Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
File: DWb-4PMIhlf7_SOngt9Xec-ROmM.mft (raw, json)
Hash identifier: 4W/LOazAnHz2AWhTJBxVNx4wSM8nFUjgcmP8CVeVUT0=
Subject key identifier: 37:C0:25:6B:F5:66:9B:25:50:D7:38:70:7B:C2:5C:CA:03:CA:02:FD
Authority key identifier: 0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
Certificate issuer: /CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Certificate serial: 019CAB6BF13089963D4D6BEF75DADA4EA99F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
Manifest number: 1106
Signing time: Sun 01 Mar 2026 22:01:43 +0000
Manifest this update: Sun 01 Mar 2026 22:01:43 +0000
Manifest next update: Mon 02 Mar 2026 22:01:43 +0000
Files and hashes: 1: DWb-4PMIhlf7_SOngt9Xec-ROmM.crl (hash: Bc1F1BAOa8bO8bL/v1FeBiIyMKNPsDxngrVCjLY/sQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:f1:30:89:96:3d:4d:6b:ef:75:da:da:4e:a9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Validity
Not Before: Mar 1 22:01:43 2026 GMT
Not After : Mar 2 22:01:43 2026 GMT
Subject: CN=37c0256bf5669b2550d738707bc25cca03ca02fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:c0:fc:4e:f7:73:c8:16:b9:03:30:09:b9:
86:e1:f8:8c:9a:cd:41:c9:77:af:dc:a4:05:62:e4:
71:e2:31:0c:7c:a1:83:39:49:c4:c3:97:78:e3:86:
b8:c2:fa:e6:ec:69:49:e8:ed:70:94:1c:a6:d4:84:
e9:e2:32:7c:60:9f:f2:bf:38:b7:9f:3b:95:21:9c:
ee:a5:e7:f7:0a:61:9f:85:6a:ef:c1:ab:ca:02:c4:
b0:7b:fb:ea:cb:46:71:5e:eb:3f:4e:22:e0:3f:22:
21:85:3f:28:83:12:32:49:a9:7f:6a:0d:d1:a9:20:
40:8c:9d:79:16:52:fb:0b:99:9b:d1:40:bc:91:83:
bc:c9:31:8c:e1:6f:f2:b0:1f:b9:96:7e:7b:c9:17:
46:53:e0:30:6e:dc:59:0c:bf:73:ae:01:ea:db:e9:
77:73:ee:d0:3d:61:be:f3:10:ce:a6:db:17:73:cf:
36:f4:62:05:b9:3c:ee:82:22:34:e1:4f:c6:a4:73:
11:ec:98:06:9e:62:7f:fe:cc:fe:9e:65:19:51:08:
18:0d:b5:f0:ad:5a:1f:d6:28:b7:89:14:a4:c6:01:
53:de:75:dc:4a:a2:51:48:95:fa:9b:0f:35:c7:3e:
92:31:9e:d2:bd:a0:55:ec:bb:0d:0a:1e:9d:49:9b:
e4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C0:25:6B:F5:66:9B:25:50:D7:38:70:7B:C2:5C:CA:03:CA:02:FD
X509v3 Authority Key Identifier:
keyid:0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9f:b3:9f:d1:73:ab:c0:70:87:d3:88:fa:47:cf:7c:25:31:
d9:91:74:db:b7:f2:77:cb:b4:a0:7e:b9:95:5c:17:aa:46:5a:
c1:0d:27:70:61:6b:0f:8e:d2:75:fb:4b:77:e9:b2:e6:59:16:
f4:e3:a2:e9:4e:81:e9:89:86:64:ee:e6:21:00:81:fd:09:47:
30:a0:1b:1d:23:9b:f6:08:d5:42:a3:9c:19:55:2b:57:71:2e:
51:02:f1:41:80:c1:69:0f:87:a3:f4:8c:c9:39:04:68:88:ee:
31:22:8e:f9:72:db:2e:cc:22:ba:a9:81:f7:fe:b9:60:4f:ec:
60:6a:ac:f7:26:94:cf:65:2a:21:49:4c:e1:48:c8:96:7a:ac:
d6:9e:b0:32:93:b2:de:22:85:81:6d:d0:a8:c1:03:29:11:f2:
34:c1:2a:45:e1:55:f0:b3:f1:54:6a:7e:fb:0b:40:21:0c:05:
bd:e0:4f:9f:c2:b7:37:4d:1e:9b:6a:31:73:9f:9a:ee:de:42:
12:bc:6d:d0:17:5e:ed:48:7e:0e:71:ac:15:3d:b8:4b:82:52:
bd:0b:1e:ae:04:b4:3d:09:5c:57:60:a8:57:12:5a:83:44:42:
97:49:1f:0b:b9:e7:3e:b8:0c:81:e8:ea:48:09:12:3f:66:38:
77:41:d8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:46 2026 by rpki-client