Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft
File: 0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft (raw, json)
Hash identifier: jWBHdYtJHGeKh8TPd1NqQjHBvRHW1KUjcfdIIeTh/pE=
Subject key identifier: 35:8E:30:87:56:43:AA:C5:AF:A2:36:B2:C3:EF:FC:03:71:1B:1D:5B
Authority key identifier: D3:02:70:6F:3D:DE:2B:B1:2E:2B:A9:11:A9:BE:05:C8:D4:97:8C:86
Certificate issuer: /CN=d302706f3dde2bb12e2ba911a9be05c8d4978c86
Certificate serial: 01A0D83C0150357E566F15089C0FD02FAF37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wJwbz3eK7EuK6kRqb4FyNSXjIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft
Manifest number: 0458
Signing time: Fri 25 Sep 2026 11:03:26 +0000
Manifest this update: Fri 25 Sep 2026 11:03:26 +0000
Manifest next update: Sat 26 Sep 2026 11:03:26 +0000
Files and hashes: 1: 0wJwbz3eK7EuK6kRqb4FyNSXjIY.crl (hash: LPAqCRpSSg+5D/NPF4cQJw/zSjh6ewDbEF5EA14RtHc=)
2: W2JVDI-08lmKNZhAYHd2tvRmyTM.roa (hash: ckBzzLd5OwJEVbSyU7U9n0rLQV1aHwoolzgedy1E6y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wJwbz3eK7EuK6kRqb4FyNSXjIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3c:01:50:35:7e:56:6f:15:08:9c:0f:d0:2f:af:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d302706f3dde2bb12e2ba911a9be05c8d4978c86
Validity
Not Before: Sep 25 11:03:26 2026 GMT
Not After : Sep 26 11:03:26 2026 GMT
Subject: CN=358e30875643aac5afa236b2c3effc03711b1d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:be:d9:39:35:77:55:87:7b:e4:54:82:09:
b4:29:43:b0:ae:66:bc:2b:12:f3:60:c0:03:e7:d5:
82:ca:85:3a:82:7e:42:89:4b:e5:81:b5:a6:c2:b3:
58:4c:3d:a5:ca:69:a3:6a:12:7f:8a:2d:98:b5:b8:
2f:cc:70:4f:39:4e:36:4f:c0:a0:a7:fb:89:8d:1d:
29:f0:52:15:19:ee:39:23:43:51:05:bb:5d:ae:df:
41:a7:76:81:61:d4:ff:9a:00:7e:2d:0e:fa:04:16:
01:c2:aa:74:58:61:21:37:8f:aa:83:5b:d8:4e:14:
83:1a:a1:f5:4a:2c:40:b1:0e:d2:12:54:81:f1:fa:
e7:78:a5:a7:5c:fd:ac:74:99:2d:ce:4d:e5:97:3e:
1e:05:af:53:6a:87:7c:49:69:5d:b4:35:a0:97:1f:
e6:bb:fe:00:f9:22:ee:08:e0:2d:d5:4f:de:23:f6:
cf:0c:0b:66:a8:85:09:f6:e4:dd:3e:86:a7:ca:db:
e0:f4:0f:4c:ac:51:b1:c4:2c:6f:cd:c3:3a:fd:f3:
1f:73:13:2e:af:ce:78:8b:fc:49:c4:60:2a:bf:b6:
94:4c:2d:4d:0f:e4:7d:0c:d4:d5:f6:03:8b:57:8d:
95:7d:be:8b:eb:2b:b8:5f:fd:cf:af:39:09:34:bc:
99:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8E:30:87:56:43:AA:C5:AF:A2:36:B2:C3:EF:FC:03:71:1B:1D:5B
X509v3 Authority Key Identifier:
keyid:D3:02:70:6F:3D:DE:2B:B1:2E:2B:A9:11:A9:BE:05:C8:D4:97:8C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wJwbz3eK7EuK6kRqb4FyNSXjIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3d:9e:59:ad:16:df:f0:6d:61:1d:16:f0:89:41:db:de:d0:
76:d8:1c:f3:19:68:39:b4:3d:9e:09:65:37:6c:2a:d8:08:8b:
4c:2a:77:88:d1:c5:a4:81:9c:6b:3a:8d:64:61:13:11:a3:90:
63:86:8f:bc:e0:d8:d0:fa:2c:8f:06:eb:50:af:6e:f5:7c:a3:
2b:c2:c2:5e:65:0d:8a:7a:c2:a3:0a:39:e1:9d:f3:a6:e3:ba:
fc:7e:cf:01:21:30:26:98:82:33:54:d9:8a:08:92:f9:5f:75:
6c:05:14:99:e8:c2:d3:77:98:58:0e:2c:ce:c7:a0:ef:2f:b2:
2c:d3:9d:67:d2:46:20:30:bd:09:94:d7:7a:39:40:dd:8b:fb:
a4:fb:bb:36:db:8f:31:f3:f0:a9:7b:28:e8:9a:1d:d9:9c:0e:
67:83:80:f1:82:cb:2c:1c:d4:07:27:96:03:c1:8c:b4:ab:4e:
3d:91:3d:06:83:07:99:a6:a6:bb:c6:48:47:c0:6e:03:ed:56:
c4:6b:ac:5f:0e:26:fd:0e:38:e3:77:8d:f6:16:2e:4c:48:ac:
09:a2:0c:b0:64:da:35:04:26:65:fe:ef:6b:02:84:5f:99:e2:
d3:4e:5c:38:3b:a1:7b:10:18:28:40:32:ce:af:d2:e3:e7:96:
b6:2d:1b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:05:24 2026 by rpki-client