Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
File: DWb-4PMIhlf7_SOngt9Xec-ROmM.mft (raw, json)
Hash identifier: +L9EpHbJT+q55GQrDOH04fGKFdUzSspHZcQGMFEplTM=
Subject key identifier: 99:ED:A3:87:9D:48:6C:BD:54:CB:F9:24:F4:57:8C:94:55:C1:7C:CE
Authority key identifier: 0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
Certificate issuer: /CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Certificate serial: 019FA82B70B3084EA28D457285690AFC3D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
Manifest number: 1292
Signing time: Tue 28 Jul 2026 10:00:46 +0000
Manifest this update: Tue 28 Jul 2026 10:00:46 +0000
Manifest next update: Wed 29 Jul 2026 10:00:46 +0000
Files and hashes: 1: DWb-4PMIhlf7_SOngt9Xec-ROmM.crl (hash: AC/nlgX1HQ5QFP4C1SQ/MecZxz/h2Rt7UDVkCd0Y2R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:70:b3:08:4e:a2:8d:45:72:85:69:0a:fc:3d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Validity
Not Before: Jul 28 10:00:46 2026 GMT
Not After : Jul 29 10:00:46 2026 GMT
Subject: CN=99eda3879d486cbd54cbf924f4578c9455c17cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:31:70:26:a8:96:c5:b7:be:92:f4:8f:6c:
b7:8b:4a:49:41:ab:fe:ba:42:d2:36:4f:cc:43:42:
22:74:e2:30:ee:5c:66:0a:73:58:3e:a7:b6:e4:da:
f6:1f:6c:04:4f:51:08:82:75:a0:62:5a:5b:09:16:
22:96:ed:ad:38:af:33:94:a0:43:cd:6b:6e:96:0f:
7e:a3:4e:f2:53:a4:af:7d:a0:ac:ff:79:17:3d:d8:
02:bc:94:a5:39:fd:9c:99:a4:57:18:48:41:8a:04:
d4:a1:ce:83:df:fb:c3:65:22:cd:42:90:0f:9f:d7:
c2:cf:b7:14:33:e8:b3:6c:3c:47:a4:d6:9c:ec:9e:
7f:8b:f9:3b:55:e3:eb:82:32:86:02:2a:82:64:64:
3a:82:0e:8c:34:ac:08:32:82:84:2e:f3:0c:58:5a:
b4:e3:74:25:db:fd:ce:eb:d0:55:6c:9d:4a:e7:76:
6a:a1:5f:1b:2a:84:54:be:f3:08:83:9c:e0:66:e2:
c0:ae:a0:3c:a6:5d:71:4a:02:ad:c2:e5:12:b5:bc:
b2:30:b5:7e:2a:b6:6d:47:02:29:6d:a8:fe:3f:26:
c1:21:a5:cf:e9:31:6d:ec:db:96:b4:52:99:45:5a:
8c:54:37:2e:41:09:ea:29:86:bf:af:b0:6d:ed:2f:
8b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:ED:A3:87:9D:48:6C:BD:54:CB:F9:24:F4:57:8C:94:55:C1:7C:CE
X509v3 Authority Key Identifier:
keyid:0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9a:d1:45:b0:ce:9b:72:55:6c:9e:96:b6:88:bf:ab:6d:6e:
39:5c:dd:e4:6a:87:1f:5e:cf:9a:e0:56:0e:fc:18:9a:78:76:
88:7c:52:34:9e:bf:9e:76:d5:28:6b:17:21:c4:e6:20:fd:2a:
3f:a7:02:5f:1f:9c:4e:b3:87:ea:40:d6:92:ac:54:67:49:dd:
5e:a3:41:6e:45:bc:28:a8:95:84:7c:30:29:70:ec:48:60:86:
96:a4:9f:a7:c1:7f:06:8e:f3:87:76:42:8e:92:ce:ec:8c:a7:
13:2e:7a:e8:12:aa:9d:a2:ad:91:e9:e4:bc:90:4a:26:c2:1d:
d6:f1:69:b7:29:0a:8c:39:93:99:d7:f4:27:08:f4:88:3e:50:
ae:f1:23:72:e7:85:a0:29:be:d9:ad:0b:65:b0:34:cd:6d:2a:
98:de:26:96:6d:37:b7:9e:7d:23:e8:af:41:b4:e0:6e:e6:3b:
03:53:5a:95:23:8a:2b:e9:ee:7a:2f:a2:13:ee:8b:cf:9a:6b:
6d:21:4c:52:3b:46:f7:bd:7d:c7:2a:fc:0b:45:64:91:43:f5:
cc:76:8e:95:00:9d:7b:be:7a:b7:0a:fc:df:1f:d6:81:9d:1e:
c1:da:25:b8:25:4c:c7:a2:fc:62:f4:f3:29:fd:eb:16:bf:ca:
79:8b:2c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:48 2026 by rpki-client