Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
File: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft (raw, json)
Hash identifier: KAMtw/9wvV42dRAsag8JKx6T0SXK7Eyv8sgGZGQuPnM=
Subject key identifier: 0E:14:9A:C3:13:71:E6:73:1E:A6:A6:EB:2B:50:2F:04:4E:DF:78:A8
Authority key identifier: D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
Certificate issuer: /CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Certificate serial: 019FA906CCFEDEE0671ACA797974BE7B5381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
Manifest number: 0F55
Signing time: Tue 28 Jul 2026 14:00:22 +0000
Manifest this update: Tue 28 Jul 2026 14:00:22 +0000
Manifest next update: Wed 29 Jul 2026 14:00:22 +0000
Files and hashes: 1: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl (hash: bGg60y/2NjzMrS/cNrsSAiujm/5fvX4jHIoc84hK1j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:cc:fe:de:e0:67:1a:ca:79:79:74:be:7b:53:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Validity
Not Before: Jul 28 14:00:22 2026 GMT
Not After : Jul 29 14:00:22 2026 GMT
Subject: CN=0e149ac31371e6731ea6a6eb2b502f044edf78a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cf:0c:92:0e:b5:b9:99:2a:20:1d:d0:d4:34:
12:2e:e2:a4:dd:fc:ae:0f:a7:b0:01:81:1d:76:95:
49:a8:ef:8d:3a:68:55:bc:74:0b:73:78:29:20:e5:
54:c3:6d:7c:df:33:f2:84:f2:04:70:45:78:21:a3:
31:67:2a:8b:12:2f:c8:1c:cf:35:db:21:f2:42:ec:
07:e4:d8:98:55:27:14:f5:00:a3:5a:60:04:3d:09:
a2:3d:4f:91:a6:c4:58:d1:66:67:6d:49:3d:62:ec:
2b:06:8d:65:b0:51:d8:9c:14:0c:b4:26:57:08:83:
03:11:c0:96:a6:64:cd:ee:cd:c2:19:a3:83:97:c7:
6b:85:9c:54:2a:86:6a:f9:db:10:05:ac:8f:92:3f:
37:3a:89:c7:5f:28:80:d3:7a:60:3f:bc:4c:e2:52:
0a:81:bf:a9:a8:5c:91:c4:d4:b0:72:cf:fd:4b:4b:
32:80:2b:56:8f:0a:da:d2:1c:dd:92:8c:92:a5:83:
d0:08:b6:37:a0:9d:f6:ee:6f:35:95:aa:d5:5e:4e:
25:8b:cb:1f:43:1f:24:d3:81:9b:64:88:b8:da:5c:
67:78:62:6d:07:7d:6b:6a:eb:0e:c3:11:04:d7:a1:
17:dc:9b:6d:6b:a0:4e:1b:25:f3:8b:6e:23:03:c8:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:14:9A:C3:13:71:E6:73:1E:A6:A6:EB:2B:50:2F:04:4E:DF:78:A8
X509v3 Authority Key Identifier:
keyid:D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e4:9e:e9:8e:a9:22:fb:6e:d7:16:2c:a7:74:3b:66:f1:c9:
14:fb:e9:52:df:79:cf:dd:d4:e2:63:a8:b6:5c:63:98:f8:da:
4d:00:5b:2a:19:7e:02:b0:8d:40:10:6f:f9:5a:9b:28:3d:59:
81:89:6c:7d:c9:37:58:ce:a6:75:4e:94:4d:c5:b7:2e:20:7b:
e9:e4:49:57:4d:8b:0f:7d:54:03:38:bc:43:ef:dd:39:cc:19:
60:27:a8:9b:31:cd:68:25:45:02:58:c8:c2:74:d8:1d:0f:5a:
e0:d7:cb:6f:ae:65:0a:a5:d1:97:52:ca:4c:7e:e0:c9:58:03:
8e:2c:40:91:a9:21:70:ec:ef:94:e0:4b:b3:2a:b1:68:5b:22:
0e:ef:61:30:cb:7b:4d:d0:68:93:16:4f:07:e6:0b:32:69:31:
4d:c1:e2:cb:9f:79:e4:c5:4c:15:1c:54:8b:f9:b0:0e:e2:a1:
4f:5a:c0:38:be:1c:63:1c:c2:da:c5:c0:bf:b3:e1:57:47:c5:
9c:65:0e:d9:9b:3d:70:a7:b2:a2:bb:83:3c:ae:ba:d4:05:34:
be:49:b5:e7:dc:88:55:85:61:4d:8b:04:2c:be:17:3c:b5:36:
cd:29:cb:9b:4f:aa:fe:5a:ca:e3:f2:6f:75:ea:e6:d4:ab:a6:
c9:f2:da:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:05:25 2026 by rpki-client