Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
File: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft (raw, json)
Hash identifier: Y5Oem7UqV5B1g8x8bigsvL+Dlthop1Rq/ZHX79mwbps=
Subject key identifier: 28:4C:F1:5E:85:F8:07:32:B0:B2:43:DE:09:E1:F4:54:70:BC:C1:F9
Authority key identifier: D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
Certificate issuer: /CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Certificate serial: 01A0CCA34FA0A86D89F373486595640CF897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
Manifest number: 0FEC
Signing time: Wed 23 Sep 2026 05:00:49 +0000
Manifest this update: Wed 23 Sep 2026 05:00:49 +0000
Manifest next update: Thu 24 Sep 2026 05:00:49 +0000
Files and hashes: 1: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl (hash: BrrrqCm8gfsRJlwsf8n6NN5l/4rsqLydp7TKugFxjE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:4f:a0:a8:6d:89:f3:73:48:65:95:64:0c:f8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Validity
Not Before: Sep 23 05:00:49 2026 GMT
Not After : Sep 24 05:00:49 2026 GMT
Subject: CN=284cf15e85f80732b0b243de09e1f45470bcc1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:df:57:fb:f4:b6:bf:f1:3d:b8:fe:91:a2:b0:
ec:9c:77:24:e8:40:26:9b:44:bc:b3:7a:57:f2:c9:
f5:6c:88:38:2b:a6:65:2e:d7:1a:42:39:34:7f:11:
9d:0c:9a:be:d2:64:e5:05:a8:d2:ef:3f:43:fe:01:
e1:5e:c1:0a:b4:ff:28:df:af:14:49:cb:4e:54:c4:
71:59:13:e5:b1:d2:65:af:a3:84:ff:3e:fb:0a:e2:
31:e9:b2:64:54:88:e8:7d:56:e3:c5:ba:3b:8a:49:
34:b3:0a:26:a6:e5:b7:24:bc:b3:96:db:3b:d7:7b:
44:9d:67:08:c2:a8:b2:20:4a:5b:0c:19:29:67:01:
4c:17:5f:0f:05:26:12:1e:3c:59:87:db:5a:91:13:
61:d3:3c:aa:3e:7f:dd:46:05:5e:b0:72:01:81:ff:
9a:7a:fb:a1:ad:75:4b:82:8a:44:0d:d6:29:e5:c1:
a8:bd:2d:cf:ce:a2:66:83:00:b9:8a:62:a0:85:a5:
0b:c3:96:da:40:ed:db:91:c3:57:ec:0f:5f:bf:bd:
16:dd:2e:e0:ea:66:55:f0:ea:a8:b5:f3:a5:11:82:
42:7a:49:e8:bb:ae:ab:67:76:1e:af:d5:94:1b:79:
ea:83:e8:23:2e:df:de:9a:d5:42:a4:e8:fe:06:92:
95:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4C:F1:5E:85:F8:07:32:B0:B2:43:DE:09:E1:F4:54:70:BC:C1:F9
X509v3 Authority Key Identifier:
keyid:D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b2:6a:27:f1:74:d1:7b:44:bc:b7:11:76:58:44:47:4b:4c:
10:b8:f3:69:47:c6:02:f3:0e:b8:2a:17:05:ab:c7:db:ef:40:
d3:e7:db:d6:9c:23:c1:cc:fa:c7:9e:d3:7e:99:4f:ef:17:7f:
0f:25:5e:34:32:d1:5e:c4:7d:05:ba:1a:a5:76:ae:c5:17:c6:
06:60:20:86:b4:9d:89:9e:5d:ae:ef:94:e7:be:b2:1b:c6:14:
65:37:fc:75:20:39:6d:e5:01:80:c7:b8:6d:bd:f6:14:94:58:
f5:24:21:9e:7a:e6:e4:7f:fd:b5:77:44:c6:a0:e8:be:86:e3:
3b:a6:f9:01:75:f9:19:49:09:06:55:a7:94:d8:f7:25:b5:41:
99:2c:44:25:33:2a:62:31:be:a7:2d:21:3e:69:92:3b:88:56:
8e:06:3d:5d:bc:82:a4:a3:1f:1f:28:1c:3a:eb:35:0b:8e:39:
55:32:61:44:7d:46:d3:2c:84:07:32:e5:21:c0:b0:ae:f1:d0:
dd:c7:b7:52:e0:21:bc:18:cf:5b:1c:40:e8:1c:0e:dd:1b:e7:
6c:29:36:ec:9d:55:80:6a:a0:a5:b0:12:76:8e:fa:51:f2:cd:
c1:a4:a4:14:65:75:06:cb:ce:09:3a:a8:bd:ce:f2:fb:ee:11:
8e:6f:29:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:30:18 2026 by rpki-client