Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
File: oMWM0HH3gLesNAwBROsE-1DMu_E.mft (raw, json)
Hash identifier: 8GEXYJAmfDo3QMcg5S2AAO5S0UOT7XYOaFLA4iTlv9Q=
Subject key identifier: C1:30:F2:ED:44:EE:25:F8:FB:E9:65:91:06:BF:79:73:87:C3:84:03
Authority key identifier: A0:C5:8C:D0:71:F7:80:B7:AC:34:0C:01:44:EB:04:FB:50:CC:BB:F1
Certificate issuer: /CN=a0c58cd071f780b7ac340c0144eb04fb50ccbbf1
Certificate serial: 01A196C4BD6AD0AEEB87FD003E55E01B2B9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
Manifest number: 1AC3
Signing time: Sun 01 Nov 2026 11:00:38 +0000
Manifest this update: Sun 01 Nov 2026 11:00:38 +0000
Manifest next update: Mon 02 Nov 2026 11:00:38 +0000
Files and hashes: 1: ZbTeBAO3QTTIszF0pdw52UodjGY.roa (hash: Zcq4v6bJvVoVndPkmRTnPcyoC19uifQNUAxqTObWOg4=)
2: oMWM0HH3gLesNAwBROsE-1DMu_E.crl (hash: zwHyh9YD92saO1kGFin0uz0r8N5xOJi3E23A2jwjfyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:c4:bd:6a:d0:ae:eb:87:fd:00:3e:55:e0:1b:2b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0c58cd071f780b7ac340c0144eb04fb50ccbbf1
Validity
Not Before: Nov 1 11:00:38 2026 GMT
Not After : Nov 2 11:00:38 2026 GMT
Subject: CN=c130f2ed44ee25f8fbe9659106bf797387c38403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:6f:8f:7e:b0:4b:b4:64:b5:60:e1:06:57:72:
28:7e:4c:28:90:58:df:d3:63:f0:01:6f:b6:6f:95:
6f:31:90:c7:f5:56:8c:fe:1b:58:a1:25:6c:ef:57:
83:13:13:db:8e:ac:fc:9f:13:01:3b:ce:1f:33:cd:
f1:54:3d:de:55:01:58:94:12:ec:6c:10:37:7d:e8:
69:98:f8:e9:bf:06:f7:16:7c:e1:15:6f:3d:95:25:
ea:58:4c:ea:fd:a3:d5:bf:08:ed:b0:d2:14:0d:a7:
27:dc:08:29:6f:98:22:90:cd:a8:33:4b:a3:f0:05:
3a:6a:4c:f7:3f:99:e1:bb:e9:7f:c5:63:6a:89:0a:
8c:96:2a:35:31:89:7d:ea:78:f7:d2:0a:65:fe:66:
d0:73:0d:00:02:05:fc:8e:be:45:42:a7:ab:8e:b4:
c8:d0:c7:ca:92:db:72:f3:74:55:db:0a:09:30:cb:
d5:0f:8f:3d:3e:51:37:cb:1b:aa:b9:a5:e5:1e:4d:
6e:7d:04:b1:22:ed:3d:dd:90:2d:83:31:0e:57:22:
3a:19:77:d4:c2:5a:e5:73:21:85:42:92:11:12:8f:
d2:bc:1f:04:46:b7:b0:48:35:54:dc:34:94:74:e0:
0a:e9:e1:03:f6:72:85:8b:af:0d:8c:9b:4f:fb:6a:
89:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:30:F2:ED:44:EE:25:F8:FB:E9:65:91:06:BF:79:73:87:C3:84:03
X509v3 Authority Key Identifier:
keyid:A0:C5:8C:D0:71:F7:80:B7:AC:34:0C:01:44:EB:04:FB:50:CC:BB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:89:64:ba:c5:3e:9b:2e:75:d8:25:f5:a8:36:3e:d7:f9:09:
37:d9:e2:bf:f7:e3:2b:fa:c3:b3:f9:b4:a4:9d:51:a4:fe:ef:
02:f0:15:81:95:68:e2:cc:6f:87:af:ee:db:bb:39:de:37:de:
15:49:04:16:d2:1a:ff:03:1b:c5:53:84:4c:97:8c:76:ab:63:
e6:f9:7f:ee:69:93:dd:63:bc:84:14:62:c9:87:8f:18:ff:de:
58:b6:2c:e2:c8:0f:d5:42:fc:38:be:81:c3:55:25:f3:a5:e3:
18:b0:e3:12:75:4b:c4:7f:86:27:b0:81:8b:26:d4:98:ed:b1:
9b:11:07:98:cb:9b:40:f5:e3:f5:08:d9:ef:12:8e:40:13:8e:
9b:a1:d1:43:2f:9b:cd:7b:4f:33:3e:d8:de:0d:a9:35:d5:7f:
69:19:53:41:55:6f:b8:7f:d5:e5:3a:69:23:0c:ee:cb:ed:4d:
41:04:f6:3d:e4:e9:2e:be:e4:51:27:48:ec:0a:29:72:37:6f:
99:4b:80:1a:8c:1b:f5:98:61:ca:01:c9:6c:f6:88:fa:77:f8:
ab:14:a6:56:dd:49:41:cb:2f:d7:8e:ba:85:f1:08:0a:94:79:
c3:87:b0:46:db:e3:85:e0:04:eb:6c:e7:5c:d9:55:89:29:2d:
88:07:72:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:26:06 2026 by rpki-client