
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
File: om-n7jCto1qx_ATzQP7fZHqfgWI.mft (raw, json)
Hash identifier: OAPksgsa7dc3vs2PhmpE+OoDlQf1sgydSwqTktqgcas=
Subject key identifier: 81:5B:38:4F:7B:22:BF:30:38:00:F1:D2:65:B9:4A:E9:4A:72:05:38
Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
Certificate issuer: /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Certificate serial: 01A0D0B66D46C7BCFD47172A010BBDFCBC46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
Manifest number: 19FF
Signing time: Thu 24 Sep 2026 00:00:11 +0000
Manifest this update: Thu 24 Sep 2026 00:00:11 +0000
Manifest next update: Fri 25 Sep 2026 00:00:11 +0000
Files and hashes: 1: nlwPCqdx2lOTVgz8lZL0i1VNbYM.roa (hash: 2DCxPDKTN3hjXlK5stoi0CcHybhnZoUg5yfutSyUspU=)
2: om-n7jCto1qx_ATzQP7fZHqfgWI.crl (hash: U3FbrMQto1+SaaBk/362uiHFvARMYKFyjQ4aLwKYrIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:6d:46:c7:bc:fd:47:17:2a:01:0b:bd:fc:bc:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Validity
Not Before: Sep 24 00:00:11 2026 GMT
Not After : Sep 25 00:00:11 2026 GMT
Subject: CN=815b384f7b22bf303800f1d265b94ae94a720538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e7:fe:9e:20:ee:7c:2e:c2:c8:7c:fe:d5:65:
d9:8e:98:39:0e:5b:21:6c:e8:3f:64:37:fa:65:31:
33:b2:3f:33:b5:f9:c1:ab:ed:1c:75:4f:e8:a7:55:
17:9e:67:15:20:c4:ae:54:f4:27:88:ba:98:44:6e:
e5:16:e3:91:5d:ec:4d:73:78:b3:95:b0:c1:73:3b:
92:78:0d:b9:6c:0b:a7:4e:b6:73:ec:39:34:de:69:
d4:56:7f:e0:28:69:5b:6c:54:69:59:64:47:0a:10:
bd:f7:76:a0:f8:aa:b7:65:59:6f:65:a3:1f:fc:24:
4d:97:72:06:cd:a3:08:3f:94:76:20:86:80:cc:23:
46:6a:0a:4c:2c:da:de:82:cf:27:1d:e7:8e:a8:c7:
82:81:db:00:f3:da:ee:a2:0b:2a:40:b1:4b:65:5f:
d0:e0:1b:8f:2d:0f:78:ab:2f:ce:3e:2e:df:12:be:
a9:2d:00:f0:99:52:be:7d:d7:93:02:dc:14:16:9e:
87:44:15:c8:3f:4e:8a:bd:e9:d7:14:f4:73:09:1e:
86:16:7d:2c:66:f4:6d:70:3a:97:78:ed:3c:42:8f:
76:65:3f:a1:ab:74:2b:a9:41:c5:fd:a7:30:30:74:
f1:94:a0:25:a0:a3:d5:53:36:b2:6b:43:8a:19:1e:
cd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5B:38:4F:7B:22:BF:30:38:00:F1:D2:65:B9:4A:E9:4A:72:05:38
X509v3 Authority Key Identifier:
keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:df:63:3b:cd:23:f5:ed:98:e2:92:4f:c5:50:dd:8e:5f:b0:
91:38:a9:d6:01:4a:a1:66:fc:df:27:da:fd:4d:78:f6:98:5c:
b7:75:7f:e9:f9:e3:b6:82:4d:f0:bb:9d:33:11:07:6d:44:d4:
58:9d:2b:f3:12:35:f4:53:37:a1:6a:9a:4e:42:c4:5a:29:fd:
57:42:66:ed:4f:5f:23:6c:69:74:39:b4:28:27:7d:fb:05:f9:
3d:49:01:5c:93:7e:f0:9e:07:69:ec:37:66:40:c4:e1:f6:c6:
1c:dd:cb:9f:cb:37:70:94:0e:b9:3b:90:f2:d7:67:4b:db:b8:
53:59:01:8e:72:80:16:65:5a:8d:0c:9c:85:e0:d8:20:12:67:
65:13:c8:f4:cc:a5:be:66:ce:f6:80:a9:0c:7f:97:f4:cb:80:
58:3d:7a:d8:75:31:b0:fa:fb:c8:25:36:d3:7b:59:a8:f4:f4:
f4:df:fd:d2:2e:00:37:7c:04:16:1b:1f:67:34:78:35:21:7e:
ae:88:75:6b:82:62:ed:ee:73:5c:c9:9f:73:06:3a:59:bf:bb:
b3:42:5b:a8:29:29:1d:af:5f:ef:b1:4d:b1:5e:f1:0d:28:7b:
3f:7b:60:eb:38:8e:7c:5e:a5:2c:72:9b:dd:84:44:cf:0a:26:
dc:e6:a9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:16:37 2026 by rpki-client