Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
File: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft (raw, json)
Hash identifier: fImAufPjwRlIntlZwLWDYr8pB0B7cB3v2XsBoEBVIBM=
Subject key identifier: 0B:9A:D7:C4:7B:BB:5E:72:4D:DD:5F:D5:B1:BE:35:50:C4:8D:57:71
Authority key identifier: D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
Certificate issuer: /CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Certificate serial: 01A0C4E9A6D2CFA4B12E5C4F4C06F766A3EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
Manifest number: 0FE8
Signing time: Mon 21 Sep 2026 17:00:41 +0000
Manifest this update: Mon 21 Sep 2026 17:00:41 +0000
Manifest next update: Tue 22 Sep 2026 17:00:41 +0000
Files and hashes: 1: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl (hash: bXbBgyL6S4cFFEtwUZoJwzI5022enbODMm8whr7HeMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:a6:d2:cf:a4:b1:2e:5c:4f:4c:06:f7:66:a3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Validity
Not Before: Sep 21 17:00:41 2026 GMT
Not After : Sep 22 17:00:41 2026 GMT
Subject: CN=0b9ad7c47bbb5e724ddd5fd5b1be3550c48d5771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:cd:c3:0e:9e:e4:10:ce:9c:7f:65:d1:fd:
44:b9:a9:ea:79:eb:2f:7c:2d:37:a6:0c:14:1b:08:
8a:da:0c:05:ee:d3:35:a2:46:d3:9d:58:ef:95:83:
0b:86:a0:e0:4e:5b:57:2b:67:2d:65:cb:ce:47:ab:
0f:a4:aa:8d:a2:8f:5a:ae:8b:82:43:cb:d3:c6:de:
3b:3b:7e:cc:c2:09:37:86:0b:e1:53:b3:ee:2e:a4:
5a:a9:d3:36:0d:98:34:78:32:83:55:24:1f:87:e5:
31:60:d1:08:67:a9:0e:0a:f2:aa:01:36:c0:9b:8f:
bc:10:95:bb:df:9e:fb:61:22:cc:52:76:2f:44:65:
4e:b1:53:03:ab:70:e4:b5:50:90:41:d3:69:d4:1c:
87:3d:ca:d0:bf:4c:de:f5:64:1d:17:03:94:41:e7:
f0:51:de:30:1c:dc:6b:f6:71:05:d0:cb:f0:94:6d:
2a:76:e2:bc:0a:f9:81:11:4a:93:db:a2:75:69:4e:
b2:e1:a7:30:2d:63:63:8a:f6:9a:4d:33:03:3b:df:
66:3f:f4:a3:fd:31:e3:ff:2f:81:98:cc:30:83:a4:
dd:10:cf:51:29:de:ed:fb:1b:d0:96:29:71:93:ad:
b6:1f:9e:6e:40:16:65:8c:35:14:cd:cb:96:75:a6:
5d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9A:D7:C4:7B:BB:5E:72:4D:DD:5F:D5:B1:BE:35:50:C4:8D:57:71
X509v3 Authority Key Identifier:
keyid:D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:fa:02:a8:bb:75:f6:97:c8:14:6d:2a:b5:77:41:bf:90:c2:
54:0e:b4:1b:ab:e8:f2:b5:5a:88:e2:5c:5d:c0:fc:f8:2d:cb:
e0:6b:6c:01:c0:69:e2:94:d7:c0:cc:dc:26:39:45:73:d8:5d:
ff:84:55:0b:2f:e5:64:3a:3e:13:e9:f8:b1:6e:1f:74:66:e2:
5d:27:2c:05:d3:23:be:7e:d3:92:fd:64:07:68:9f:a2:79:91:
34:6a:c8:75:92:5a:f2:b3:8a:06:99:60:cc:62:20:10:08:c9:
2a:66:c1:b9:bd:1a:2a:95:f8:98:6b:59:d1:53:90:f7:20:d3:
7b:40:3c:94:dd:8e:f8:f3:4f:aa:2f:3a:fe:ea:0c:76:9d:3b:
29:e4:ec:f3:44:03:35:48:61:57:b6:c3:5f:3f:68:ba:89:33:
ee:53:40:eb:f1:d4:e5:18:a7:f6:ea:42:d8:1b:df:e3:af:64:
24:e2:33:4c:d2:b3:2e:20:62:37:8b:39:ad:a6:6d:1d:f9:da:
79:e9:55:57:43:02:19:76:2e:99:66:fc:f5:5a:e9:44:92:57:
70:3d:d9:64:b5:63:65:3b:f4:20:8d:66:ed:27:01:85:53:1a:
62:7a:ce:e6:98:a1:13:57:01:66:54:12:d2:8b:8e:c7:a4:19:
44:8c:c3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:55:17 2026 by rpki-client