Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
File: DWb-4PMIhlf7_SOngt9Xec-ROmM.mft (raw, json)
Hash identifier: 9Z3UFWOVdUJfIv6CxqtF2Oaa0rsG8MHDvGCBgIudwJk=
Subject key identifier: 55:37:DA:26:88:93:97:7E:2A:8F:FA:40:4C:A6:68:0C:10:8C:03:BB
Authority key identifier: 0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
Certificate issuer: /CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Certificate serial: 019D98F4EFC6ABF34A9E2A87DA90941C4A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
Manifest number: 1181
Signing time: Fri 17 Apr 2026 01:01:22 +0000
Manifest this update: Fri 17 Apr 2026 01:01:22 +0000
Manifest next update: Sat 18 Apr 2026 01:01:22 +0000
Files and hashes: 1: DWb-4PMIhlf7_SOngt9Xec-ROmM.crl (hash: 6NFXuIgO75WYyeFRFhqoxyYDLHoGB0XgMdvVouCTIXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:ef:c6:ab:f3:4a:9e:2a:87:da:90:94:1c:4a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Validity
Not Before: Apr 17 01:01:22 2026 GMT
Not After : Apr 18 01:01:22 2026 GMT
Subject: CN=5537da268893977e2a8ffa404ca6680c108c03bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:37:0e:68:dc:56:c2:2b:a2:4f:10:26:4d:f8:
f1:2c:87:85:66:49:b5:a3:71:83:41:5b:06:36:93:
1e:bc:ad:f7:de:aa:3c:e9:8e:ec:81:43:01:43:dc:
5f:af:47:ab:6d:e1:c2:48:64:64:3b:80:41:8e:b9:
d4:c6:e4:c9:0b:a7:7c:c5:2d:a1:88:21:55:0c:fc:
63:7a:9d:53:3e:b7:4e:f6:3e:05:00:39:06:dd:3a:
44:93:a6:3c:26:ef:80:3b:76:96:e5:69:b1:a4:09:
5b:e8:f1:95:38:08:ce:77:4e:84:e0:25:da:8d:8e:
77:c7:3b:14:da:95:bc:3e:61:fd:7e:26:44:16:14:
23:e3:84:b4:32:9f:2c:24:fe:04:1a:24:68:f6:08:
b2:1a:24:e0:83:06:5a:25:f3:f6:6e:63:0a:c6:d0:
1a:ba:5c:96:c2:09:3d:90:99:6d:36:69:9a:2d:f1:
be:77:24:ef:3e:e3:05:94:67:5b:fb:1a:17:00:05:
e2:86:59:9f:a3:9b:82:72:71:76:a2:8f:12:9e:39:
49:5b:18:dd:05:7b:6a:79:1f:73:8b:b4:7f:f1:1e:
23:13:af:4d:56:67:85:9d:2b:c0:bc:77:7c:a5:79:
ea:89:f7:6c:56:5d:41:e0:86:cc:50:ea:4a:88:00:
98:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:37:DA:26:88:93:97:7E:2A:8F:FA:40:4C:A6:68:0C:10:8C:03:BB
X509v3 Authority Key Identifier:
keyid:0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ca:a9:4f:59:e9:e4:8a:b0:7d:69:d1:0b:a2:03:e9:b3:6a:
ec:6a:1c:4e:21:95:d6:11:8f:92:66:58:cf:cb:c8:12:63:95:
98:ba:4a:e9:51:74:27:8e:37:68:d7:49:a7:7d:a3:ea:0b:23:
d0:ab:ce:15:94:fa:25:0a:4e:24:07:6e:3d:e9:55:3d:15:87:
d1:bf:d3:7a:eb:d9:fb:0b:6e:91:ee:f3:a4:3d:c3:8b:ff:dd:
d6:c4:38:65:55:df:5c:71:16:b3:9c:8c:79:cb:fe:76:fa:59:
fe:2f:06:a1:6b:94:74:57:a9:3b:53:5c:2d:06:17:66:2b:36:
08:88:0e:5e:8b:8b:5d:7c:78:f9:4d:a5:8a:3a:45:02:ea:37:
7e:89:1f:58:83:eb:54:65:70:54:1e:82:6e:2e:3e:3e:1f:10:
5b:72:56:a4:37:1a:9d:2d:5a:d3:ec:f5:8e:5b:1f:9b:6e:88:
2c:50:39:e9:b6:a9:20:dd:a3:70:01:a2:78:2e:6c:d0:ed:23:
3e:c1:05:d6:25:98:4a:65:55:2b:98:0e:ce:2e:46:de:a0:70:
ba:46:86:66:6c:f1:7a:e3:47:25:f5:e4:b3:01:4d:89:00:89:
5c:35:38:0e:a8:e6:9d:92:5f:09:c6:0d:f9:89:50:b1:79:96:
cf:af:98:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:43:46 2026 by rpki-client