Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
File: omhVmAsnPlrlfcG56yLp9fOnzfc.mft (raw, json)
Hash identifier: aMvWJIRfZMnP3/fLSD9PsaM28DNQSKVYxYbx3+W31XE=
Subject key identifier: 49:54:D5:29:F3:80:4C:AA:B5:BF:3F:56:F3:3A:77:37:F5:CA:75:C1
Authority key identifier: A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
Certificate issuer: /CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Certificate serial: 019CAB34A72E57E7C3B4630DB46D9E767064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:01:20 +0000
Manifest this update: Sun 01 Mar 2026 21:01:20 +0000
Manifest next update: Mon 02 Mar 2026 21:01:20 +0000
Files and hashes: 1: bLAwkpsQ7D6caU7zIeAaY5nux8E.roa (hash: KqLO/vffpcb+/IGfGAsD+PmTdmluxkrnPOhEPWZAu6E=)
2: omhVmAsnPlrlfcG56yLp9fOnzfc.crl (hash: JiDrAUU1ipxEtVquOKA/WVDTcEttOA+JOgiO2j5aeNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:a7:2e:57:e7:c3:b4:63:0d:b4:6d:9e:76:70:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Validity
Not Before: Mar 1 21:01:20 2026 GMT
Not After : Mar 2 21:01:20 2026 GMT
Subject: CN=4954d529f3804caab5bf3f56f33a7737f5ca75c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:1e:67:d3:b0:c9:cf:a1:eb:e4:f5:37:8e:
00:bc:51:15:b5:70:bd:a0:c5:59:d4:1a:c4:ec:a9:
ac:f6:6b:55:9a:7c:28:dd:b4:43:7e:60:d2:68:85:
c0:13:f0:68:80:07:5c:9f:45:7e:ec:42:46:8d:01:
7f:4b:73:ab:ed:90:f6:88:b4:b8:6b:1c:d5:81:6e:
3a:04:55:f1:d1:0c:c6:3f:b8:97:d6:97:f8:3b:01:
bf:2e:89:fc:8a:19:17:75:e6:34:99:19:55:3f:73:
e4:f1:0a:7f:17:28:8b:b8:a7:72:44:07:ca:97:2a:
4c:2c:b8:07:fb:10:32:28:52:f5:28:9e:64:11:68:
26:88:86:85:46:c6:c5:97:63:ac:ea:e9:b2:90:42:
11:78:bd:b5:b7:d9:20:91:f0:56:53:4c:74:44:70:
63:4c:f4:c1:7f:e3:33:bc:81:a3:33:ac:02:50:76:
b8:c0:6d:aa:7b:e7:64:bf:12:81:d9:0b:8b:2a:72:
cc:49:c8:ac:f3:fb:d3:43:73:7b:bf:5b:2c:71:68:
d6:42:73:f0:63:68:d4:15:52:26:42:1e:98:3c:95:
ed:6c:b8:44:1b:f2:03:99:a6:4b:20:b4:44:02:59:
8d:88:ac:17:86:34:f9:28:fb:4e:72:0f:51:60:1c:
e1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:54:D5:29:F3:80:4C:AA:B5:BF:3F:56:F3:3A:77:37:F5:CA:75:C1
X509v3 Authority Key Identifier:
keyid:A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:5b:48:42:a3:09:28:09:f2:37:e6:f1:c5:66:27:20:6e:af:
c0:7e:a0:90:28:d2:c9:82:12:3b:b4:cb:cb:eb:65:99:dd:1c:
9e:55:3a:c1:65:de:c5:54:6d:a2:37:44:14:78:46:47:9b:3d:
ac:42:84:df:b7:ee:94:83:07:32:92:04:6a:8d:19:84:dd:7e:
f6:67:37:02:37:e1:ab:96:08:57:79:63:32:c7:19:d8:09:66:
05:b8:e0:1d:61:24:61:da:0c:8c:37:82:1a:25:bf:97:35:9a:
b6:5c:7d:c9:98:78:8b:97:b5:ae:f7:fd:f6:2f:05:aa:56:43:
34:ee:3f:73:ba:7c:9a:9f:18:a1:f5:16:ed:73:cc:dc:28:37:
2b:4d:af:33:66:80:bc:80:b9:07:bc:5f:c6:e8:7c:45:3f:ec:
c5:d8:86:4b:4a:13:2f:00:2a:37:44:a4:13:3f:14:81:b9:f6:
16:15:e2:f2:2b:1e:e7:52:c6:e9:af:24:fe:cd:3b:56:96:1d:
1f:2d:29:da:ec:e3:4c:cb:ac:2d:b0:24:0b:72:49:36:4b:ee:
29:ce:45:6a:52:ad:e3:cb:5d:93:54:3f:f1:e3:54:dd:82:a0:
5a:47:b6:65:c4:93:b8:0b:2c:ac:77:f5:6c:34:ec:3b:ea:94:
75:52:25:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:50 2026 by rpki-client