Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
File: 0wUa-GYelCUtF1k103l-nsos2Aw.mft (raw, json)
Hash identifier: j3AXPiJ9VIopZS83f8BuA1XTv48ep1c9KIxL0SvU0CU=
Subject key identifier: 3F:F6:90:E1:AC:08:A6:31:16:F9:6B:E3:46:0D:BE:92:00:A1:6A:F4
Authority key identifier: D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
Certificate issuer: /CN=d3051af8661e94252d175935d3797e9eca2cd80c
Certificate serial: 01A0016F0673C7B7F90A28295797BC1CD3B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
Manifest number: 1368
Signing time: Fri 14 Aug 2026 18:00:48 +0000
Manifest this update: Fri 14 Aug 2026 18:00:48 +0000
Manifest next update: Sat 15 Aug 2026 18:00:48 +0000
Files and hashes: 1: 0wUa-GYelCUtF1k103l-nsos2Aw.crl (hash: slU9lmfdbBdU0sPeknaIZxrjzqUZfwdZiwgfQtYoqbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:06:73:c7:b7:f9:0a:28:29:57:97:bc:1c:d3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3051af8661e94252d175935d3797e9eca2cd80c
Validity
Not Before: Aug 14 18:00:48 2026 GMT
Not After : Aug 15 18:00:48 2026 GMT
Subject: CN=3ff690e1ac08a63116f96be3460dbe9200a16af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f7:6b:b4:d7:89:f7:8f:4c:61:6b:0a:b5:f3:
89:84:ad:96:07:cb:07:51:78:f6:54:9d:ad:a8:36:
d7:97:88:8b:e3:05:24:7e:85:31:53:fa:ee:4c:12:
e5:a1:38:90:c8:d5:e1:9a:d8:9d:c1:35:7b:3b:88:
ad:b7:a8:6b:0a:f9:f2:6c:8f:be:54:64:f0:ce:95:
7e:e4:47:77:9c:16:3e:28:9b:1f:5a:8d:04:04:d3:
56:2d:dd:81:d9:13:25:13:24:70:7c:10:79:ba:bb:
06:a9:4e:ae:38:72:51:13:80:8e:4b:f4:f3:08:0f:
b3:56:82:7f:a1:8e:4b:ec:ff:09:0d:9a:d4:6b:56:
5b:28:5d:92:cf:71:b1:22:6b:17:09:a8:19:45:73:
fb:6a:0b:e3:a7:c2:57:79:04:3d:c7:11:a6:51:1a:
18:6c:b4:32:49:d8:5a:66:22:bf:a0:d4:a7:59:0d:
d8:d7:84:a7:c4:0e:0a:54:19:e2:f4:e6:1f:b6:a3:
57:b3:45:9c:1a:5a:11:4b:1d:65:29:32:4b:ed:24:
d5:f2:4d:81:37:19:7b:63:8e:d4:00:98:50:32:d5:
8b:1c:03:71:a0:22:42:d0:fa:65:02:4a:cd:3a:ba:
b2:67:d8:ce:e2:5e:54:f7:8a:85:9e:46:f7:56:a0:
b4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F6:90:E1:AC:08:A6:31:16:F9:6B:E3:46:0D:BE:92:00:A1:6A:F4
X509v3 Authority Key Identifier:
keyid:D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2b:dc:64:6e:50:03:e5:c9:c9:69:66:a3:7e:01:74:b7:f6:
f8:93:71:ee:0a:ba:10:a0:a5:fd:72:23:9b:fa:86:ea:03:d3:
51:57:76:b3:21:96:7e:3a:df:f5:65:61:ba:f9:7d:6e:89:37:
ad:6c:cb:9d:0e:1f:5e:31:95:92:1f:3e:78:a9:c3:72:a0:f3:
f6:f6:ab:15:22:ff:c8:8c:64:69:0a:ee:d3:ca:51:cc:e2:f6:
48:c9:ed:22:28:a9:75:37:fd:cf:08:77:6d:11:d8:ab:d7:e5:
d5:b3:ed:5e:b4:95:f1:97:65:22:1d:61:34:78:0c:85:ba:5f:
e5:ff:e7:02:8e:48:a6:2a:43:b1:d7:a6:b2:98:a6:5d:ae:b8:
2c:8d:f4:a1:63:4f:50:0e:07:0c:d9:9c:1d:4c:02:1f:73:35:
68:95:84:d7:79:f4:9b:44:46:a1:72:d5:84:92:93:c9:4a:a5:
8f:1b:70:15:b8:b2:ec:a8:70:6e:59:31:4d:23:d3:e7:e4:8f:
69:32:c3:af:42:c9:b5:4f:0c:bb:ce:9c:04:8a:9f:12:0d:14:
b3:fe:35:ac:fc:66:20:20:3e:34:0a:44:94:a3:e5:90:d5:e9:
4d:8a:7f:9b:fe:ae:5a:35:17:92:42:bf:33:ef:23:3d:5c:6d:
c1:27:71:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:35 2026 by rpki-client