Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
File: om-n7jCto1qx_ATzQP7fZHqfgWI.mft (raw, json)
Hash identifier: O5erhMiWGmmWcbsH8hvlxe+97zSUWMP9CMv5ZwVGX5U=
Subject key identifier: 52:A0:85:1F:49:32:FF:15:9D:51:C7:B4:59:F7:2A:8A:64:22:BD:2D
Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
Certificate issuer: /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Certificate serial: 019FAB2CA914C1E9B01BEEE739465623BF98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
Manifest number: 1967
Signing time: Wed 29 Jul 2026 00:00:58 +0000
Manifest this update: Wed 29 Jul 2026 00:00:58 +0000
Manifest next update: Thu 30 Jul 2026 00:00:58 +0000
Files and hashes: 1: nlwPCqdx2lOTVgz8lZL0i1VNbYM.roa (hash: 2DCxPDKTN3hjXlK5stoi0CcHybhnZoUg5yfutSyUspU=)
2: om-n7jCto1qx_ATzQP7fZHqfgWI.crl (hash: AEF4bQP1LPehsYosqk/SpAdtbJ7y9YuQtAsCT7p8Ef8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:a9:14:c1:e9:b0:1b:ee:e7:39:46:56:23:bf:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Validity
Not Before: Jul 29 00:00:58 2026 GMT
Not After : Jul 30 00:00:58 2026 GMT
Subject: CN=52a0851f4932ff159d51c7b459f72a8a6422bd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0a:3e:d6:e3:a5:c7:44:65:cc:8d:b6:a9:d6:
18:c9:44:6b:f8:d4:a6:3f:22:64:10:86:b6:bf:3d:
07:90:58:a4:97:b6:77:e4:ba:13:88:fb:8b:0b:c4:
75:da:7f:37:1d:3e:d4:14:3c:17:8d:2d:c1:22:4e:
f0:41:04:96:35:43:cd:aa:54:e2:31:30:d1:c6:f5:
21:b6:5c:ff:52:d5:84:6e:c8:64:8e:20:3b:f5:36:
22:8e:56:0e:89:52:88:b6:08:f1:95:9b:d7:e6:19:
e9:88:fd:14:5c:7a:c7:08:10:1a:ef:b9:ca:d5:0b:
d2:ec:84:6e:1e:fe:ce:82:84:c1:11:89:20:2b:1c:
5a:15:28:33:ce:9e:89:2b:80:bc:09:62:a2:c3:64:
88:74:0d:08:d5:4f:c3:c5:63:ee:ef:24:a3:87:03:
09:7f:11:38:a6:95:e1:27:85:b9:01:3d:cd:98:ef:
85:c9:7c:4c:11:46:52:8a:8d:22:40:90:17:b6:a1:
da:91:2d:ae:32:b7:11:42:58:27:85:a3:c6:6a:8e:
01:14:f9:47:96:2f:f4:0d:19:37:3b:92:28:a2:4d:
d6:c5:5b:c2:4a:ee:c1:3f:38:a7:ac:5c:2f:f3:e7:
c0:bf:ef:23:b9:6e:ed:1b:95:a5:34:0a:89:01:b4:
7a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A0:85:1F:49:32:FF:15:9D:51:C7:B4:59:F7:2A:8A:64:22:BD:2D
X509v3 Authority Key Identifier:
keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ba:1d:ec:d1:d3:d3:b7:01:1a:f7:60:d7:ba:74:75:1e:72:
e3:70:c3:f2:74:ea:cb:85:9c:ff:10:58:41:13:05:0e:73:17:
81:38:19:2f:22:a7:14:5c:23:84:39:b7:3f:91:96:03:2e:1d:
71:f6:40:c7:08:56:3a:ab:f1:de:28:25:0d:1d:63:db:0d:37:
39:8e:8c:bb:29:38:f8:04:2d:4d:85:89:d1:a2:76:0b:84:cc:
1a:78:23:87:48:d3:44:ca:60:22:16:64:73:be:91:35:e4:c7:
0d:cf:ca:a7:b4:ef:c6:24:76:64:f7:d7:00:49:32:b2:99:65:
f5:ff:f4:bc:f2:d7:62:bd:4e:41:85:2d:99:70:31:1b:b1:34:
68:2c:23:1d:8b:40:17:5a:4b:70:3c:50:1b:b7:57:9c:3d:4f:
e6:38:32:42:ff:02:b6:f5:a1:1b:12:77:cc:e4:b3:3d:80:3f:
35:33:bf:db:e7:a1:51:95:eb:d5:04:eb:07:eb:64:5d:d1:86:
5d:30:ea:de:6f:c0:08:43:88:c1:8b:d2:9f:80:60:37:83:5f:
b0:b1:45:2d:ef:92:9f:d9:0e:a7:0b:ab:d1:f2:b3:b6:af:7b:
ce:96:44:d0:a8:3d:01:14:ed:3e:a1:b5:d0:53:2d:bf:2b:ed:
c0:4f:54:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:07:57 2026 by rpki-client