Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft
File: 0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft (raw, json)
Hash identifier: FcUAviZeLsfiXHMZFpBhz/sNGgUXivt8hu5NJPuGrFc=
Subject key identifier: 8B:94:73:C5:3B:24:9C:51:DC:88:A7:CD:0D:36:8D:92:A3:AD:4C:53
Authority key identifier: D3:02:70:6F:3D:DE:2B:B1:2E:2B:A9:11:A9:BE:05:C8:D4:97:8C:86
Certificate issuer: /CN=d302706f3dde2bb12e2ba911a9be05c8d4978c86
Certificate serial: 019D375289C5B619A607A33D902BB5D659AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wJwbz3eK7EuK6kRqb4FyNSXjIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft
Manifest number: 0277
Signing time: Sun 29 Mar 2026 02:00:49 +0000
Manifest this update: Sun 29 Mar 2026 02:00:49 +0000
Manifest next update: Mon 30 Mar 2026 02:00:49 +0000
Files and hashes: 1: 0wJwbz3eK7EuK6kRqb4FyNSXjIY.crl (hash: utB3O9tIlKgELsyG10F93eiui4HUBKlzhDyhKnGvoXY=)
2: W2JVDI-08lmKNZhAYHd2tvRmyTM.roa (hash: ckBzzLd5OwJEVbSyU7U9n0rLQV1aHwoolzgedy1E6y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wJwbz3eK7EuK6kRqb4FyNSXjIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:89:c5:b6:19:a6:07:a3:3d:90:2b:b5:d6:59:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d302706f3dde2bb12e2ba911a9be05c8d4978c86
Validity
Not Before: Mar 29 02:00:49 2026 GMT
Not After : Mar 30 02:00:49 2026 GMT
Subject: CN=8b9473c53b249c51dc88a7cd0d368d92a3ad4c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3a:4d:94:bf:7f:b2:8c:d3:bd:75:73:38:62:
b3:c7:99:7a:4e:59:18:63:f0:4d:b6:a1:45:e7:ce:
d5:e4:85:db:0b:57:59:a7:bd:5e:af:fb:64:7e:61:
22:b9:54:a2:c0:4d:2b:e5:c5:39:5c:b6:5e:68:1f:
1d:86:1e:b0:18:a5:df:fd:0a:20:be:50:e0:7b:a7:
aa:33:1d:8f:95:44:46:ce:3b:26:e9:32:08:13:e8:
24:ed:83:bf:91:76:7b:f9:7c:4a:77:98:08:e8:9c:
a2:4e:2c:6b:b2:aa:8e:f1:55:c2:5b:e2:50:1a:5e:
df:41:a7:1b:ad:7a:85:a2:1e:3b:db:37:00:1b:96:
1b:c7:9e:85:ba:27:ce:c4:31:75:2e:89:4e:d0:7c:
10:87:91:f6:93:0b:97:8e:f0:40:f3:64:94:d7:2c:
4d:c9:8e:15:1f:9e:bc:5f:7e:76:1a:ff:06:12:47:
04:1e:55:75:c4:2a:86:ba:11:87:f9:55:44:44:09:
a8:a6:82:2c:77:9a:cc:6d:85:57:74:d9:96:05:7e:
e7:b9:c7:c2:dc:74:be:51:f1:46:a2:e3:a9:cf:58:
13:0f:8e:1c:3a:02:87:ad:14:d0:ac:e7:a3:87:b8:
b0:a0:63:5d:55:4e:f5:85:02:16:8b:75:53:fe:c0:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:94:73:C5:3B:24:9C:51:DC:88:A7:CD:0D:36:8D:92:A3:AD:4C:53
X509v3 Authority Key Identifier:
keyid:D3:02:70:6F:3D:DE:2B:B1:2E:2B:A9:11:A9:BE:05:C8:D4:97:8C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wJwbz3eK7EuK6kRqb4FyNSXjIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e5:a0:a3:c2:15:40:f3:5c:f4:99:97:85:89:fa:73:14:d7:
93:f5:6c:4f:42:f1:22:cc:da:29:aa:91:bb:01:a2:53:85:e4:
d7:d6:a5:a5:3b:6b:f7:26:c6:9d:71:5b:28:e0:ac:bf:6f:a0:
73:10:3e:6d:96:57:9d:d2:65:ff:2b:1a:05:2b:2c:9a:a0:5e:
94:b4:27:38:39:f4:1f:5d:e9:3b:b7:50:0f:b8:a0:e3:01:df:
d7:39:f0:c9:53:1b:f6:b6:d9:af:57:67:07:63:f6:d5:94:f3:
e8:b3:0b:b8:77:be:ea:ac:11:ab:6c:b7:5d:d5:57:8a:9a:c5:
a5:70:69:12:32:b0:32:9e:bb:38:19:18:1d:52:6a:bc:66:6f:
33:69:c8:ac:93:7e:54:40:af:ef:16:74:47:bb:ad:2a:b6:a4:
05:2a:58:eb:9f:5d:81:40:a9:30:1a:53:41:b7:52:ec:27:a8:
01:f5:1c:98:35:74:7a:55:ac:96:ea:60:a2:4c:21:c5:21:62:
04:07:ee:a3:ae:18:f4:1f:8e:28:ab:cb:80:7d:14:ae:65:49:
a9:ea:d0:62:08:7b:c7:0a:11:5d:fe:1d:7b:77:95:84:7e:a6:
e1:fc:8b:3e:01:13:2e:41:69:fc:66:44:54:3b:26:24:58:43:
6c:9b:8e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:58 2026 by rpki-client