Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json)
Hash identifier: sHJbP3Wqj6P3i++4zNLEWqO/KGZ1WN9WfRqU+5yqimM=
Subject key identifier: 7E:9B:8F:5D:C1:2C:33:6F:EA:C0:9E:A4:A2:6A:A9:14:85:A5:A8:3A
Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Certificate serial: 019D9C9A2B656DA7EAE867CDB1F94E2F3244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 18:00:42 +0000
Manifest this update: Fri 17 Apr 2026 18:00:42 +0000
Manifest next update: Sat 18 Apr 2026 18:00:42 +0000
Files and hashes: 1: CMyPiezTn5D8-YXplmxvsmXX2bc.roa (hash: ookrXpU00j/ibJDIb1qnIotSBgooiA09iz417PKBh/s=)
2: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: EHQK8LWAbbDoHNpyoYn6/LFAo5GW9JAcL3VF4xpszoA=)
3: Z7_grVtAJU7hfwbq-pCXGjagV74.roa (hash: YxhFU3h3k0uDJ916nZ5V7OvtkvXv5Nzb7/nDDuA04NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:2b:65:6d:a7:ea:e8:67:cd:b1:f9:4e:2f:32:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Validity
Not Before: Apr 17 18:00:42 2026 GMT
Not After : Apr 18 18:00:42 2026 GMT
Subject: CN=7e9b8f5dc12c336feac09ea4a26aa91485a5a83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:89:ee:96:06:a4:70:7b:0a:1b:6a:a5:d9:
d3:9f:76:dc:10:a8:f9:9d:68:ab:b6:56:35:55:5c:
dd:dc:38:93:5f:75:88:1c:97:85:24:9b:0d:a2:93:
c4:49:65:02:e9:28:c2:90:63:5f:21:99:e5:b0:61:
b3:70:7d:06:1d:02:5a:6c:0b:90:65:bf:b0:22:d3:
a4:14:06:92:8e:c7:76:a5:2f:38:97:99:39:2e:79:
17:63:ec:25:3e:3f:2e:0c:68:c5:45:e6:de:35:03:
c6:1b:92:e6:94:0b:7a:fd:6b:b1:ae:0e:4d:dd:7f:
da:0c:a3:21:2a:15:b7:d4:df:7c:ca:39:c9:42:31:
4f:3b:2b:d5:b8:7c:5d:82:99:77:ab:cb:82:75:c8:
09:19:6e:21:71:da:37:d7:96:08:5d:22:2a:9b:4e:
87:87:69:70:ce:21:ec:10:e1:ae:1f:61:b8:70:2a:
79:ac:4d:d0:d4:ab:cc:36:06:d6:af:ae:40:f6:ca:
2c:97:d7:f1:5e:ec:1b:e6:e7:e9:51:f2:4d:b6:3a:
01:16:94:f8:01:fa:5a:fc:0c:a2:32:01:ae:5c:25:
e9:2a:f3:fa:23:11:09:83:52:e4:70:a0:ef:ca:ef:
95:93:4c:a5:98:a0:5c:6d:f1:c5:ad:9b:d5:d9:60:
95:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9B:8F:5D:C1:2C:33:6F:EA:C0:9E:A4:A2:6A:A9:14:85:A5:A8:3A
X509v3 Authority Key Identifier:
keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b5:28:68:9b:77:41:0c:4e:22:51:a8:b3:93:7c:f1:a8:c8:
14:d3:28:e7:cb:05:79:15:ee:76:29:ae:d8:ef:b6:de:26:b4:
1d:57:2b:54:28:a8:20:e4:a5:07:20:01:a7:b8:a8:1f:22:6a:
e3:8e:01:00:a8:bc:45:9b:f5:5c:2b:04:3c:35:f4:a5:aa:cf:
42:e4:c0:d0:b2:75:a9:c8:03:32:ab:1c:97:e6:f3:33:42:fc:
6f:cd:2f:51:d4:bd:88:47:19:95:7b:b3:31:0a:5b:c8:88:b2:
44:45:b7:bc:6d:23:23:7e:11:55:c9:d9:3a:ba:d6:12:31:fd:
6d:9f:ac:0a:8f:2c:d4:5f:5a:3f:70:c6:8f:09:be:c0:7c:97:
4f:33:f8:92:af:a9:7f:93:e2:d0:50:e8:90:6b:b3:90:2e:1c:
43:53:62:ce:bd:a3:05:23:5e:68:4d:5e:b1:ed:ce:db:86:66:
dd:f1:1d:61:46:89:2a:4c:da:09:d0:25:01:6c:15:64:7a:bd:
14:27:2a:fd:40:dd:48:66:d8:c5:09:96:3b:15:be:9b:fc:db:
25:ab:1b:b3:eb:98:11:a1:d3:cb:43:d2:9b:ff:26:69:bf:52:
57:5d:d7:0c:4e:eb:b1:5c:5a:18:8b:a0:94:0d:12:d9:4c:ad:
82:22:c0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:04:59 2026 by rpki-client