Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
File: DWb-4PMIhlf7_SOngt9Xec-ROmM.mft (raw, json)
Hash identifier: 61m2IpMAMWO7KUiz47srmDcIrDmZQ8pgk4V03nxVmkY=
Subject key identifier: 2E:B9:22:9A:98:3A:2D:A3:E5:31:58:D1:FD:73:15:43:B3:B3:62:0C
Authority key identifier: 0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
Certificate issuer: /CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Certificate serial: 01A00101F931071548EA0922038D66979628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
Manifest number: 12C0
Signing time: Fri 14 Aug 2026 16:01:41 +0000
Manifest this update: Fri 14 Aug 2026 16:01:41 +0000
Manifest next update: Sat 15 Aug 2026 16:01:41 +0000
Files and hashes: 1: DWb-4PMIhlf7_SOngt9Xec-ROmM.crl (hash: KieZgsJf6/Ht3KcsZ7ZJTAzgQYsdbOD6vHAG+XNwRMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:f9:31:07:15:48:ea:09:22:03:8d:66:97:96:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Validity
Not Before: Aug 14 16:01:41 2026 GMT
Not After : Aug 15 16:01:41 2026 GMT
Subject: CN=2eb9229a983a2da3e53158d1fd731543b3b3620c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:1d:62:e4:fe:b7:3c:cc:8b:48:a1:40:db:
01:c7:70:9f:37:54:b8:00:ba:b5:c4:50:6e:98:b8:
83:9d:5e:df:0d:b9:6b:ed:2b:19:d4:62:ef:f8:38:
17:6a:cd:e8:6f:d9:81:a0:c6:70:75:f0:b9:db:09:
85:c7:10:ca:e3:f3:1e:60:21:82:09:e5:85:ec:6f:
da:84:31:1e:89:38:c0:64:eb:d6:3b:f1:1c:8b:d3:
6b:88:90:b3:b3:b0:b6:9f:ab:1e:5f:c1:f0:96:f1:
6e:29:1a:ab:d1:68:50:3f:41:37:b9:10:b5:c5:b8:
5f:7e:b1:28:30:b1:44:21:44:70:d3:b4:0c:d7:98:
e8:b1:88:0d:ce:78:cc:84:a9:7d:1f:b1:15:59:41:
a8:92:e4:4d:58:84:72:6f:31:98:6c:80:8d:b7:f7:
46:b0:70:c9:76:02:63:79:e3:4e:4c:31:ca:17:84:
fb:a3:5f:88:6c:e0:e2:c7:5a:9a:4a:cf:3a:8a:bf:
c0:8c:3f:c7:03:69:cb:33:14:d1:90:b9:72:9c:30:
e7:68:c4:b7:72:43:4c:11:59:e9:92:d3:f9:7e:86:
7c:bb:15:6b:df:bc:0e:80:d0:a6:7b:c2:c6:c8:ec:
01:5c:e0:98:f6:05:9e:8f:8e:07:d7:17:3d:84:11:
40:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B9:22:9A:98:3A:2D:A3:E5:31:58:D1:FD:73:15:43:B3:B3:62:0C
X509v3 Authority Key Identifier:
keyid:0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b4:29:e7:1e:a3:b5:3e:84:99:e5:18:8a:65:41:f4:d0:43:
da:ed:5e:20:04:a0:24:0d:d1:2d:1d:ec:3a:ce:e3:ef:6a:3f:
ad:20:9b:a1:0f:4c:de:61:d7:98:f2:cf:27:b1:9d:5b:06:80:
de:f5:1c:73:76:4f:9d:57:61:35:4a:2d:ce:24:26:7c:33:a9:
5e:7b:e5:60:77:f9:ab:88:3e:2b:4f:a9:86:7c:c3:02:e9:2e:
f4:11:d3:b5:26:18:2b:df:3a:30:ec:f7:c9:c4:57:c1:4d:80:
e0:a0:8c:56:12:9d:b9:b5:d9:b1:90:45:92:13:b6:6a:60:50:
1d:12:cb:a0:53:a7:56:e5:7d:83:9e:27:2b:c9:d2:54:3b:b0:
f9:f4:66:cf:15:24:2e:4b:5d:b5:ad:d9:e8:b2:f1:f8:e6:b5:
1c:5f:78:57:57:74:0c:f7:b1:3e:b9:14:7d:35:7d:d0:60:a2:
db:65:e9:26:8d:31:bb:4b:4d:13:2b:25:39:01:27:99:2f:bd:
e0:46:2a:d7:5a:5a:d5:4a:1b:b2:64:05:ae:28:04:56:00:da:
4f:82:27:fb:4b:5f:9c:74:94:2e:d2:f0:13:e5:cc:76:6f:c6:
22:3a:26:b9:d2:b9:30:d1:93:12:9e:07:71:2a:12:26:3e:8a:
c6:9e:a8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:20:18 2026 by rpki-client