Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
File: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft (raw, json)
Hash identifier: //FLZXCcR4mRNHfrofTK+0kLp3by0V3mhVrG/VuOg2c=
Subject key identifier: 93:99:29:E0:BD:BA:A8:3D:7E:78:4F:AE:E5:15:F2:D3:B2:FE:2F:D1
Authority key identifier: D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
Certificate issuer: /CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Certificate serial: 019D394124F56E1DED1F93F5AC2A11B5FCE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
Manifest number: 0E12
Signing time: Sun 29 Mar 2026 11:01:03 +0000
Manifest this update: Sun 29 Mar 2026 11:01:03 +0000
Manifest next update: Mon 30 Mar 2026 11:01:03 +0000
Files and hashes: 1: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl (hash: NLWrZ7/eqiy0CmLv+M1EH2l4MFKIbcTUtXYYChHtFEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:24:f5:6e:1d:ed:1f:93:f5:ac:2a:11:b5:fc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Validity
Not Before: Mar 29 11:01:03 2026 GMT
Not After : Mar 30 11:01:03 2026 GMT
Subject: CN=939929e0bdbaa83d7e784faee515f2d3b2fe2fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ca:c1:de:19:fa:16:5f:57:9c:00:92:51:70:
89:b1:36:bc:b6:05:d1:a0:77:9b:0c:ea:07:6e:08:
83:3e:85:d6:88:6b:9e:d1:7b:f2:7a:8c:cb:c9:5a:
d1:25:28:68:98:ed:3e:e7:9e:6d:7e:8f:6a:2a:87:
08:72:57:99:3e:5a:4a:1b:cd:43:7d:b0:fb:a3:10:
a3:c9:a9:13:b4:03:4d:98:ac:34:d1:78:cf:c5:bb:
62:ec:d1:ce:55:06:5d:21:d4:85:c7:a5:36:3a:7f:
db:71:88:1b:87:1c:43:fb:65:1d:e6:fd:20:58:21:
44:9e:7a:08:26:71:79:f6:04:dc:96:4e:99:53:c4:
da:c4:9b:e0:22:0c:ff:12:ec:24:ee:d0:17:f6:a0:
37:7f:a0:af:92:11:db:3f:83:c2:d9:61:bf:00:aa:
f2:9c:e8:25:81:d4:5e:84:94:6b:49:c6:a8:8b:06:
f7:9d:57:4d:40:aa:62:45:d0:1d:31:b9:ac:e5:e6:
af:fd:69:32:53:55:fd:43:97:ea:0a:a9:16:72:31:
08:91:ad:f1:d7:21:68:a2:b1:cd:b1:6e:0e:a2:96:
ea:e1:e5:45:ed:9a:5a:f7:4f:b3:5d:68:da:a3:04:
89:d9:0a:1c:b0:ec:87:e4:62:f4:81:e7:4b:8c:03:
fd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:99:29:E0:BD:BA:A8:3D:7E:78:4F:AE:E5:15:F2:D3:B2:FE:2F:D1
X509v3 Authority Key Identifier:
keyid:D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:57:dd:99:37:7a:aa:70:77:1c:f8:10:48:c3:40:0f:14:42:
26:e1:82:17:be:b6:43:16:03:fb:a0:f7:72:58:9d:90:a2:c3:
75:f1:55:4a:9a:ac:35:c5:0a:e0:06:46:6a:b5:22:6e:1d:ed:
ee:6d:d9:db:2e:dc:39:3f:5b:21:15:50:3c:1c:ed:3b:f2:c0:
c6:41:0f:ae:2f:aa:74:dc:d2:ca:37:92:ca:1e:a0:e4:0f:e9:
62:03:3d:b0:a5:d7:87:b3:23:57:6c:9c:e2:6b:4a:e2:2f:a2:
da:99:5b:fd:5d:ca:13:98:c0:1f:a3:14:42:d6:cc:a7:d1:9c:
72:62:54:c9:53:1c:32:d2:89:d6:83:0c:a4:24:d1:69:f5:a3:
55:82:3b:e4:2d:60:85:08:b0:3e:7b:18:0e:f6:a3:62:c9:88:
22:ea:82:33:4c:07:4a:50:51:da:2c:00:06:8b:ab:4f:ed:a8:
16:48:ce:4c:ac:9c:a8:c1:03:1c:17:6e:5f:63:0b:5c:c4:46:
21:b9:dc:56:b6:3c:40:fe:e2:6d:18:c0:87:ec:a2:d4:f6:92:
2b:02:47:ee:65:ed:38:f2:9c:bb:88:b1:1f:cf:44:1c:30:88:
80:e1:cb:c1:d3:c3:1b:d3:b4:f9:7d:6b:50:d9:a9:5b:32:54:
6e:a9:b3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:56 2026 by rpki-client