Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
File: DWb-4PMIhlf7_SOngt9Xec-ROmM.mft (raw, json)
Hash identifier: zYM1D6jVkd/IeBSUlknt2gBhyk940ROvKT8eKjvPBt4=
Subject key identifier: 54:D0:B5:D5:7C:69:B7:2B:19:95:97:CE:E1:A7:0F:85:DD:16:92:DB
Authority key identifier: 0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
Certificate issuer: /CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Certificate serial: 01A13DB8288DDE1A786E58EF5E72907A3A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
Manifest number: 1364
Signing time: Thu 15 Oct 2026 04:00:41 +0000
Manifest this update: Thu 15 Oct 2026 04:00:41 +0000
Manifest next update: Fri 16 Oct 2026 04:00:41 +0000
Files and hashes: 1: DWb-4PMIhlf7_SOngt9Xec-ROmM.crl (hash: gMkOerHVyWgU+MiQOcVs9darlsbuGi9eTHs5FD+pBV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:28:8d:de:1a:78:6e:58:ef:5e:72:90:7a:3a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Validity
Not Before: Oct 15 04:00:41 2026 GMT
Not After : Oct 16 04:00:41 2026 GMT
Subject: CN=54d0b5d57c69b72b199597cee1a70f85dd1692db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b3:f8:80:68:db:57:69:c5:bf:b1:b3:81:a7:
fd:ff:a7:7c:e9:d6:a8:5e:d7:15:3a:e3:65:31:94:
57:2b:11:30:da:1a:92:f9:72:96:40:5f:29:2f:cb:
53:25:8a:8a:8c:ac:d0:7a:0a:d6:b4:78:76:ba:ce:
e5:6c:1c:bd:30:2b:01:a7:36:0d:7d:61:54:df:07:
a3:c5:33:58:7f:0e:1b:1b:b9:60:0a:b7:7c:3a:06:
0a:a4:3e:c4:c6:3d:97:3d:89:48:c5:91:e4:28:bc:
85:6d:1b:13:a2:11:3c:18:0d:da:57:96:48:98:0f:
68:bf:9d:1a:95:7e:c0:ac:9e:6d:9b:e4:f8:a3:ea:
6e:08:e4:66:e7:60:86:a0:93:5a:48:7b:3e:ed:7b:
1d:a0:f5:a8:dd:3e:fc:81:17:05:f0:e9:e1:d5:75:
03:48:47:98:e2:a5:75:03:d9:2d:4d:57:2d:70:ee:
5c:62:92:93:41:6b:93:e0:a9:c0:3d:b5:bd:df:62:
93:00:e7:e8:e4:3b:91:4b:8f:fb:dc:9b:f8:3d:20:
a7:23:02:92:9b:1a:d9:c3:18:12:51:d2:00:e5:e6:
1b:39:01:28:76:9c:5b:a4:f3:50:da:ec:03:e8:7b:
ef:97:6f:97:55:b9:28:74:35:75:8e:60:59:33:85:
3b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D0:B5:D5:7C:69:B7:2B:19:95:97:CE:E1:A7:0F:85:DD:16:92:DB
X509v3 Authority Key Identifier:
keyid:0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:24:0e:5b:6b:6a:ac:12:c1:5d:d5:14:ec:f4:97:08:21:33:
4c:10:df:75:66:c8:39:b8:11:f2:e4:84:28:d1:03:4b:3b:e1:
f6:95:34:8f:c5:66:f9:8d:b7:07:73:84:fa:86:06:23:6c:d2:
63:99:db:54:92:08:10:09:bb:ee:97:a3:ff:e3:04:c2:e1:f3:
4a:0f:7e:54:d6:fb:b1:5b:c0:a2:69:0a:d2:0f:d2:39:87:2e:
50:ce:4d:87:95:d1:ec:4a:86:6a:a4:11:c1:61:66:c5:dd:d9:
f4:ca:b2:d5:92:ea:4d:07:8b:b0:8e:54:13:8f:63:87:da:8c:
14:a9:07:d6:e1:af:73:b1:11:cc:3a:50:d4:c6:99:65:bc:95:
94:55:1e:46:eb:6d:43:b1:9c:11:0f:20:8e:73:7f:4e:29:a2:
fb:5f:9f:cd:ee:2d:24:d0:68:42:5b:c1:67:7d:97:97:64:93:
37:5e:cb:37:51:fa:ad:4f:ce:76:c3:6a:61:17:a6:af:66:45:
43:e1:58:70:b0:ae:0c:21:18:92:0e:a5:dd:58:1f:2d:bc:9f:
23:d6:91:52:9b:4a:0b:34:96:55:ce:e0:b3:eb:2c:2c:c3:4a:
6c:41:bb:26:00:c8:db:b3:aa:37:65:28:95:c2:c8:26:a4:10:
99:5f:ff:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:09:00 2026 by rpki-client