Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
File: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft (raw, json)
Hash identifier: eamfPkueJJ5LTYTiu1wRldpUzssJdVoUmW0Vc6N+w7A=
Subject key identifier: 1B:82:42:C1:43:ED:BA:D5:6E:57:A6:B3:11:D8:74:83:F5:7C:C8:3C
Authority key identifier: D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
Certificate issuer: /CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Certificate serial: 01A13E94E91312302483ADC34BFEE0DF3F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
Manifest number: 1027
Signing time: Thu 15 Oct 2026 08:01:48 +0000
Manifest this update: Thu 15 Oct 2026 08:01:48 +0000
Manifest next update: Fri 16 Oct 2026 08:01:48 +0000
Files and hashes: 1: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl (hash: F+IEFOCs1zcoYwockFOJDrDBk98H8lYtiGpYSkMc97o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:e9:13:12:30:24:83:ad:c3:4b:fe:e0:df:3f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Validity
Not Before: Oct 15 08:01:48 2026 GMT
Not After : Oct 16 08:01:48 2026 GMT
Subject: CN=1b8242c143edbad56e57a6b311d87483f57cc83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3e:38:57:53:6b:44:fd:50:82:f2:1c:34:df:
aa:6c:c1:7e:c9:45:3b:5d:18:90:59:81:32:79:b3:
51:73:6c:11:84:3b:71:c8:f5:de:8f:96:ad:f3:ab:
ec:ed:0b:30:e4:cb:20:ec:f5:ae:6f:09:44:82:8f:
a2:e1:6f:32:9f:c3:8a:f7:c2:80:06:e2:e8:32:e2:
5a:f0:00:d7:4c:c1:c3:2e:2f:4b:27:6e:1b:e2:96:
e9:e4:82:b4:22:e2:61:27:11:08:d4:1c:f7:fb:1e:
04:75:b1:22:80:55:80:0c:37:b9:dd:2c:68:9f:48:
10:dc:bc:91:c7:d4:f9:a2:b1:36:78:e6:5d:2e:c9:
3a:92:e2:3d:ab:7c:0c:b8:aa:04:56:a9:52:06:57:
1c:57:c2:64:11:16:45:7a:dc:d6:cf:fb:a6:21:69:
d8:de:57:63:bd:57:6b:a7:c5:77:7d:db:b6:fb:ea:
f0:40:2a:86:41:27:46:ca:07:df:11:0c:cd:3e:ad:
0b:da:62:21:1a:1a:ad:92:6c:ac:5b:fc:01:98:2a:
f8:a2:ea:01:ad:11:77:ad:03:03:7a:34:31:19:cc:
3a:1e:a4:8a:17:a2:2b:fd:c5:10:74:99:b6:f7:9e:
14:d5:14:a6:e6:23:38:f7:cd:21:f0:0a:a6:2e:ea:
50:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:82:42:C1:43:ED:BA:D5:6E:57:A6:B3:11:D8:74:83:F5:7C:C8:3C
X509v3 Authority Key Identifier:
keyid:D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:92:d3:6c:d9:31:51:ac:6b:b4:77:af:77:ec:20:1d:b2:d2:
b2:b4:4c:25:b2:18:e2:c6:67:ea:3d:5d:39:32:a6:cd:ab:55:
b7:92:25:26:02:75:50:46:b8:13:f6:8f:a0:3b:ce:40:26:13:
80:cf:68:6c:57:7b:47:1e:c4:eb:09:23:de:99:3a:e1:5c:64:
99:fa:5a:fc:88:fe:a0:9b:4e:80:30:77:c2:c6:3c:16:90:15:
c3:f2:5e:af:98:63:fb:6a:4d:cf:1c:f5:e5:dd:57:2f:62:cd:
a5:24:cd:55:4f:0b:63:37:32:ce:17:fc:d4:09:03:5a:f9:01:
7a:ab:a5:23:c9:17:aa:06:a1:33:36:00:ae:12:bf:e7:46:6d:
57:00:b8:9e:f1:14:b3:d5:63:f6:ad:45:41:4f:b0:64:c8:19:
eb:fc:cb:d1:91:e9:95:a3:8f:75:2d:c6:bb:b1:32:24:74:3f:
36:ef:82:88:03:65:1a:b9:f6:41:60:45:c5:f1:bb:90:2e:20:
ca:3d:a1:a0:59:83:72:58:b5:41:db:28:c5:9f:3c:12:2f:ca:
35:fe:07:f4:45:db:63:35:c3:a5:3d:28:b5:5f:81:58:bd:c2:
1b:81:79:3c:13:a3:f7:b6:f1:32:a5:14:e2:d8:ca:be:4c:39:
68:aa:25:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+lOkTEjAkg63DS/7g3z+OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMDk4ZTVlMjBkNzhmOTRlNjk2YzEzNzJiNTYyM2ZmYTcx
ZDk0ZDAwHhcNMjYxMDE1MDgwMTQ4WhcNMjYxMDE2MDgwMTQ4WjAzMTEwLwYDVQQD
EygxYjgyNDJjMTQzZWRiYWQ1NmU1N2E2YjMxMWQ4NzQ4M2Y1N2NjODNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T44V1NrRP1QgvIcNN+qbMF+yUU7
XRiQWYEyebNRc2wRhDtxyPXej5at86vs7Qsw5Msg7PWubwlEgo+i4W8yn8OK98KA
BuLoMuJa8ADXTMHDLi9LJ24b4pbp5IK0IuJhJxEI1Bz3+x4EdbEigFWADDe53Sxo
n0gQ3LyRx9T5orE2eOZdLsk6kuI9q3wMuKoEVqlSBlccV8JkERZFetzWz/umIWnY
3ldjvVdrp8V3fdu2++rwQCqGQSdGygffEQzNPq0L2mIhGhqtkmysW/wBmCr4ouoB
rRF3rQMDejQxGcw6HqSKF6Ir/cUQdJm2954U1RSm5iM4980h8AqmLupQoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuCQsFD7brVblemsxHYdIP1fMg8MB8GA1UdIwQY
MBaAFNMJjl4g14+U5pbBNytWI/+nHZTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHdtT1hpRFhqNVRtbHNFM0sxWWpfNmNkbE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81MzYxY2MtYjA0ZC00NDY1LTkzOGQt
NjE3YTI2MzI3ZTk4LzEvMHdtT1hpRFhqNVRtbHNFM0sxWWpfNmNkbE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC81MzYxY2MtYjA0ZC00NDY1LTkzOGQtNjE3YTI2MzI3ZTk4
LzEvMHdtT1hpRFhqNVRtbHNFM0sxWWpfNmNkbE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnpLTbNkx
UaxrtHevd+wgHbLSsrRMJbIY4sZn6j1dOTKmzatVt5IlJgJ1UEa4E/aPoDvOQCYT
gM9obFd7Rx7E6wkj3pk64Vxkmfpa/Ij+oJtOgDB3wsY8FpAVw/Jer5hj+2pNzxz1
5d1XL2LNpSTNVU8LYzcyzhf81AkDWvkBequlI8kXqgahMzYArhK/50ZtVwC4nvEU
s9Vj9q1FQU+wZMgZ6/zL0ZHplaOPdS3Gu7EyJHQ/Nu+CiANlGrn2QWBFxfG7kC4g
yj2hoFmDcli1QdsoxZ88Ei/KNf4H9EXbYzXDpT0otV+BWL3CG4F5PBOj97bxMqUU
4tjKvkw5aKolXw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:35 2026 by rpki-client