Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
File: om1GISmD2nHzGuV-WcOeCbM5ygI.mft (raw, json)
Hash identifier: CXEJK4PPmRmclLT1RutEHMc0Ac69+l+v7K/PZTwqfpA=
Subject key identifier: 85:BD:DC:20:AA:C1:32:EF:DB:13:CF:E7:6C:56:BB:4A:85:53:B9:86
Authority key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
Certificate issuer: /CN=a26d46212983da71f31ae57e59c39e09b339ca02
Certificate serial: 019CAF47FD4292FEDA25D8E9E047527E43B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
Manifest number: 0F14
Signing time: Mon 02 Mar 2026 16:00:56 +0000
Manifest this update: Mon 02 Mar 2026 16:00:56 +0000
Manifest next update: Tue 03 Mar 2026 16:00:56 +0000
Files and hashes: 1: 48VETktm8u5cwxfi5tzhrXCS1PA.roa (hash: pocJNPkIQ+wfrZHo23pdtb1YIKYD79x6IBlh2144Vzk=)
2: om1GISmD2nHzGuV-WcOeCbM5ygI.crl (hash: z3z+psKMRLsjAfiTFSWBuGZesb6b2CCsOGHPii5O1l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:47:fd:42:92:fe:da:25:d8:e9:e0:47:52:7e:43:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26d46212983da71f31ae57e59c39e09b339ca02
Validity
Not Before: Mar 2 16:00:56 2026 GMT
Not After : Mar 3 16:00:56 2026 GMT
Subject: CN=85bddc20aac132efdb13cfe76c56bb4a8553b986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:2a:35:74:ea:c4:c1:71:a5:b8:e3:6a:49:
82:95:e6:db:7b:97:d6:4e:b9:9b:c5:4b:12:8a:0b:
d2:6f:cb:7c:a5:44:f6:5a:52:89:c5:cf:ee:ae:55:
7f:af:b1:e3:c6:a4:ea:2e:e1:07:82:00:ab:98:0a:
c3:70:49:c0:48:e0:04:77:db:1a:05:aa:22:07:8d:
ba:48:55:4f:84:42:64:c4:a6:56:b5:4c:ac:9b:65:
41:4e:58:75:e6:51:f8:a6:d9:f0:ee:ec:f0:ec:07:
f2:45:c0:c4:e3:32:2f:aa:a0:07:58:6b:5a:1c:57:
f4:88:df:43:f0:69:d8:59:a2:38:69:42:42:65:3a:
3d:50:28:3c:a3:92:46:9b:42:29:4b:6f:96:ff:bf:
66:d0:f8:27:00:b5:c6:3e:32:07:8b:20:4d:84:53:
1c:b6:71:96:b6:67:81:5f:81:61:56:d1:5f:1e:d8:
b2:3c:33:48:c9:a1:41:7f:05:bf:c7:92:6d:46:ce:
06:de:39:2a:71:f2:ad:2b:d5:bc:59:8d:6f:69:28:
4b:52:7d:1f:d8:8b:e5:fa:a7:7b:b5:3e:ce:e0:33:
6d:6a:b3:63:0a:28:55:81:dc:78:ad:ef:94:ec:44:
30:a2:d2:cc:3a:b1:ae:07:17:b0:01:45:6d:11:06:
a1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BD:DC:20:AA:C1:32:EF:DB:13:CF:E7:6C:56:BB:4A:85:53:B9:86
X509v3 Authority Key Identifier:
keyid:A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f3:8d:7f:f1:43:8a:c6:73:d7:ac:cb:4b:66:8b:e4:e5:28:
f6:3c:3b:ac:d5:fb:7d:10:64:dc:cb:e7:c8:bf:19:9c:bd:23:
69:d4:0c:24:8b:54:89:b9:c2:8e:2a:67:64:b7:10:6a:15:75:
a7:4b:f5:0b:09:76:24:32:d6:1a:f7:a2:ca:08:b0:07:fc:33:
ed:23:db:39:9e:7d:9a:27:86:d0:d1:68:8c:a1:f1:a6:e5:d5:
9f:ba:3c:00:38:aa:e4:86:ca:ef:04:09:5a:d5:6c:c6:4d:da:
04:fe:e4:69:f5:10:2f:cf:89:45:a6:97:df:9e:07:11:4d:7b:
2b:e6:cc:e1:0e:6b:de:2f:ce:34:42:09:97:c5:fa:ea:3f:f2:
c0:8b:4b:b8:7b:b9:3a:e3:58:59:a1:c1:e2:b6:1b:c6:08:64:
c5:36:5c:3c:e4:0e:ca:60:87:e8:3d:17:e0:f4:f5:31:dd:88:
45:38:f5:c8:75:05:dd:ad:29:2d:f5:0d:00:44:80:05:ce:a6:
0f:e3:41:53:e6:b9:14:9f:38:e7:d5:e8:16:2a:89:e6:0d:ac:
90:e4:dd:91:a7:91:58:cd:b6:ea:15:d9:cf:53:3d:85:f8:b3:
b1:cf:71:09:32:40:d3:55:d1:ba:0a:6b:d3:5b:fa:d8:1d:69:
df:23:2b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:38 2026 by rpki-client