Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
File: 0wUa-GYelCUtF1k103l-nsos2Aw.mft (raw, json)
Hash identifier: Q2W7SlYVXRbRLQ5N266kK+Skc1DcNsNb5a5ArQZAMyo=
Subject key identifier: BB:41:50:CC:D1:C6:D1:68:29:C1:C4:AC:0E:14:2A:93:F3:3C:E4:82
Authority key identifier: D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
Certificate issuer: /CN=d3051af8661e94252d175935d3797e9eca2cd80c
Certificate serial: 019FAA87781BEFF0968CEAD8D4BEEEFD357B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
Manifest number: 133B
Signing time: Tue 28 Jul 2026 21:00:32 +0000
Manifest this update: Tue 28 Jul 2026 21:00:32 +0000
Manifest next update: Wed 29 Jul 2026 21:00:32 +0000
Files and hashes: 1: 0wUa-GYelCUtF1k103l-nsos2Aw.crl (hash: ntJ+SkD1kWGmROE2ADGIFEXxhiKZD07UgyjGk+nI4k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:78:1b:ef:f0:96:8c:ea:d8:d4:be:ee:fd:35:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3051af8661e94252d175935d3797e9eca2cd80c
Validity
Not Before: Jul 28 21:00:32 2026 GMT
Not After : Jul 29 21:00:32 2026 GMT
Subject: CN=bb4150ccd1c6d16829c1c4ac0e142a93f33ce482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a6:60:03:ee:3d:e1:0c:cc:83:ed:a3:a0:cb:
c5:f2:4e:3b:8a:05:d3:01:b4:cf:6b:48:9d:89:6a:
2e:8f:e7:04:e5:a6:6d:32:27:d0:ae:7a:c4:e8:e1:
41:85:c8:68:e8:09:cc:b3:65:0a:9d:92:fa:31:1a:
2c:f8:2b:3a:44:a2:2f:7b:70:70:70:8c:33:b0:30:
38:02:7b:f4:12:03:27:2e:30:16:d4:25:bb:47:a1:
51:8c:6a:27:d5:4b:65:6d:16:7c:b4:5e:42:f5:61:
6d:b0:d3:05:c8:65:c3:74:02:cb:05:bd:90:b6:45:
54:86:fb:8f:60:7b:b5:a7:db:48:eb:1e:ba:0e:fd:
2f:9e:d6:ba:6c:b2:54:db:6f:1b:09:52:83:52:40:
ce:0b:4f:c8:48:ab:65:c9:cc:36:d0:b2:2d:05:69:
40:ed:20:96:e5:74:18:f8:16:0b:36:02:f8:2d:43:
e2:ce:8c:39:4f:64:2b:90:d3:a6:27:4f:38:58:71:
f5:6f:af:63:d5:8a:95:35:f4:66:75:15:09:2b:b5:
99:68:b1:07:d1:ab:af:40:d7:e3:85:2b:d5:e4:3e:
d3:35:b3:cd:21:5e:29:f5:a9:69:04:bf:f2:ba:ff:
5b:a1:04:33:80:0a:f8:ac:17:44:9e:5d:3f:93:0f:
b2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:41:50:CC:D1:C6:D1:68:29:C1:C4:AC:0E:14:2A:93:F3:3C:E4:82
X509v3 Authority Key Identifier:
keyid:D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:2a:db:0d:a9:50:da:8e:0d:bb:11:0a:a0:5c:da:08:f4:1a:
3f:35:d5:4e:9a:8c:5a:10:53:b9:de:c3:43:82:48:a9:bc:6e:
7b:b1:3b:9c:b0:bd:7f:7e:11:22:66:75:1b:30:66:f0:2d:d9:
fb:a4:d1:a7:d9:72:4a:03:22:cc:3e:27:02:ad:c1:15:0e:e0:
f2:8c:05:9f:86:5c:8b:b9:c9:cb:5d:1c:6f:6d:90:b4:ca:a1:
bb:a7:26:aa:80:78:55:9e:db:b2:fa:49:b7:95:a7:cf:11:b6:
6a:d3:7b:d4:d8:95:a3:7f:68:26:a5:a0:28:46:f5:7f:ae:e3:
69:62:e4:6d:2e:88:1b:e2:72:6d:f5:31:50:57:a5:7a:c2:ca:
84:b9:3d:0c:83:65:de:e3:14:96:57:a1:f1:b7:42:94:c7:f4:
1c:f9:03:3b:96:01:c6:96:67:20:55:0e:2c:7b:2f:b3:c1:29:
eb:b0:47:77:c0:e6:c5:32:1f:e1:53:ec:9f:bf:6e:91:94:0f:
c3:8f:42:9b:fa:0d:a6:56:fa:d3:ea:b6:91:d1:84:bc:b1:d6:
d6:00:8c:56:05:4e:94:90:59:2d:44:fc:a5:71:13:a0:34:2c:
9f:99:b1:16:3f:48:19:bb:b1:d5:76:ad:de:18:09:cc:be:79:
7d:f8:49:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:47:48 2026 by rpki-client