Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
File: oMWM0HH3gLesNAwBROsE-1DMu_E.mft (raw, json)
Hash identifier: 4CrOfzsglc7pugSWOZSuNUJVBIe0Tw81OcoVsUSHkhE=
Subject key identifier: 29:E4:84:3D:44:4D:A3:19:82:5C:35:C5:7F:44:F5:B2:BD:11:C9:2B
Authority key identifier: A0:C5:8C:D0:71:F7:80:B7:AC:34:0C:01:44:EB:04:FB:50:CC:BB:F1
Certificate issuer: /CN=a0c58cd071f780b7ac340c0144eb04fb50ccbbf1
Certificate serial: 019D389BADEED206BA2C003C7B0EAF3887C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
Manifest number: 1880
Signing time: Sun 29 Mar 2026 08:00:19 +0000
Manifest this update: Sun 29 Mar 2026 08:00:19 +0000
Manifest next update: Mon 30 Mar 2026 08:00:19 +0000
Files and hashes: 1: ZbTeBAO3QTTIszF0pdw52UodjGY.roa (hash: Zcq4v6bJvVoVndPkmRTnPcyoC19uifQNUAxqTObWOg4=)
2: oMWM0HH3gLesNAwBROsE-1DMu_E.crl (hash: 3LGcj7vAMxVarFjyya8+fdAgF2diBa3TRvKZ6/5WbGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ad:ee:d2:06:ba:2c:00:3c:7b:0e:af:38:87:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0c58cd071f780b7ac340c0144eb04fb50ccbbf1
Validity
Not Before: Mar 29 08:00:19 2026 GMT
Not After : Mar 30 08:00:19 2026 GMT
Subject: CN=29e4843d444da319825c35c57f44f5b2bd11c92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ff:2e:c3:85:b7:2a:af:4f:a3:74:bf:14:d0:
70:74:48:8f:64:61:54:e0:74:70:08:81:ce:d1:43:
23:4d:55:39:a0:00:fe:52:89:e9:e0:6a:aa:e9:df:
dc:1b:ce:a2:8c:bf:b0:a9:a7:26:0a:d7:a0:23:33:
a9:43:bd:4a:78:0d:1f:b3:53:6e:b2:82:af:19:81:
9b:04:51:e2:68:0c:09:da:9a:6d:48:ce:a5:fe:3a:
8c:2e:2a:96:2b:7f:2c:d0:09:5f:b9:6f:0a:59:ed:
3b:eb:4c:0e:3e:b0:d0:1e:e6:57:f3:df:16:c4:73:
c1:43:46:f4:5c:44:cb:8e:90:7d:b5:15:83:98:27:
fd:fc:a7:f2:8f:c3:d2:d1:da:21:04:99:29:a1:42:
e4:a3:22:ab:01:73:ab:2f:1d:e6:92:60:44:87:ed:
ac:26:0d:36:5f:74:b6:07:01:f1:22:09:bf:41:8e:
f5:b6:3b:ad:1e:c9:dc:04:4a:09:2b:e5:64:04:5c:
92:c4:82:3c:65:e0:fd:3a:46:4f:40:78:ff:44:e2:
cb:ec:b0:92:e0:06:72:bf:69:2e:61:7f:40:f4:b9:
d6:77:03:6e:bd:4a:de:19:c6:47:7a:ce:47:fc:e0:
f5:92:0f:05:a6:54:66:6a:23:e9:10:cc:41:6f:8f:
6c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E4:84:3D:44:4D:A3:19:82:5C:35:C5:7F:44:F5:B2:BD:11:C9:2B
X509v3 Authority Key Identifier:
keyid:A0:C5:8C:D0:71:F7:80:B7:AC:34:0C:01:44:EB:04:FB:50:CC:BB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:69:6e:d6:7d:f6:73:13:be:2d:f1:c8:15:91:6e:ec:30:8f:
1f:1a:5b:bd:62:7f:ae:27:34:32:b1:9c:0d:d0:d2:41:76:41:
50:a3:1f:b7:8a:b1:33:29:f8:a3:39:9b:8e:5b:04:03:28:ac:
81:7d:36:08:17:95:dd:9a:43:38:9a:10:03:21:dd:85:70:47:
94:01:70:15:6b:d0:b5:6d:b6:8a:cb:10:eb:18:82:1a:ff:32:
f8:e0:c5:51:41:76:4a:94:45:cf:96:66:04:c6:07:75:0d:07:
c3:35:f9:f0:59:90:51:f8:3c:28:69:88:b3:d8:f1:ec:a8:e5:
21:04:25:2c:f8:77:da:82:59:6f:4b:22:f7:df:29:da:43:91:
9d:ca:dc:7b:86:48:b3:30:6a:ef:9f:41:80:34:85:24:f3:b8:
f9:7e:ad:b6:06:6c:4a:81:07:46:19:8c:57:f4:c7:c6:c2:4c:
ee:d4:f7:dc:77:0a:c7:e4:ff:10:a6:b9:11:2a:15:89:4b:40:
e1:e4:9b:0a:69:3a:25:17:0b:ab:03:2e:4a:16:e6:1d:aa:0b:
ea:57:32:f7:0b:03:f2:fb:b3:59:07:84:c5:9d:f8:07:5f:46:
90:b4:80:03:70:20:ce:d0:31:26:19:66:1a:8e:97:40:65:89:
2d:8c:21:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:31 2026 by rpki-client