Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
File: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft (raw, json)
Hash identifier: hl2/ftVS9c6A79Y5cYuNBTA/v9nLeB4rYO9kKWU+kbA=
Subject key identifier: C8:12:5C:7A:15:97:28:6E:99:15:DF:71:4A:D6:C9:C0:50:D1:CB:81
Authority key identifier: D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
Certificate issuer: /CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Certificate serial: 019E3072D92D0193D0C8A6ED42AEE17B76A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
Manifest number: 0E92
Signing time: Sat 16 May 2026 11:01:33 +0000
Manifest this update: Sat 16 May 2026 11:01:33 +0000
Manifest next update: Sun 17 May 2026 11:01:33 +0000
Files and hashes: 1: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl (hash: gvPyBLD25Sel1J8U4JPDXK05anyjgwFsSqUqd1KsJek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:d9:2d:01:93:d0:c8:a6:ed:42:ae:e1:7b:76:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Validity
Not Before: May 16 11:01:33 2026 GMT
Not After : May 17 11:01:33 2026 GMT
Subject: CN=c8125c7a1597286e9915df714ad6c9c050d1cb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:03:2e:46:17:df:33:fd:2b:a9:d5:68:82:
1c:f8:cd:b1:f9:13:3b:a0:bd:c8:99:24:67:4f:5a:
dd:09:1c:c0:47:ef:6f:97:7a:45:e8:8d:77:9b:87:
54:a3:18:d1:b2:4d:9d:a2:8d:d3:cb:23:d4:00:43:
cc:b9:92:f9:c5:23:5d:ba:f2:f8:d5:d9:a0:4f:4e:
fa:1e:f4:f8:58:e4:fa:04:8a:a6:1a:07:8f:bd:5f:
5a:2f:b8:0e:46:69:8e:82:1d:64:fb:4b:23:b7:8e:
90:36:58:fd:78:73:87:c2:7c:33:f8:fe:52:67:c9:
cc:11:81:af:de:83:ab:09:c8:f2:b7:71:04:bd:ae:
aa:75:74:80:5b:82:e8:a6:4f:4b:9d:55:c2:69:f4:
14:f5:ba:96:45:96:b4:c1:3e:3e:25:cb:77:df:28:
a3:83:5a:58:9e:b2:6b:f2:47:1a:42:3c:07:e5:a7:
0e:43:6e:1c:a7:91:87:4a:11:de:49:91:f5:14:76:
67:13:9d:f0:9e:c9:39:db:94:d5:08:2d:2e:cd:40:
4e:39:0b:33:aa:5e:80:99:4f:1c:3e:80:3f:b8:e8:
90:da:b7:61:98:82:17:dc:d7:cf:5d:f8:f7:e8:88:
3b:c1:d8:f6:65:91:e6:0e:6d:55:54:1d:de:fe:03:
f9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:12:5C:7A:15:97:28:6E:99:15:DF:71:4A:D6:C9:C0:50:D1:CB:81
X509v3 Authority Key Identifier:
keyid:D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0a:43:27:fc:cb:67:e0:b9:f5:4a:7a:de:6b:7c:44:a6:db:
a1:fd:b5:62:58:a4:5e:7b:86:62:fa:e5:62:d5:22:2a:90:c6:
3e:a6:d5:dc:aa:ab:d9:96:e0:10:2d:db:36:a7:c0:87:82:6a:
5b:09:e0:ae:6d:d4:36:4c:57:2b:0f:4c:aa:0d:fa:44:29:7a:
d8:5f:66:bf:eb:99:96:90:e8:7b:00:1e:2d:82:ab:73:ba:0b:
66:48:12:a6:8b:da:09:9b:9b:db:4e:26:a7:61:06:a6:70:8a:
cd:39:e2:ee:49:70:84:f9:9a:f1:fd:06:cc:3b:7d:1f:c5:81:
64:06:a1:7d:72:fc:61:20:a0:72:c9:d0:c2:0c:6a:b3:f9:fb:
c4:5e:12:0d:47:78:27:52:50:89:cf:6d:0f:90:4a:69:df:8b:
42:59:ab:f0:4f:e6:1a:e8:ed:bf:e0:32:49:40:2f:90:83:3b:
f3:10:c0:2b:12:c3:90:ab:a6:c2:6c:cb:9c:90:36:df:14:ea:
af:93:7f:bc:a2:9b:77:7b:b5:97:8c:10:a8:7a:1f:74:55:08:
ab:52:1d:7d:1e:ac:e9:3f:f6:22:ef:25:d2:1e:88:7e:75:7f:
54:fa:4a:01:73:82:6b:be:21:ea:84:1d:0f:92:b2:c6:c9:a7:
ff:4d:fa:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wctktAZPQyKbtQq7he3agMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMDk4ZTVlMjBkNzhmOTRlNjk2YzEzNzJiNTYyM2ZmYTcx
ZDk0ZDAwHhcNMjYwNTE2MTEwMTMzWhcNMjYwNTE3MTEwMTMzWjAzMTEwLwYDVQQD
EyhjODEyNWM3YTE1OTcyODZlOTkxNWRmNzE0YWQ2YzljMDUwZDFjYjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSIDLkYX3zP9K6nVaIIc+M2x+RM7
oL3ImSRnT1rdCRzAR+9vl3pF6I13m4dUoxjRsk2doo3TyyPUAEPMuZL5xSNduvL4
1dmgT076HvT4WOT6BIqmGgePvV9aL7gORmmOgh1k+0sjt46QNlj9eHOHwnwz+P5S
Z8nMEYGv3oOrCcjyt3EEva6qdXSAW4Lopk9LnVXCafQU9bqWRZa0wT4+Jct33yij
g1pYnrJr8kcaQjwH5acOQ24cp5GHShHeSZH1FHZnE53wnsk525TVCC0uzUBOOQsz
ql6AmU8cPoA/uOiQ2rdhmIIX3NfPXfj36Ig7wdj2ZZHmDm1VVB3e/gP56QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgSXHoVlyhumRXfcUrWycBQ0cuBMB8GA1UdIwQY
MBaAFNMJjl4g14+U5pbBNytWI/+nHZTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHdtT1hpRFhqNVRtbHNFM0sxWWpfNmNkbE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81MzYxY2MtYjA0ZC00NDY1LTkzOGQt
NjE3YTI2MzI3ZTk4LzEvMHdtT1hpRFhqNVRtbHNFM0sxWWpfNmNkbE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC81MzYxY2MtYjA0ZC00NDY1LTkzOGQtNjE3YTI2MzI3ZTk4
LzEvMHdtT1hpRFhqNVRtbHNFM0sxWWpfNmNkbE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwpDJ/zL
Z+C59Up63mt8RKbbof21YlikXnuGYvrlYtUiKpDGPqbV3Kqr2ZbgEC3bNqfAh4Jq
Wwngrm3UNkxXKw9Mqg36RCl62F9mv+uZlpDoewAeLYKrc7oLZkgSpovaCZub204m
p2EGpnCKzTni7klwhPma8f0GzDt9H8WBZAahfXL8YSCgcsnQwgxqs/n7xF4SDUd4
J1JQic9tD5BKad+LQlmr8E/mGujtv+AySUAvkIM78xDAKxLDkKumwmzLnJA23xTq
r5N/vKKbd3u1l4wQqHofdFUIq1IdfR6s6T/2Iu8l0h6IfnV/VPpKAXOCa74h6oQd
D5Kyxsmn/036cw==
-----END CERTIFICATE-----
Generated at Sat May 16 16:25:28 2026 by rpki-client