Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
File: oMWM0HH3gLesNAwBROsE-1DMu_E.mft (raw, json)
Hash identifier: +gPFyXaawQ95X/C+b2aalmGMLfWmPcYyxuNhii63ZLw=
Subject key identifier: D4:CA:42:AA:0A:AD:67:7A:C0:1D:BC:A0:C2:64:3D:8C:77:7F:B5:97
Authority key identifier: A0:C5:8C:D0:71:F7:80:B7:AC:34:0C:01:44:EB:04:FB:50:CC:BB:F1
Certificate issuer: /CN=a0c58cd071f780b7ac340c0144eb04fb50ccbbf1
Certificate serial: 01A08A55DE0C425B2E96BC493CE1F04C874A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
Manifest number: 1A38
Signing time: Thu 10 Sep 2026 08:01:18 +0000
Manifest this update: Thu 10 Sep 2026 08:01:18 +0000
Manifest next update: Fri 11 Sep 2026 08:01:18 +0000
Files and hashes: 1: ZbTeBAO3QTTIszF0pdw52UodjGY.roa (hash: Zcq4v6bJvVoVndPkmRTnPcyoC19uifQNUAxqTObWOg4=)
2: oMWM0HH3gLesNAwBROsE-1DMu_E.crl (hash: X5Ia8aEDAL2mln+gWy9SFsu3k+ddRjUZYZ/XzuJh9vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:de:0c:42:5b:2e:96:bc:49:3c:e1:f0:4c:87:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0c58cd071f780b7ac340c0144eb04fb50ccbbf1
Validity
Not Before: Sep 10 08:01:18 2026 GMT
Not After : Sep 11 08:01:18 2026 GMT
Subject: CN=d4ca42aa0aad677ac01dbca0c2643d8c777fb597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0c:6a:d9:93:bd:9a:4f:df:d9:00:e9:ca:c1:
83:33:06:b3:a1:77:a0:9f:cd:7b:ed:1b:8f:eb:ed:
cb:3f:30:e4:87:75:0d:68:fe:b8:b4:11:20:f2:09:
45:21:e0:03:6b:4f:8e:43:0a:ce:db:8e:1b:4d:63:
e7:c8:42:60:53:1f:bc:65:55:23:16:69:7c:1a:d9:
da:00:8e:11:5f:eb:be:27:12:9b:a5:c0:af:03:e5:
ff:ff:d7:d2:c8:ee:fe:27:2e:77:50:e2:c9:b4:58:
b2:e6:08:b1:52:c0:c4:eb:79:54:d5:35:74:63:99:
55:de:79:a2:7f:de:a4:60:0d:0d:c0:7a:db:db:47:
a9:5c:d7:8f:50:2f:f1:12:6d:f1:ec:a4:b2:a5:d0:
c0:ef:b1:1a:34:eb:db:45:b6:b8:70:a6:5e:d3:40:
a6:b3:62:4a:5f:63:b9:84:3f:a7:88:96:e8:de:24:
03:0c:22:5f:dd:e7:3a:6c:bf:70:63:6a:fb:a7:ef:
c0:82:b9:00:d8:3e:9f:0f:4e:00:f9:89:a2:d4:67:
da:21:d2:a1:18:97:7e:7c:a7:d8:6e:c2:b1:89:16:
32:fb:ff:62:7e:2c:d3:89:6a:05:2f:05:9d:22:3d:
a1:1b:0f:af:c5:2d:05:c0:5a:6e:2d:8f:19:dd:c5:
1b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CA:42:AA:0A:AD:67:7A:C0:1D:BC:A0:C2:64:3D:8C:77:7F:B5:97
X509v3 Authority Key Identifier:
keyid:A0:C5:8C:D0:71:F7:80:B7:AC:34:0C:01:44:EB:04:FB:50:CC:BB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:35:bf:29:7c:44:16:ae:a4:96:6a:00:78:b5:60:28:f8:ac:
ff:2a:6a:99:b0:77:32:79:80:39:c6:57:26:fc:47:dc:5d:97:
08:cb:d5:36:8d:f4:cd:18:9f:3b:f1:cc:2e:d2:65:6e:d0:45:
e3:39:92:37:4f:e0:fe:d0:ea:a7:db:f3:75:0c:7e:fb:9c:75:
ca:ac:00:54:98:58:1d:00:c0:3b:6d:27:50:82:6b:a0:83:15:
b9:50:fa:d7:75:29:85:bb:c6:4a:36:cd:b1:9e:8a:6b:f0:2e:
95:08:13:b3:59:05:31:88:c4:71:53:83:7d:72:c4:87:06:71:
e2:c6:1c:63:01:57:44:6b:ca:3d:c1:37:3b:4e:02:5b:36:39:
d3:85:d4:70:e4:4a:9f:ca:6c:5a:0f:9f:5c:a0:cc:ac:75:7a:
31:00:8f:15:bb:9e:2c:38:4f:eb:ca:97:53:84:5e:9e:2a:fc:
f6:b5:25:62:ab:0d:d9:b8:a1:68:a9:d7:66:a3:a2:04:2f:13:
63:3c:9f:50:c7:7a:51:f5:0b:99:36:ce:4f:1a:ec:5a:d3:fd:
9a:f4:44:87:11:ed:c5:25:07:29:3a:ed:b5:0a:a2:9d:9c:09:
48:0c:d5:b3:b5:af:81:56:75:b3:4a:41:1b:8b:0c:bf:7e:eb:
c6:f0:04:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:49:28 2026 by rpki-client