Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
File: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft (raw, json)
Hash identifier: 3ndXireXwJv5dTSxoyvSYWQpRqAJLC98HZFeNScUnqs=
Subject key identifier: AE:5C:14:FF:A6:66:8A:0E:A2:B3:E6:7B:8E:65:D5:13:84:94:49:17
Authority key identifier: D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
Certificate issuer: /CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Certificate serial: 01A1DEDEF1C1D5F84A4D463908AC94676D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
Manifest number: 107A
Signing time: Sun 15 Nov 2026 11:01:55 +0000
Manifest this update: Sun 15 Nov 2026 11:01:55 +0000
Manifest next update: Mon 16 Nov 2026 11:01:55 +0000
Files and hashes: 1: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl (hash: tIahR23IMQnDLhHehztMJmkzSBkQBxsGuqvngtRRbws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:f1:c1:d5:f8:4a:4d:46:39:08:ac:94:67:6d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Validity
Not Before: Nov 15 11:01:55 2026 GMT
Not After : Nov 16 11:01:55 2026 GMT
Subject: CN=ae5c14ffa6668a0ea2b3e67b8e65d51384944917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:90:21:d9:7a:8c:85:5b:a3:68:d1:61:47:0c:
93:cf:2f:a2:05:2d:d8:d3:0b:a1:7f:63:e0:d2:39:
0e:2b:f4:d1:5f:4f:ac:e1:4a:89:75:5b:03:66:10:
5d:86:dc:22:4b:6b:db:3d:1e:f4:fe:6e:1e:e4:c6:
30:fb:c2:49:a4:45:35:e3:f7:50:23:ab:41:2a:01:
84:73:b1:da:69:19:33:ee:3a:8d:b5:ab:3e:62:a5:
59:d9:7e:75:62:5f:7b:27:c5:05:c5:db:e1:b4:2e:
eb:95:75:68:23:41:a7:d3:78:a4:60:e2:c8:60:ee:
3a:df:c6:a7:7d:49:27:3b:93:be:2b:81:62:48:d1:
4a:7c:6e:f6:b7:99:f6:8d:35:6f:e0:64:4f:fd:f9:
70:00:92:62:17:ea:04:6d:1a:d9:36:32:c6:d8:dc:
2f:1b:7b:da:ee:15:bb:1b:9f:ea:a8:ed:c4:f4:f4:
50:86:9e:cb:cf:d1:d9:e5:92:f3:f1:fa:44:33:c8:
c4:f2:32:be:0d:d6:1e:5c:6a:fc:7f:c3:65:d8:80:
45:5b:a7:7b:ec:d7:7b:ed:5f:d4:61:97:92:39:50:
c1:c3:51:53:e2:84:ec:29:db:c6:47:5e:d2:e1:90:
69:89:8a:00:16:ae:9f:51:9f:f8:86:76:95:5c:a8:
81:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5C:14:FF:A6:66:8A:0E:A2:B3:E6:7B:8E:65:D5:13:84:94:49:17
X509v3 Authority Key Identifier:
keyid:D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3a:3e:b9:ae:ea:c3:a9:e9:67:df:2e:34:2a:81:90:c7:3c:
7f:ec:44:d8:a0:42:4a:f8:8e:09:a8:4b:c0:53:99:2b:7c:f0:
55:0e:61:75:ca:4e:89:d2:9a:ae:d2:61:8b:1b:fe:49:55:b4:
8b:a6:4d:52:cc:5a:72:d1:55:44:83:75:26:15:ea:ac:5e:9b:
22:ad:36:50:20:af:24:1c:2e:f5:81:7c:4e:78:88:d8:9b:35:
5b:d7:89:77:72:f8:ac:f8:c9:2d:91:b0:95:7e:fd:25:bb:0d:
fc:94:0f:ca:a0:f4:a8:30:f9:4b:1c:48:3f:1d:4a:c7:5d:28:
3b:fe:1d:96:13:fa:04:e6:e4:66:c8:0a:f4:ff:42:02:15:51:
15:f2:6b:0c:a1:d3:63:06:96:61:35:2d:ed:3c:9f:d6:70:50:
8b:4a:6b:5f:47:3c:cb:51:0a:0d:86:8d:86:2b:25:0f:15:aa:
53:f1:5a:b8:c4:59:6c:ac:ee:53:d0:2e:51:31:a8:d5:82:4f:
14:58:31:cb:93:ca:0c:d3:22:75:6c:c1:6c:1a:19:0f:a8:45:
58:1f:38:0f:ec:9b:03:bd:46:3c:ce:fa:5d:2a:67:b6:e8:10:
cd:36:dd:3a:2b:af:92:12:5e:df:a1:7f:16:76:1e:7b:dc:f0:
63:51:1d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:50:55 2026 by rpki-client