Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
File: Omhc-Ip_xD_hx_40pv8927QU8LU.mft (raw, json)
Hash identifier: bGu1DuA0q1L7DJY96kafVFdBY8mGFb3SM+jGkgrrsco=
Subject key identifier: AC:9D:28:5D:FC:61:7A:81:07:2A:B2:82:B1:1A:12:4B:B2:FE:FB:44
Authority key identifier: 3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
Certificate issuer: /CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Certificate serial: 019CAAFD9C155947A96CC0E40263CD6C750A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
Manifest number: 178B
Signing time: Sun 01 Mar 2026 20:01:13 +0000
Manifest this update: Sun 01 Mar 2026 20:01:13 +0000
Manifest next update: Mon 02 Mar 2026 20:01:13 +0000
Files and hashes: 1: 4CWfekzf4x-HS1fJIidism45k8I.roa (hash: BHdLLhr5F9G9d810caL7Kieqc8ckL+IwjTONjFXfuYQ=)
2: AleCDdJblQdVI-S091EQULB75VY.roa (hash: eSD+DKApi4DxBKaxewRCjm2s463W9mcSqjdhdutCm0w=)
3: Omhc-Ip_xD_hx_40pv8927QU8LU.crl (hash: iWHx/XmU9JV5uTkx2wX1vIlF/KBkU9D1LJZ1UhFFHDU=)
4: Sl9bNPBsXlBI0DeUAp-mjVlbQuQ.roa (hash: OCH6KKa8NHD+YpgJ2LuApSob95p9PeDsu1ZA6J3sKlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:9c:15:59:47:a9:6c:c0:e4:02:63:cd:6c:75:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Validity
Not Before: Mar 1 20:01:13 2026 GMT
Not After : Mar 2 20:01:13 2026 GMT
Subject: CN=ac9d285dfc617a81072ab282b11a124bb2fefb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:53:5b:b3:c2:03:e5:38:86:37:b0:3e:df:42:
da:35:1a:dd:c0:18:7e:e2:95:b5:9c:dd:8d:19:da:
14:80:f3:4f:97:ab:59:4f:b7:85:6f:33:e4:95:39:
57:6f:0a:ce:6a:5c:78:ab:7e:46:da:db:3c:fb:3a:
34:d4:ba:3d:85:4e:d7:68:96:9e:28:1c:8e:fc:9f:
71:6b:b5:83:cc:bc:41:35:ca:59:8b:e1:49:d5:43:
88:e8:86:0d:6e:18:34:2c:de:78:c0:2d:ae:0b:32:
36:9e:bc:4c:96:ba:43:3e:08:f0:e6:20:9f:51:79:
c6:1e:41:ff:59:db:9c:34:a9:1a:d6:74:d2:dc:3a:
60:e9:6d:07:54:43:98:a3:7a:ff:b4:3f:ec:91:43:
79:61:4d:28:b0:11:29:70:07:de:bf:d5:57:85:bd:
38:49:55:57:3a:0f:03:65:09:39:b5:c5:80:4d:81:
bf:bb:de:50:90:e0:56:f6:55:03:7d:8e:59:0a:bc:
96:01:84:af:97:cc:d9:ed:86:6f:7c:bd:56:db:06:
fa:47:46:59:b3:47:e9:24:0c:c2:1a:9f:0a:36:6d:
d2:a2:f3:de:11:83:e4:5e:70:63:90:ea:97:eb:8e:
2b:71:86:98:d0:7c:b1:d1:4d:82:69:d0:7d:c5:c8:
6f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9D:28:5D:FC:61:7A:81:07:2A:B2:82:B1:1A:12:4B:B2:FE:FB:44
X509v3 Authority Key Identifier:
keyid:3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:be:9c:d4:e8:a1:cd:f8:90:81:32:1e:fd:0b:d3:38:2e:17:
93:ed:08:51:80:98:6d:db:0a:90:88:34:d1:14:77:04:fa:10:
51:35:b8:fe:0b:ee:cc:c3:ba:01:f1:e8:2e:ab:8a:6e:bd:14:
5b:09:ac:13:ef:ca:f2:3f:9a:2f:1d:0e:75:6b:b2:20:f7:5e:
ef:95:b1:e9:3e:c1:1e:a4:ff:28:82:22:d7:c0:92:9b:f5:9c:
cc:09:60:1b:7c:c1:f2:6b:00:92:19:0f:b8:c9:1b:20:01:19:
a8:dc:83:35:fc:28:11:75:ec:3a:0c:eb:be:c2:b1:d8:d7:4c:
06:1c:3d:94:86:db:ef:38:d0:01:db:91:c1:51:23:7e:84:31:
74:3b:b2:ad:d1:9a:07:7d:22:fe:10:f1:87:e0:b7:a5:82:75:
57:d0:fa:a3:16:f9:83:f5:f4:b2:26:94:06:b0:cc:21:12:ac:
1a:07:2a:64:26:fe:24:3d:85:bc:98:3f:7c:ea:fc:01:57:d2:
70:8c:07:c6:10:5b:4e:79:3a:c3:1d:0b:cf:25:5b:82:14:d2:
6a:50:38:a0:7c:64:53:a8:60:96:83:05:de:4c:6b:cf:49:be:
65:6e:84:06:1f:d7:9c:c3:e2:15:af:09:23:3e:fb:df:0f:69:
f3:88:7a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:21 2026 by rpki-client