Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
File: om-n7jCto1qx_ATzQP7fZHqfgWI.mft (raw, json)
Hash identifier: T1LEQu3i6q1j6Y5kpHiHXRxIFADx346k60Ei9EQ72i8=
Subject key identifier: 11:C7:46:2E:D0:61:56:C1:81:99:8A:E9:9C:5B:DB:F9:A7:B8:B9:95
Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
Certificate issuer: /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Certificate serial: 019CAA8FBBAA4E3930689ED3CB25DD673731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
Manifest number: 17D9
Signing time: Sun 01 Mar 2026 18:01:12 +0000
Manifest this update: Sun 01 Mar 2026 18:01:12 +0000
Manifest next update: Mon 02 Mar 2026 18:01:12 +0000
Files and hashes: 1: nlwPCqdx2lOTVgz8lZL0i1VNbYM.roa (hash: 2DCxPDKTN3hjXlK5stoi0CcHybhnZoUg5yfutSyUspU=)
2: om-n7jCto1qx_ATzQP7fZHqfgWI.crl (hash: 786QFDovhKb7ZzAwjaPI529pxICQDU73a1Ro9ZT5h4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:bb:aa:4e:39:30:68:9e:d3:cb:25:dd:67:37:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Validity
Not Before: Mar 1 18:01:12 2026 GMT
Not After : Mar 2 18:01:12 2026 GMT
Subject: CN=11c7462ed06156c181998ae99c5bdbf9a7b8b995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c8:59:5b:5d:89:7b:c7:9f:38:63:b0:24:57:
88:0e:09:37:2d:46:13:2b:f2:36:c7:f0:0c:bb:05:
8c:5b:01:96:f9:df:79:f7:83:64:8d:16:88:f6:cb:
3b:f9:e6:89:0d:a0:93:8c:82:62:78:c6:9c:31:b1:
2c:38:3d:d4:92:68:0f:54:39:d0:82:e7:52:8d:21:
1f:14:ad:37:3a:bf:85:cc:40:9f:29:9c:38:30:1e:
c4:59:be:2d:5b:d2:99:da:ec:14:9c:f9:57:02:1e:
30:3e:e8:bb:61:31:08:0b:18:4b:46:40:1b:5d:5f:
46:7a:e4:4e:66:98:7d:60:90:0e:51:b7:0d:22:90:
15:13:f6:ef:e9:e5:da:12:46:05:07:73:61:be:9f:
03:1a:4d:7f:6e:7f:2b:a4:41:b0:cc:70:e5:f2:e4:
4c:7c:35:a8:09:c7:c0:d4:f2:26:c3:0e:8c:10:ef:
ac:b5:fb:1a:00:db:95:16:55:8e:ec:14:8a:e7:2e:
a1:b1:36:67:82:b5:49:3d:7a:c1:dc:7e:8a:4d:cb:
7b:74:8f:16:e7:d5:ab:70:98:f5:34:01:47:2e:f7:
ea:ec:96:9a:84:d0:f4:65:60:c6:ed:86:07:f2:fa:
f4:16:a0:24:f9:b1:6a:d1:46:fb:dc:60:4e:3e:64:
4c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C7:46:2E:D0:61:56:C1:81:99:8A:E9:9C:5B:DB:F9:A7:B8:B9:95
X509v3 Authority Key Identifier:
keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:22:d1:8d:7e:53:51:60:45:63:2d:ee:e2:13:99:7b:e1:bb:
9e:c4:c5:38:69:22:e5:17:9c:6c:72:c1:3f:95:c9:2a:b8:39:
a0:17:29:a2:e6:f3:55:8a:f9:af:39:38:46:7e:1e:57:3c:ca:
87:57:ea:c0:9e:8e:39:69:ac:15:4a:40:f3:f1:07:ab:fb:76:
96:c2:8e:6f:9a:d6:80:7c:63:c7:a5:c1:79:9e:e7:9c:f3:7f:
f7:fb:77:d8:cb:d0:1c:0b:db:e1:b1:41:32:14:97:15:16:93:
93:09:76:bb:c2:08:ca:10:21:d1:61:40:5c:4e:53:2e:5d:26:
8c:7d:0f:85:d9:7d:64:fd:be:ee:26:6e:0f:af:04:c7:08:be:
bf:94:e6:07:e2:7a:2e:bd:a5:eb:50:44:77:22:4a:93:ee:87:
d5:c6:cc:b2:6b:c3:99:cd:2b:58:43:2f:48:41:39:09:60:15:
22:f8:6c:86:f1:63:8d:6b:05:d4:2a:bf:07:aa:1b:15:c1:cc:
31:b4:27:f4:bc:87:6a:b2:fc:5e:c8:ad:6b:50:64:36:c3:71:
58:21:f8:7a:13:ab:68:95:64:ea:41:47:79:da:96:a6:fd:2c:
5e:c0:55:9d:4f:52:01:3e:d6:1e:bc:18:49:7a:a2:dd:43:06:
e6:70:f3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:07 2026 by rpki-client