Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
File: DWb-4PMIhlf7_SOngt9Xec-ROmM.mft (raw, json)
Hash identifier: 0MdtmXY7pZZKSOtxLzkFDMYquq5L3+4BxskuMA14kVc=
Subject key identifier: 90:14:AC:03:34:9D:E1:33:7F:CF:37:F0:C9:2C:E9:BE:B5:D2:91:F0
Authority key identifier: 0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
Certificate issuer: /CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Certificate serial: 01A1C10A5B0255D85379A90B8E3400AFD75F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
Manifest number: 13A8
Signing time: Mon 09 Nov 2026 16:00:43 +0000
Manifest this update: Mon 09 Nov 2026 16:00:43 +0000
Manifest next update: Tue 10 Nov 2026 16:00:43 +0000
Files and hashes: 1: DWb-4PMIhlf7_SOngt9Xec-ROmM.crl (hash: L+G0XKJwnGmdZJtojV4EzH0hW1TyAWIQPBiLJ57Yap4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:0a:5b:02:55:d8:53:79:a9:0b:8e:34:00:af:d7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Validity
Not Before: Nov 9 16:00:43 2026 GMT
Not After : Nov 10 16:00:43 2026 GMT
Subject: CN=9014ac03349de1337fcf37f0c92ce9beb5d291f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:75:3a:f2:59:30:ea:e3:53:4d:9d:58:23:26:
fb:45:e3:4a:bf:88:e3:24:95:48:1d:9c:16:70:6c:
34:6c:69:fc:a7:00:fd:88:9d:9d:ad:f8:68:d2:f1:
c1:58:f4:8a:d5:e3:81:b9:b8:c3:a7:19:06:3d:62:
ef:22:50:71:90:32:d4:61:62:41:24:32:92:f5:4c:
31:d1:6b:25:6a:f7:22:f3:21:2a:cb:98:4f:76:4a:
75:bb:4c:78:6e:0c:c7:e0:ee:15:b6:94:19:96:70:
fe:82:95:59:8e:67:4b:86:36:0a:fb:c2:f6:d2:51:
f9:bd:f5:d7:8a:46:6a:62:9b:55:a5:aa:28:c7:a6:
88:cf:21:a4:48:d9:de:df:ca:cd:46:1e:52:c6:eb:
77:22:78:a0:a3:47:66:bc:45:c5:67:47:b5:b7:62:
4f:5b:a5:db:20:a5:ee:44:fd:65:e5:a2:e2:c7:b7:
61:bc:08:24:2e:0f:d0:44:8e:dd:52:a6:bb:b0:9b:
9f:be:6c:83:fd:15:1d:1f:55:d5:38:d3:70:16:5a:
34:21:a9:e5:bb:02:6c:99:f5:9b:7e:1f:71:3a:53:
7a:b5:6f:c4:3a:83:ff:df:d6:3f:44:27:21:28:a6:
14:0e:57:fb:4c:f8:56:af:25:41:1c:59:af:35:bd:
48:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:14:AC:03:34:9D:E1:33:7F:CF:37:F0:C9:2C:E9:BE:B5:D2:91:F0
X509v3 Authority Key Identifier:
keyid:0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ed:43:68:be:6c:d2:c0:0b:f8:9c:c3:b7:3a:83:fe:57:b7:
21:02:13:94:95:2a:92:c0:7c:1e:ef:22:97:6c:35:bf:eb:55:
07:6d:a2:0a:06:0a:a7:88:f0:ee:cb:9f:3d:c9:31:20:92:c4:
f7:6f:dc:62:7c:a8:99:7e:3f:90:5a:4a:16:a6:73:5d:e2:19:
bc:ee:5e:6f:ac:f3:cb:4b:33:7a:8a:e6:ef:d7:96:83:28:6a:
24:05:f7:fb:2a:d5:d3:b9:43:dc:d0:2c:f1:b2:43:9e:96:db:
4f:69:52:52:10:15:31:06:22:3f:5f:03:d0:80:fe:98:50:e6:
9d:8f:95:e0:8f:90:13:48:31:88:6d:0e:b4:62:df:32:83:11:
fd:ea:f7:48:b3:8d:f6:8d:fe:e8:5f:83:0a:1d:91:b2:f8:51:
94:67:71:d0:8d:42:8d:35:0c:17:fb:4a:ad:56:51:99:0a:7b:
4c:95:a7:68:a0:6a:3c:cb:43:2a:86:45:c2:3c:5e:d5:a5:7f:
05:d2:44:4f:67:ae:66:e2:43:0d:17:00:93:52:28:ed:dd:9b:
77:41:ee:1b:79:a9:96:f1:91:2d:23:24:52:a2:de:33:65:7e:
4c:4b:68:dc:75:f8:7a:00:90:d0:3e:9b:a4:98:16:c4:55:ca:
1c:d9:d8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 01:35:52 2026 by rpki-client