Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
File: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft (raw, json)
Hash identifier: rDX1a1OYvAUzz7gHm/AKcSuHzNRVDse2yO5KngJrIgM=
Subject key identifier: D7:DC:1E:C2:CB:C6:B5:83:3C:54:A2:D9:EA:D0:3B:50:53:68:8B:0D
Authority key identifier: D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
Certificate issuer: /CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Certificate serial: 019F1830196CD15A8FC37154861D83FD79EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
Manifest number: 0F0A
Signing time: Tue 30 Jun 2026 11:00:33 +0000
Manifest this update: Tue 30 Jun 2026 11:00:33 +0000
Manifest next update: Wed 01 Jul 2026 11:00:33 +0000
Files and hashes: 1: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl (hash: YfFuWNIIfvefymZX7/wkX23r9+xce3jyUa1xBLETv1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:19:6c:d1:5a:8f:c3:71:54:86:1d:83:fd:79:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Validity
Not Before: Jun 30 11:00:33 2026 GMT
Not After : Jul 1 11:00:33 2026 GMT
Subject: CN=d7dc1ec2cbc6b5833c54a2d9ead03b5053688b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:e8:24:6a:34:98:b8:32:4d:52:20:0f:b6:
88:cd:36:16:33:0f:46:51:47:e4:e7:4c:be:87:44:
c5:d3:39:0e:67:8a:b0:cf:52:dc:fb:47:29:06:e4:
9d:7c:77:f7:68:2e:76:a4:bd:42:96:9a:50:ae:19:
bb:81:f8:ff:fe:c6:90:08:6a:43:19:31:0a:c6:c8:
fd:33:45:70:b1:e6:4d:8c:3f:aa:9f:96:3e:1f:9a:
98:b3:6c:43:e8:a9:a5:18:8d:18:19:c9:76:9e:70:
7f:a4:3c:3d:53:06:81:03:86:d1:7b:fb:84:e9:39:
bc:4b:82:0e:8e:4d:4b:75:2e:64:d1:13:d5:35:05:
86:ef:d6:b7:58:ab:46:2b:45:ee:fb:c8:83:28:e5:
3a:78:13:04:0f:3f:3c:34:36:46:64:d4:03:f6:25:
55:4b:1a:40:6f:ba:19:e8:2f:1c:78:3b:97:f0:6c:
43:32:aa:53:68:72:99:af:d0:d7:f8:dd:37:b8:bc:
37:9c:62:9f:7b:9e:6a:5b:2c:fb:6f:4c:6c:78:39:
04:9c:46:03:93:93:2a:0d:8b:c0:3b:2d:11:ed:fb:
c8:75:ac:68:dc:e1:ce:57:85:70:86:2e:e3:e7:2f:
73:b0:66:29:d0:59:3c:b1:8d:8a:86:f7:ff:3e:64:
36:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DC:1E:C2:CB:C6:B5:83:3C:54:A2:D9:EA:D0:3B:50:53:68:8B:0D
X509v3 Authority Key Identifier:
keyid:D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:26:6a:93:04:3c:6c:a6:e1:47:0e:19:af:ce:8e:e6:b1:b4:
31:65:22:f7:f4:03:37:70:db:1c:50:e7:08:3a:89:be:e9:1b:
8a:25:ed:ba:2c:86:0f:58:db:7d:14:99:62:65:23:99:40:72:
ad:41:bc:1b:db:6e:35:37:a0:a8:cd:b4:1c:c4:a7:1e:ea:8e:
4d:91:91:2d:99:86:98:5d:a5:82:ef:2a:39:fe:68:61:17:47:
b8:39:2d:ea:fc:16:a1:b5:b1:43:32:06:94:15:e2:92:24:32:
12:25:09:c7:ea:e6:f9:e4:53:7c:8c:69:d2:2e:28:64:b9:26:
bf:2a:b9:56:d3:86:b9:eb:ef:36:62:28:58:82:3a:71:9b:b8:
9c:d1:cc:bd:f6:18:b0:63:c9:c7:77:12:9d:58:cb:8f:e0:7f:
6c:4c:ed:4c:f5:7b:5a:8f:91:75:c6:f2:6d:df:63:17:ca:60:
a6:34:3c:35:3d:b0:0f:1f:2f:2c:b8:fe:da:22:dd:85:de:b4:
4d:06:4e:78:75:4c:00:d3:59:9c:0b:ef:e3:62:f5:05:46:f5:
7f:be:99:20:c4:65:02:3c:30:ad:c9:d2:9f:d8:c2:66:73:67:
d6:39:6d:8d:88:6b:cd:59:30:60:38:a6:5b:ca:69:11:09:4a:
ef:20:d9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:19:05 2026 by rpki-client