Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
File: Om4uf_LHAsirUUn-6nF1mRxzQJw.mft (raw, json)
Hash identifier: Kc8rdx9pbRLY90bq9VRzm5mLpevF2i/s9l+2tljTQ/8=
Subject key identifier: CE:39:E8:48:1B:00:6B:AC:CE:9B:F7:6F:74:E7:5A:A5:4E:E1:4C:57
Authority key identifier: 3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
Certificate issuer: /CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Certificate serial: 019D992AF570B857D096F9341395C960BF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
Manifest number: 08DB
Signing time: Fri 17 Apr 2026 02:00:22 +0000
Manifest this update: Fri 17 Apr 2026 02:00:22 +0000
Manifest next update: Sat 18 Apr 2026 02:00:22 +0000
Files and hashes: 1: 2vFmTEXL4sIOGvvxET_z9OsJtkM.roa (hash: hE+J8l/9QyGd/yFHBwyjIvFqStRGpbN8ok17t6YgQA4=)
2: Om4uf_LHAsirUUn-6nF1mRxzQJw.crl (hash: wxChyup1KY8VEsv+aiqM3Aw810VtgXsFtSifz7ihpKw=)
3: ngZkQQAAmyzs-8i5NBKDT7ozzfE.roa (hash: 6UMNzj0BfpUOXrwKXdq5vGzZXckdpCxU0zZpgK6Silc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:f5:70:b8:57:d0:96:f9:34:13:95:c9:60:bf:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Validity
Not Before: Apr 17 02:00:22 2026 GMT
Not After : Apr 18 02:00:22 2026 GMT
Subject: CN=ce39e8481b006bacce9bf76f74e75aa54ee14c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f9:86:f0:40:66:3b:12:ba:d0:ce:35:10:66:
b4:4c:73:e1:e3:86:f4:d3:ec:08:5e:28:c8:f0:69:
64:f5:ca:15:cf:61:c8:c7:be:88:86:09:7f:ef:c2:
0c:c2:aa:f7:7e:32:02:76:19:94:42:12:1e:68:3e:
3b:30:59:6b:f2:45:8d:a0:4e:04:19:6e:69:8c:1c:
f3:58:20:88:18:cd:63:85:5d:c3:20:87:42:7c:f0:
37:5f:8e:83:43:46:e3:7a:d7:f0:25:f9:fb:da:28:
81:3c:08:2e:56:66:98:e4:9b:9a:ec:64:a7:20:dc:
70:9e:34:86:e2:f5:94:71:aa:e5:55:4f:b6:98:3d:
80:30:c2:ee:8b:b3:93:86:a4:3d:b0:b1:50:93:cb:
dd:c0:64:3b:c9:a9:01:a0:31:29:d0:89:6c:76:3f:
36:3f:23:dd:88:12:3f:23:0d:e3:ca:e8:4d:e2:4e:
ff:06:3e:d6:95:08:b9:d5:a2:2d:51:9b:39:7c:13:
bd:9c:c2:34:fa:5f:db:57:fc:4e:11:1d:91:2a:af:
c2:b2:bf:80:9a:7f:c2:28:48:20:2b:bf:a9:10:96:
bd:cb:17:f2:f6:a9:8b:3c:e9:be:0a:e4:18:41:91:
2b:de:67:5e:cc:e6:26:ff:51:b3:a0:65:7c:9d:c4:
38:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:39:E8:48:1B:00:6B:AC:CE:9B:F7:6F:74:E7:5A:A5:4E:E1:4C:57
X509v3 Authority Key Identifier:
keyid:3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3e:55:cb:5b:09:b9:80:98:49:cd:a0:d3:0b:20:f9:51:79:
89:9a:14:2c:81:25:14:87:68:cb:a9:42:17:ef:35:dd:db:28:
36:2d:e6:1a:cc:23:60:06:4f:f0:60:30:76:c4:36:06:f3:9c:
8e:a1:4d:97:1c:85:7b:16:03:de:ab:e5:88:af:c4:1a:c5:6c:
8c:a9:f9:ed:e6:06:95:52:eb:04:23:31:36:5e:74:1f:9b:22:
fd:d0:53:64:50:69:16:aa:c4:0c:65:74:b2:24:4b:7b:01:eb:
f0:20:6d:66:5b:01:b1:bb:2e:67:3a:0e:34:6a:00:74:23:83:
f9:61:01:3d:02:19:19:ae:07:1f:19:3e:c2:98:6d:c2:f9:43:
e5:76:23:8c:48:ca:1b:65:22:7f:45:5b:19:cd:9c:b0:61:e9:
56:4f:59:cc:e8:fb:b8:3a:bc:87:1a:09:c7:3b:82:b2:bd:05:
3e:26:a3:b0:e4:65:c5:90:b6:13:0a:a2:21:82:2b:58:46:a8:
ae:9a:4d:1e:b1:ec:ee:c1:8d:78:94:2b:1b:8f:75:2e:85:68:
18:59:93:2e:2a:20:d6:a9:57:32:53:9b:d0:6c:73:8b:41:ba:
aa:86:33:37:61:45:63:67:96:29:33:2d:65:53:b6:c5:b8:f8:
2a:21:c1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:41 2026 by rpki-client