Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
File: 0wUa-GYelCUtF1k103l-nsos2Aw.mft (raw, json)
Hash identifier: xObIessDoRykSeakrm69hQodclV896e9YQ9nNAIJMlI=
Subject key identifier: 14:20:93:CB:20:70:05:5D:79:57:B6:5A:E6:2F:D6:F7:42:CC:5F:B3
Authority key identifier: D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
Certificate issuer: /CN=d3051af8661e94252d175935d3797e9eca2cd80c
Certificate serial: 019D38D37BA896B9EBCF24544F3FC0630966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
Manifest number: 11F7
Signing time: Sun 29 Mar 2026 09:01:16 +0000
Manifest this update: Sun 29 Mar 2026 09:01:16 +0000
Manifest next update: Mon 30 Mar 2026 09:01:16 +0000
Files and hashes: 1: 0wUa-GYelCUtF1k103l-nsos2Aw.crl (hash: XRxSQ6azeKUsJ/dSnJD8UQOt2tQktHoIZGrCmnaSWzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:7b:a8:96:b9:eb:cf:24:54:4f:3f:c0:63:09:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3051af8661e94252d175935d3797e9eca2cd80c
Validity
Not Before: Mar 29 09:01:16 2026 GMT
Not After : Mar 30 09:01:16 2026 GMT
Subject: CN=142093cb2070055d7957b65ae62fd6f742cc5fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:05:a4:39:99:d0:63:d4:40:f5:fa:ff:4c:1b:
d1:a1:05:13:2d:a9:7d:1d:64:43:c7:f6:97:ec:d3:
34:7d:a7:4d:bb:ed:f6:30:ac:bb:95:aa:7d:38:cb:
6b:89:23:85:03:f0:ad:f2:83:9c:c9:82:67:57:4f:
1a:b0:ff:51:2f:a8:d9:c4:62:a6:84:64:a1:74:07:
a4:5f:51:77:12:36:f4:f5:c9:c7:67:db:d0:6d:f9:
d3:94:64:59:35:ad:3f:0f:86:e5:a3:ca:93:7b:2e:
d6:94:64:d4:42:cd:3d:ee:0e:31:8f:54:a5:27:d6:
ea:a8:8f:2c:2b:5f:0c:7a:82:1f:3a:89:92:f1:31:
e1:69:cd:52:e4:de:e2:69:03:40:12:a3:56:8e:92:
d4:ce:ef:99:66:d8:c3:00:4f:24:f1:39:f6:3c:fe:
dc:fa:46:d3:66:15:92:c8:e0:ec:a6:52:eb:79:dd:
66:e6:6b:83:e6:18:41:8d:67:6b:f1:34:b2:d6:1e:
99:aa:88:06:c1:f9:f9:d5:1d:9d:c2:40:f0:fc:48:
7f:69:22:3b:11:f2:ed:99:5f:3f:3f:11:ce:b5:36:
c4:58:5a:60:b9:54:78:f2:ba:4c:b4:c5:32:1e:99:
d3:18:2c:7a:7f:c0:2c:4b:0a:35:9d:3f:0e:75:70:
82:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:20:93:CB:20:70:05:5D:79:57:B6:5A:E6:2F:D6:F7:42:CC:5F:B3
X509v3 Authority Key Identifier:
keyid:D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:48:c0:b0:63:1d:8a:4f:58:b9:e6:c1:1f:f4:ae:5d:9a:6c:
0c:2c:c7:6c:b8:52:00:d3:60:26:0c:12:e7:66:36:ca:b9:cf:
42:a7:92:27:9a:24:f5:63:39:67:6f:7c:7d:6c:b7:cd:41:bf:
b1:2a:8b:f4:2d:51:06:ee:61:f0:41:24:f7:95:86:08:5f:d0:
d0:f7:84:c6:6a:89:3d:d4:3a:95:af:48:7f:d4:2f:ee:83:fb:
37:9a:c9:f4:43:50:fd:df:34:14:a5:9d:8a:9e:4e:53:8b:c8:
14:bb:ef:20:bb:e3:97:08:51:ae:ea:9d:63:30:e8:91:fa:e2:
34:3a:d2:1c:93:ee:19:fd:ea:cb:66:5b:1a:d4:7c:5c:d2:ab:
97:27:67:56:ec:a2:9a:5e:3c:60:41:db:04:52:b3:9a:d1:c6:
26:74:a3:ac:22:d6:c2:c4:71:a3:b2:94:8f:d4:70:e8:d7:8b:
02:41:4e:62:72:da:71:5c:c7:e0:42:12:e8:ff:e5:4b:7b:6c:
f0:f5:7b:6c:fd:a6:38:c1:83:58:5b:c1:07:26:3c:3f:1b:1f:
ef:21:22:fc:18:f7:71:34:66:30:2b:69:c8:47:2b:c7:08:2e:
f4:8b:ec:71:1c:a4:13:35:9c:bb:3b:3f:9c:28:83:e9:44:fd:
e8:19:55:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:19 2026 by rpki-client