_hx_40pv8927QU8LU.crl (hash: 0I88l3OU9fH60MifQ+dtT0XNIwX7760fKI1DsjqBlu0=)
4: Sl9bNPBsXlBI0DeUAp-mjVlbQuQ.roa (hash: OCH6KKa8NHD+YpgJ2LuApSob95p9PeDsu1ZA6J3sKlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:81:81:1a:a9:12:00:b6:3e:04:4c:9a:99:72:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Validity
Not Before: Mar 26 05:01:05 2026 GMT
Not After : Mar 27 05:01:05 2026 GMT
Subject: CN=512d47eab77733955b426cabce5401ed16d20219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:67:d4:e6:1d:7a:82:75:1f:4e:00:28:50:9a:
1f:e3:44:6a:32:50:60:8c:80:05:fb:fd:35:df:89:
00:62:0b:21:98:30:b2:77:44:bb:fb:39:4a:68:e3:
c6:67:16:82:22:12:06:5d:26:c1:47:5a:c1:75:36:
19:a4:c8:4b:59:5d:90:0a:4b:6c:d4:ce:1e:0a:3c:
25:17:25:f8:d9:c9:ac:4b:03:50:ed:52:df:8c:40:
b9:ca:4d:dc:63:57:62:a3:82:ca:c3:3b:44:2b:d4:
8c:23:83:eb:90:73:7b:b4:e2:b8:4d:c2:8b:38:d0:
95:f7:3f:23:a7:05:02:d3:3b:95:74:f2:bd:5d:65:
c9:92:4d:a0:10:bd:b5:6c:f8:fe:64:73:7f:94:aa:
0d:70:f3:75:e5:d1:b9:6a:d4:bd:8b:c1:df:49:ed:
86:0c:70:40:5b:07:6b:4a:5f:8c:fa:2a:8c:4f:32:
e2:64:ad:4e:ad:1d:b2:92:3b:f1:39:5c:be:67:f0:
e2:79:42:b0:68:6f:84:d9:33:a1:25:69:43:16:72:
32:80:14:e3:97:f5:7c:be:9f:75:c2:4c:53:d8:01:
a1:5e:f0:6a:63:bb:d5:d6:c1:cd:88:b5:fd:fc:73:
62:37:7d:b7:12:f3:a5:4f:1c:d4:8b:15:31:1d:10:
27:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2D:47:EA:B7:77:33:95:5B:42:6C:AB:CE:54:01:ED:16:D2:02:19
X509v3 Authority Key Identifier:
keyid:3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:87:d0:51:1a:00:0a:12:26:99:c2:52:14:28:8c:e0:83:63:
de:ec:30:b2:fe:3f:7b:fb:9e:9e:e3:20:8f:29:16:17:67:f6:
6b:a7:cd:37:3a:1a:05:e4:95:b3:62:68:eb:d4:ef:55:f7:8f:
5c:5f:23:3d:c8:8a:0f:4e:a0:c3:eb:b0:56:0f:59:2d:52:69:
d4:1f:d9:6e:94:9a:2e:9c:39:cc:61:3b:76:f6:8a:8f:ce:db:
54:20:01:d0:c0:18:70:fe:ca:d7:ea:12:3f:9b:70:de:6e:54:
07:f7:5c:58:dc:9d:dc:70:49:3c:8e:41:b1:61:99:13:1a:63:
9e:67:3b:cb:65:56:6f:d0:e0:08:dd:d2:c4:50:8b:51:4c:5f:
68:c5:e0:a6:ed:01:5f:e8:2e:80:be:ab:a0:2a:21:11:51:d3:
65:88:1a:ac:cd:53:ef:7f:da:0c:4a:6d:4b:47:0c:38:59:2f:
e7:32:7b:d8:5e:ee:ca:57:a1:7a:49:3b:83:51:50:52:7e:d1:
ad:fb:6f:41:f6:0e:44:07:55:23:dd:7f:a1:23:05:a0:bf:d1:
42:bb:19:f4:a5:54:46:d4:11:2b:0e:13:6f:c4:76:74:76:c9:
93:94:cf:5a:53:ee:c6:4b:97:54:cb:99:8c:fe:57:0a:97:bf:
d5:d6:73:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohIGBGqkSALY+BEyamXKzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNjg1Y2Y4OGE3ZmM0M2ZlMWM3ZmUzNGE2ZmYzZGRiYjQx
NGYwYjUwHhcNMjYwMzI2MDUwMTA1WhcNMjYwMzI3MDUwMTA1WjAzMTEwLwYDVQQD
Eyg1MTJkNDdlYWI3NzczMzk1NWI0MjZjYWJjZTU0MDFlZDE2ZDIwMjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmfU5h16gnUfTgAoUJof40RqMlBg
jIAF+/0134kAYgshmDCyd0S7+zlKaOPGZxaCIhIGXSbBR1rBdTYZpMhLWV2QCkts
1M4eCjwlFyX42cmsSwNQ7VLfjEC5yk3cY1dio4LKwztEK9SMI4PrkHN7tOK4TcKL
ONCV9z8jpwUC0zuVdPK9XWXJkk2gEL21bPj+ZHN/lKoNcPN15dG5atS9i8HfSe2G
DHBAWwdrSl+M+iqMTzLiZK1OrR2ykjvxOVy+Z/DieUKwaG+E2TOhJWlDFnIygBTj
l/V8vp91wkxT2AGhXvBqY7vV1sHNiLX9/HNiN323EvOlTxzUixUxHRAnaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEtR+q3dzOVW0Jsq85UAe0W0gIZMB8GA1UdIwQY
MBaAFDpoXPiKf8Q/4cf+NKb/Pdu0FPC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT21oYy1JcF94RF9oeF80MHB2ODkyN1FVOExVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lNjVjMjctYWVmNS00ODZkLWI1ZDct
NTlkNmNhNjVjY2JjLzEvT21oYy1JcF94RF9oeF80MHB2ODkyN1FVOExVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lNjVjMjctYWVmNS00ODZkLWI1ZDctNTlkNmNhNjVjY2Jj
LzEvT21oYy1JcF94RF9oeF80MHB2ODkyN1FVOExVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIofQURoA
ChImmcJSFCiM4INj3uwwsv4/e/uenuMgjykWF2f2a6fNNzoaBeSVs2Jo69TvVfeP
XF8jPciKD06gw+uwVg9ZLVJp1B/ZbpSaLpw5zGE7dvaKj87bVCAB0MAYcP7K1+oS
P5tw3m5UB/dcWNyd3HBJPI5BsWGZExpjnmc7y2VWb9DgCN3SxFCLUUxfaMXgpu0B
X+gugL6roCohEVHTZYgarM1T73/aDEptS0cMOFkv5zJ72F7uylehekk7g1FQUn7R
rftvQfYORAdVI91/oSMFoL/RQrsZ9KVURtQRKw4Tb8R2dHbJk5TPWlPuxkuXVMuZ
jP5XCpe/1dZzXg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:05 2026 by rpki-client