
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
File: OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft (raw, json)
Hash identifier: jQMlg0qv3F9zTz62uovNPxp/cCMIeMtF6eC7UQXhPDI=
Subject key identifier: F3:F2:D6:6D:F4:24:8E:6F:65:71:89:45:52:93:79:68:D8:EE:7A:5F
Authority key identifier: 3A:64:AC:3C:23:EE:4A:BE:E3:06:C9:9D:67:80:B1:3F:5C:B6:5C:DA
Certificate issuer: /CN=3a64ac3c23ee4abee306c99d6780b13f5cb65cda
Certificate serial: 01A0C9D8B8714CFFD9168858E75DEB040D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
Manifest number: 0150
Signing time: Tue 22 Sep 2026 16:00:18 +0000
Manifest this update: Tue 22 Sep 2026 16:00:18 +0000
Manifest next update: Wed 23 Sep 2026 16:00:18 +0000
Files and hashes: 1: OmSsPCPuSr7jBsmdZ4CxP1y2XNo.crl (hash: Zb9mQx6lIHV+GyDAkVX+0TiVDhGzKuzibZ2vc5PmqWs=)
2: gkTf7nQTsreRRFr_69F3-1CTYmo.asa (hash: 6ZWz3HOG4yY5iF+Cf+k2WgBB6OwjzBCJK4BD/nVdTag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d8:b8:71:4c:ff:d9:16:88:58:e7:5d:eb:04:0d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a64ac3c23ee4abee306c99d6780b13f5cb65cda
Validity
Not Before: Sep 22 16:00:18 2026 GMT
Not After : Sep 23 16:00:18 2026 GMT
Subject: CN=f3f2d66df4248e6f6571894552937968d8ee7a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:26:1b:43:a3:25:b4:1e:8d:81:d4:71:84:
fe:26:e6:f4:88:8b:22:6d:d7:8d:79:4c:a0:ea:81:
0c:e5:94:f6:60:99:9f:b5:11:bf:06:9a:fc:50:08:
6c:3a:ea:0c:65:bd:56:6b:1d:87:c6:b2:43:39:cd:
b0:e9:6c:44:78:f7:b0:01:b3:f3:bd:d2:fc:3c:e4:
84:98:17:5e:43:e7:ed:4e:d1:32:12:a2:f2:af:00:
2c:c1:63:e4:13:94:bf:d5:bf:64:f1:ea:eb:68:a2:
38:11:5e:12:77:ba:e8:33:3a:44:97:d6:1c:99:df:
4b:1b:34:dd:c0:a3:1a:45:50:14:70:e4:09:b4:37:
4e:4a:43:93:4e:b7:4e:6d:52:5d:7b:62:99:01:e4:
83:3e:cf:a9:61:e3:c6:25:72:a2:04:68:fb:a1:0a:
97:db:09:cb:94:5e:80:31:c2:6c:b0:16:ac:a8:36:
c1:eb:95:bd:d7:be:a8:e5:a1:fa:05:37:fe:e7:a7:
ce:3a:36:b5:4d:55:b2:ce:53:b5:5b:03:f6:f5:13:
71:32:ee:2c:f7:ac:7b:26:1d:c6:69:38:e4:94:dd:
84:73:2c:d4:ea:a9:6e:10:72:87:47:3c:c6:a4:34:
81:fd:31:85:bf:83:1b:fb:32:4f:c3:36:02:3b:9d:
66:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F2:D6:6D:F4:24:8E:6F:65:71:89:45:52:93:79:68:D8:EE:7A:5F
X509v3 Authority Key Identifier:
keyid:3A:64:AC:3C:23:EE:4A:BE:E3:06:C9:9D:67:80:B1:3F:5C:B6:5C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d2:de:80:70:67:13:d5:68:4a:a7:02:8e:40:76:fc:f0:59:
91:aa:f6:8b:a9:c5:04:fb:a5:ac:3c:e0:8d:de:6a:98:3e:5c:
b0:52:1a:35:23:17:d2:e7:be:c7:3a:39:01:6a:9e:b4:24:1d:
24:9c:c4:47:c4:6a:7f:77:cd:84:61:ac:ff:2d:9c:6e:6d:2a:
ca:a7:cc:69:3d:81:8a:19:0f:3a:2c:36:2f:55:d2:1f:cd:9f:
71:af:c1:e0:b5:ff:2e:d4:cc:2f:14:d3:81:84:1a:77:35:0c:
c0:3e:c3:2d:6b:a7:49:66:50:12:61:7d:44:12:0e:4c:ed:4a:
88:af:df:9a:a5:44:66:b8:dc:06:69:7b:7c:0a:39:8a:44:f0:
f7:84:6b:b4:ed:c7:9a:f8:d5:bf:2f:87:8a:e1:0d:ba:ed:cb:
8c:7f:3e:ac:5d:96:69:bf:cb:e8:3e:69:f2:e3:f3:3f:50:45:
89:c6:57:33:17:72:30:bd:e5:0e:8c:2b:29:b5:03:30:d6:e5:
ef:8f:24:49:46:38:8d:87:18:80:54:3d:1d:44:8e:6a:7b:54:
8a:ef:e1:59:1f:5e:72:90:31:0b:c7:fa:db:ba:f6:e0:20:41:
69:a5:bd:e0:08:8c:89:06:3b:f4:1a:31:21:06:45:04:26:ab:
bd:b0:7b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:12:26 2026 by rpki-client