Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
File: DWu1npe_Ox78NWnflWxF5HKEmGE.mft (raw, json)
Hash identifier: J5ECo+S3V3MjFIl1pzjurgb8E2654AHv0l5fr2bhqFo=
Subject key identifier: E1:6A:24:3D:44:8D:02:34:36:85:08:0E:FA:5F:3E:41:BC:D9:1A:D8
Authority key identifier: 0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61
Certificate issuer: /CN=0d6bb59e97bf3b1efc3569df956c45e472849861
Certificate serial: 019D3866486FD92A4585A37508A9AAD5192D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
Manifest number: 0BA0
Signing time: Sun 29 Mar 2026 07:02:00 +0000
Manifest this update: Sun 29 Mar 2026 07:02:00 +0000
Manifest next update: Mon 30 Mar 2026 07:02:00 +0000
Files and hashes: 1: DWu1npe_Ox78NWnflWxF5HKEmGE.crl (hash: DrRhHiG5CGGOVEqvUvNTq7d+HaPTQOXjK5uQEhYpS1M=)
2: j8vNC93uxoh-4kk4cHhskKuIFe4.roa (hash: BN9kSSFWkYcPXBEGoOjVhdYG3iHtGqPP4CWGHkZ5iSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:48:6f:d9:2a:45:85:a3:75:08:a9:aa:d5:19:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6bb59e97bf3b1efc3569df956c45e472849861
Validity
Not Before: Mar 29 07:02:00 2026 GMT
Not After : Mar 30 07:02:00 2026 GMT
Subject: CN=e16a243d448d02343685080efa5f3e41bcd91ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:fc:a9:1c:e9:f2:ed:57:0b:b7:5a:d8:6b:
d0:3b:d7:8f:92:c1:ae:6f:9b:83:ed:87:a3:3f:83:
8c:39:1f:d5:a9:99:e9:02:5f:e1:e4:c1:7d:b3:7a:
7b:69:85:d3:ad:10:10:02:e9:3b:43:5b:4c:ca:06:
b8:1b:a9:53:46:7f:22:36:c0:a8:63:e8:36:0f:6a:
6b:51:f4:1d:f4:bd:ed:ee:c6:31:77:b5:da:05:53:
8e:01:40:90:8d:1f:e1:48:bb:1d:e1:35:f1:5c:5a:
f7:e1:8f:25:5c:f6:a7:b7:cd:cc:f2:11:73:7a:4d:
da:81:58:29:ad:8f:c3:1c:7a:1e:91:83:eb:85:ed:
1a:da:ab:0c:59:23:4e:52:40:84:d5:dc:9e:9b:04:
bc:dd:9a:d7:28:94:65:b8:ca:7a:46:27:76:77:47:
f8:e1:78:13:17:0c:39:33:eb:b1:20:c9:e6:ae:38:
ca:62:77:6d:cb:fd:98:1f:90:fc:57:e0:af:a1:f0:
75:20:bf:7a:20:bf:00:7b:01:14:d7:e9:d6:1d:52:
c1:85:ea:24:fc:b9:60:89:8b:c7:60:3f:7a:c3:38:
6d:2a:5b:f8:66:37:72:82:4b:6b:a7:35:42:60:8f:
81:e5:04:3d:42:85:68:2b:56:f4:0d:66:8e:4e:6c:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6A:24:3D:44:8D:02:34:36:85:08:0E:FA:5F:3E:41:BC:D9:1A:D8
X509v3 Authority Key Identifier:
keyid:0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7c:64:61:5b:2b:9c:f1:e2:f5:da:50:ce:9a:fe:f2:b3:0d:
05:79:21:2a:01:90:1a:18:a5:b6:90:7e:39:13:27:4a:f0:58:
14:08:5b:b0:59:b3:93:4e:d2:44:ac:a1:9c:f0:aa:03:d9:d6:
68:bf:d1:ec:97:c3:71:3e:a2:5e:2a:58:c2:c2:60:c8:98:27:
34:ca:04:14:5c:bf:71:34:a9:35:9e:79:97:b0:3e:40:67:87:
13:57:94:d2:83:4a:a8:85:75:e3:6d:92:04:25:54:68:5f:90:
01:48:87:ea:5e:01:15:54:b1:f3:e2:59:1b:40:57:a1:06:7f:
ce:0e:08:41:b4:1d:e5:3e:93:b1:e4:0f:43:01:30:5d:04:c4:
8c:b8:14:7f:e6:80:a2:c1:e0:0b:c0:a6:27:d7:59:89:4e:09:
9f:96:95:c0:24:d4:41:f8:cd:4a:28:3b:02:dd:60:fc:bc:6b:
57:c0:81:8c:98:b6:21:aa:07:84:eb:3f:e4:20:94:28:44:62:
58:e2:d4:b7:3f:f5:38:01:37:a8:0b:24:76:ef:cb:74:a0:ba:
32:e4:21:24:b1:60:a1:45:0d:10:86:73:64:86:09:6c:0b:1d:
27:5e:40:ef:75:92:9b:e7:85:ba:e7:8f:41:19:39:61:05:bb:
91:39:87:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:54 2026 by rpki-client