Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
File: Om4uf_LHAsirUUn-6nF1mRxzQJw.mft (raw, json)
Hash identifier: 6Cus2Ly8hx5CJxteSbJj3hlY4zgmgvyPkWP9YcVK6x0=
Subject key identifier: 82:38:AD:32:0B:5D:15:22:1D:6F:F0:A9:AC:6E:A2:B8:56:51:EC:76
Authority key identifier: 3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
Certificate issuer: /CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Certificate serial: 019CABA1F53E8847C5FFC3C022A3ED84436F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
Manifest number: 0860
Signing time: Sun 01 Mar 2026 23:00:43 +0000
Manifest this update: Sun 01 Mar 2026 23:00:43 +0000
Manifest next update: Mon 02 Mar 2026 23:00:43 +0000
Files and hashes: 1: 2vFmTEXL4sIOGvvxET_z9OsJtkM.roa (hash: hE+J8l/9QyGd/yFHBwyjIvFqStRGpbN8ok17t6YgQA4=)
2: Om4uf_LHAsirUUn-6nF1mRxzQJw.crl (hash: H6A/p3g+oynAMbrNonCspqXzDzowGZ9+7r/wpgts/fA=)
3: ngZkQQAAmyzs-8i5NBKDT7ozzfE.roa (hash: 6UMNzj0BfpUOXrwKXdq5vGzZXckdpCxU0zZpgK6Silc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:f5:3e:88:47:c5:ff:c3:c0:22:a3:ed:84:43:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Validity
Not Before: Mar 1 23:00:43 2026 GMT
Not After : Mar 2 23:00:43 2026 GMT
Subject: CN=8238ad320b5d15221d6ff0a9ac6ea2b85651ec76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:af:59:58:46:a6:a1:00:a6:3f:60:94:5b:
a0:69:1d:a6:cb:0f:ff:e4:eb:db:a0:7a:a0:e0:ef:
f6:8d:e8:cd:e4:08:7e:c8:5c:0f:d3:e5:93:3e:44:
fa:78:b5:1b:f0:d9:f5:20:30:0f:64:88:f2:54:f1:
9b:47:78:6f:8a:42:50:5f:c3:be:7a:d5:07:96:ff:
21:64:30:68:af:8e:78:52:c3:d2:87:21:8a:87:d2:
11:58:87:a3:fb:94:8b:df:80:16:7f:c5:12:d0:b9:
95:74:e3:8b:e2:d4:2a:e8:19:7a:84:9e:f7:9e:36:
23:64:49:53:28:8e:66:fb:5d:4b:4c:6b:1a:5d:a9:
1f:38:2a:3b:7a:08:6e:51:4e:9c:7b:e3:05:ef:8d:
05:b7:62:c8:3b:ab:39:ff:70:6b:7d:19:ca:a6:a7:
ea:0f:f9:fd:8a:4b:25:ea:4b:00:59:13:d2:3c:13:
5d:4e:83:b5:14:dd:14:43:df:58:f0:8c:d6:97:f7:
23:5b:01:31:92:7b:d4:5f:d1:e5:57:02:10:96:23:
3f:a4:be:a8:0e:e1:de:62:7a:98:cd:7f:01:ec:24:
e2:c2:94:d7:a3:4b:49:94:f0:b7:63:59:8e:65:bf:
88:fe:11:4e:a9:b5:2f:cf:c0:ca:5e:65:6f:0e:eb:
01:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:38:AD:32:0B:5D:15:22:1D:6F:F0:A9:AC:6E:A2:B8:56:51:EC:76
X509v3 Authority Key Identifier:
keyid:3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a7:0d:3a:2f:52:c4:1c:35:fb:5a:d1:00:42:26:e4:f4:09:
68:1e:1d:67:7f:22:70:81:13:c5:56:10:5f:ef:49:38:f2:6f:
01:02:46:c7:be:79:cf:1d:80:9a:09:96:cf:de:2a:de:5d:68:
2d:83:fa:e4:d8:b0:f0:d5:5d:ef:75:e8:ba:88:6a:75:a7:ca:
14:a6:67:13:32:7f:d3:e1:e1:20:0d:20:01:17:8d:10:2f:5d:
d7:64:29:77:b3:5f:b5:cc:30:41:1f:7e:47:36:ee:7e:c4:c0:
6d:fe:98:3e:27:9d:89:16:1d:a9:68:47:d8:a9:80:5c:fe:57:
1b:f7:4f:a3:cd:b8:36:08:0f:f5:81:7e:43:a0:8b:95:56:17:
87:61:eb:89:6c:d8:bb:af:69:fc:d7:ad:cf:9c:26:98:71:8e:
df:28:e5:58:b5:8f:ce:2a:9c:c7:01:52:de:81:dc:86:6e:2a:
b6:c2:04:c8:22:0b:bc:fc:2b:ae:83:2b:f6:b9:2e:61:2e:81:
00:1f:41:66:ad:4a:e2:4e:13:f3:f0:50:a4:5e:7f:a1:79:35:
92:02:ce:a0:40:39:d9:c5:20:63:d7:a1:5e:45:d0:5d:47:a5:
43:8c:a0:0c:99:1e:63:ae:e4:e9:d3:53:fa:0e:5d:97:a0:6e:
6f:bc:f4:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrofU+iEfF/8PAIqPthENvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNmUyZTdmZjJjNzAyYzhhYjUxNDlmZWVhNzE3NTk5MWM3
MzQwOWMwHhcNMjYwMzAxMjMwMDQzWhcNMjYwMzAyMjMwMDQzWjAzMTEwLwYDVQQD
Eyg4MjM4YWQzMjBiNWQxNTIyMWQ2ZmYwYTlhYzZlYTJiODU2NTFlYzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugWvWVhGpqEApj9glFugaR2myw//
5OvboHqg4O/2jejN5Ah+yFwP0+WTPkT6eLUb8Nn1IDAPZIjyVPGbR3hvikJQX8O+
etUHlv8hZDBor454UsPShyGKh9IRWIej+5SL34AWf8US0LmVdOOL4tQq6Bl6hJ73
njYjZElTKI5m+11LTGsaXakfOCo7eghuUU6ce+MF740Ft2LIO6s5/3BrfRnKpqfq
D/n9iksl6ksAWRPSPBNdToO1FN0UQ99Y8IzWl/cjWwExknvUX9HlVwIQliM/pL6o
DuHeYnqYzX8B7CTiwpTXo0tJlPC3Y1mOZb+I/hFOqbUvz8DKXmVvDusBKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFII4rTILXRUiHW/wqaxuorhWUex2MB8GA1UdIwQY
MBaAFDpuLn/yxwLIq1FJ/upxdZkcc0CcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT200dWZfTEhBc2lyVVVuLTZuRjFtUnh6UUp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xODg1NDItZDRmNy00YWEyLWFkYzct
Nzc1YTA1Nzg4Y2Y1LzEvT200dWZfTEhBc2lyVVVuLTZuRjFtUnh6UUp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8xODg1NDItZDRmNy00YWEyLWFkYzctNzc1YTA1Nzg4Y2Y1
LzEvT200dWZfTEhBc2lyVVVuLTZuRjFtUnh6UUp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnacNOi9S
xBw1+1rRAEIm5PQJaB4dZ38icIETxVYQX+9JOPJvAQJGx755zx2AmgmWz94q3l1o
LYP65Niw8NVd73XouohqdafKFKZnEzJ/0+HhIA0gAReNEC9d12Qpd7NftcwwQR9+
RzbufsTAbf6YPiediRYdqWhH2KmAXP5XG/dPo824NggP9YF+Q6CLlVYXh2HriWzY
u69p/Netz5wmmHGO3yjlWLWPziqcxwFS3oHchm4qtsIEyCILvPwrroMr9rkuYS6B
AB9BZq1K4k4T8/BQpF5/oXk1kgLOoEA52cUgY9ehXkXQXUelQ4ygDJkeY67k6dNT
+g5dl6Bub7z0fQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:28 2026 by rpki-client