Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
File: 0wUa-GYelCUtF1k103l-nsos2Aw.mft (raw, json)
Hash identifier: +w/3/OX/BDNa0wdyf0Pjiecw4j9qCpb8+u2rjjqDf3M=
Subject key identifier: 07:AB:EA:97:FA:D4:24:E8:E5:E5:E3:B5:37:A3:9B:D1:07:7C:A1:1A
Authority key identifier: D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
Certificate issuer: /CN=d3051af8661e94252d175935d3797e9eca2cd80c
Certificate serial: 01A1C556367370EABB20B006159756B61465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
Manifest number: 1452
Signing time: Tue 10 Nov 2026 12:02:03 +0000
Manifest this update: Tue 10 Nov 2026 12:02:03 +0000
Manifest next update: Wed 11 Nov 2026 12:02:03 +0000
Files and hashes: 1: 0wUa-GYelCUtF1k103l-nsos2Aw.crl (hash: ysZ4gdb2WpBgtUeVqLWoEx0B12M3t054NnGEedZlsjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 12:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:56:36:73:70:ea:bb:20:b0:06:15:97:56:b6:14:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3051af8661e94252d175935d3797e9eca2cd80c
Validity
Not Before: Nov 10 12:02:03 2026 GMT
Not After : Nov 11 12:02:03 2026 GMT
Subject: CN=07abea97fad424e8e5e5e3b537a39bd1077ca11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:fc:94:64:1b:19:39:e5:34:7a:d7:40:32:b3:
32:bc:a7:ab:92:5f:15:2a:20:72:b6:9a:0b:64:29:
20:b3:e3:13:55:60:8f:22:29:a9:60:b6:f8:ff:4e:
ae:4b:78:94:dd:bd:3e:08:36:8b:e3:72:1e:e5:04:
08:34:54:0d:6b:4b:09:e3:36:5d:e9:d2:be:e6:c3:
26:2b:63:9c:48:bd:05:ed:8a:74:2e:71:99:a4:be:
2c:9e:79:a6:6a:47:cf:bb:fc:5f:0b:8b:51:e4:09:
a2:bd:87:7a:16:0e:2c:6b:18:ed:c2:e0:14:09:6b:
29:0c:82:07:6d:11:a2:74:fc:ad:dd:19:cf:cd:46:
af:2f:98:c8:92:0d:54:52:19:60:b5:fa:14:39:4b:
b0:51:90:cb:96:4c:31:38:f5:a0:5b:aa:ab:b5:41:
ac:69:14:5a:8c:bb:e9:24:a8:74:68:b1:27:cc:43:
36:08:72:96:16:dd:88:af:5c:5b:01:52:59:83:55:
28:c2:d8:a7:9a:10:be:76:03:05:e3:59:ed:7d:2c:
bf:4b:b4:4c:ca:f6:ce:c5:9a:cd:2b:17:cb:4a:b9:
71:6a:84:a5:e5:c3:b8:62:bb:e5:ae:6f:9a:4f:ae:
b0:14:85:e2:d4:82:d9:57:f3:30:76:52:97:f1:be:
49:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AB:EA:97:FA:D4:24:E8:E5:E5:E3:B5:37:A3:9B:D1:07:7C:A1:1A
X509v3 Authority Key Identifier:
keyid:D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:97:f0:40:fd:f0:c6:25:75:66:c4:07:00:43:fc:dc:74:52:
25:b5:6f:12:47:6c:e4:c6:6d:7a:de:cc:dd:da:b5:f1:ba:63:
c3:1a:17:ca:12:11:81:16:63:1c:93:08:bf:b2:7b:97:27:de:
4c:47:55:b9:e7:59:39:1d:0b:44:bf:9b:9f:68:49:c6:5e:e3:
49:22:3c:85:06:f8:bb:84:51:a0:08:51:d0:3f:3b:20:72:c0:
83:6f:c8:ef:d2:19:dd:2f:86:97:ad:9a:80:81:e4:90:93:4a:
89:f5:a5:6a:01:29:10:9f:76:30:ea:e5:cf:82:8e:34:b8:5e:
4b:fe:8a:c5:b4:e2:33:49:d0:83:6c:21:d3:9f:99:d7:5a:dc:
64:fb:81:5f:65:41:f2:8c:86:62:c5:90:39:91:e0:c9:d3:f0:
0e:6b:0e:5f:0c:b0:55:ed:be:21:f3:dc:78:11:57:1b:e5:f6:
46:c5:83:46:63:9a:13:65:f9:6e:6b:f9:09:bd:04:26:fa:0f:
1c:18:17:59:82:62:80:7b:c7:4f:da:c4:3e:5a:f2:fe:67:13:
d0:1c:fd:a3:63:31:16:51:43:7e:ba:2f:f4:a3:de:ed:19:37:
77:10:23:2d:97:aa:09:6d:81:70:02:b2:f3:7b:26:4c:8a:70:
2c:05:71:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 20:24:55 2026 by rpki-client