Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json)
Hash identifier: /2raHO50+PMEh3WQcBNnhcDElziksCTEla0HGPKgVlE=
Subject key identifier: 46:BC:67:2C:DF:D4:1C:D0:00:95:DD:FF:E2:1A:04:04:07:DF:7B:45
Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Certificate serial: 01A13110083AEC1BCB1946688279AEF184EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
Manifest number: 1A9D
Signing time: Mon 12 Oct 2026 17:01:36 +0000
Manifest this update: Mon 12 Oct 2026 17:01:36 +0000
Manifest next update: Tue 13 Oct 2026 17:01:36 +0000
Files and hashes: 1: Hq3i7QqtOif4jnuIIZrhxOxGPeA.roa (hash: SAjqZzVc45ymPybHk+sKrf2ScBvZ4GgSySB3zC4Qm38=)
2: U0apLFpP69_tXdLzda-grKolMoc.roa (hash: luYwz0PpHAMPxJN+VQDVTHVznpwlv94vqvOyZ0l/JsM=)
3: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: 65KHjakgWgJv4ZU9Kg67YDIjhKKlxEpO79oabZ5ucHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:10:08:3a:ec:1b:cb:19:46:68:82:79:ae:f1:84:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Validity
Not Before: Oct 12 17:01:36 2026 GMT
Not After : Oct 13 17:01:36 2026 GMT
Subject: CN=46bc672cdfd41cd00095ddffe21a040407df7b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:be:af:61:cf:2b:85:37:32:0f:4b:ba:b5:
0f:e8:b4:49:86:79:cd:c1:9f:d3:2e:b1:8e:e6:78:
d5:dc:1f:b8:84:ca:9e:ae:d0:e8:c5:18:08:0f:db:
9a:e8:ae:9a:96:d2:5b:83:3c:dd:fa:1f:2b:49:6e:
13:8e:12:1a:16:44:d8:2c:74:8f:d1:ce:09:26:a5:
82:e8:4c:45:52:a9:67:fb:56:c7:b9:bc:11:ca:72:
9b:91:a5:57:bd:2f:66:d6:07:60:3c:4a:95:21:ab:
87:02:5a:c2:ed:49:70:70:b5:7c:e4:bb:74:6b:2a:
7c:10:d8:3c:db:04:e4:85:a2:de:c0:76:8d:2c:8a:
18:d2:a2:33:ae:d2:96:77:c3:89:4d:09:64:d9:42:
d5:32:38:a5:d4:c3:f3:ad:87:a0:fb:02:e5:36:bd:
1f:bd:90:ce:c9:b6:7e:68:c0:8f:c1:ed:96:95:ff:
7e:cd:de:54:5b:71:ad:bf:60:dd:f1:06:76:38:1d:
a5:3f:4a:dd:4f:9e:1f:b9:59:69:ba:e2:34:ce:f9:
ce:b7:22:50:6d:5f:c3:f6:69:1e:fd:68:d7:39:4a:
33:ec:b8:43:9e:f7:b8:d6:a6:85:ab:8d:71:37:6b:
05:a8:3f:f6:76:53:5b:f0:82:cd:2d:51:23:ce:2d:
c0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BC:67:2C:DF:D4:1C:D0:00:95:DD:FF:E2:1A:04:04:07:DF:7B:45
X509v3 Authority Key Identifier:
keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7e:bb:c5:f1:b1:d6:c5:df:33:fb:13:a0:7a:7f:eb:b3:48:
e5:0a:77:77:67:86:46:eb:f4:60:28:87:72:54:c0:5c:53:e8:
46:4b:39:a9:e0:62:df:f2:ac:52:47:1b:31:64:c9:c8:84:fd:
e8:1e:84:8f:00:f5:c5:00:f4:98:ad:2b:7e:6e:18:03:61:2a:
af:9c:64:39:4f:a1:76:c9:fe:06:8a:ce:9d:a7:4b:f4:06:3b:
5b:4a:10:4c:43:d4:89:17:25:de:a7:31:17:7f:37:2f:7d:01:
3e:76:af:03:6c:48:31:95:fb:ea:7d:e8:9f:b4:6a:20:5c:fe:
f4:da:65:0e:8e:8c:ad:6f:dd:44:11:ce:b7:76:32:8c:01:c5:
df:bc:24:bb:52:3b:61:8a:24:92:23:df:54:d4:2e:42:00:d0:
35:38:71:df:38:40:1b:b0:cd:a2:b3:a4:3b:ad:86:de:eb:2c:
4a:96:02:6f:8b:25:05:e2:c3:b2:3d:c7:d0:db:30:e4:46:f5:
35:3b:05:26:cd:81:da:44:69:f2:67:54:5c:09:85:2f:d1:e6:
07:75:06:21:1d:d9:fb:ff:41:61:b8:7e:82:f4:19:02:6e:eb:
90:fb:5f:a5:17:fc:c4:19:16:6d:66:49:de:33:b1:dd:31:35:
7e:b9:e4:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaExEAg67BvLGUZognmu8YTsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZDhkNzJiMWNiZmM2N2MzNzlhZDlhOTJjNjZmYWM2Yzhk
MzIzM2EwHhcNMjYxMDEyMTcwMTM2WhcNMjYxMDEzMTcwMTM2WjAzMTEwLwYDVQQD
Eyg0NmJjNjcyY2RmZDQxY2QwMDA5NWRkZmZlMjFhMDQwNDA3ZGY3YjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRC+r2HPK4U3Mg9LurUP6LRJhnnN
wZ/TLrGO5njV3B+4hMqertDoxRgID9ua6K6altJbgzzd+h8rSW4TjhIaFkTYLHSP
0c4JJqWC6ExFUqln+1bHubwRynKbkaVXvS9m1gdgPEqVIauHAlrC7UlwcLV85Lt0
ayp8ENg82wTkhaLewHaNLIoY0qIzrtKWd8OJTQlk2ULVMjil1MPzrYeg+wLlNr0f
vZDOybZ+aMCPwe2Wlf9+zd5UW3Gtv2Dd8QZ2OB2lP0rdT54fuVlpuuI0zvnOtyJQ
bV/D9mke/WjXOUoz7LhDnve41qaFq41xN2sFqD/2dlNb8ILNLVEjzi3AGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEa8Zyzf1BzQAJXd/+IaBAQH33tFMB8GA1UdIwQY
MBaAFFvY1yscv8Z8N5rZqSxm+sbI0yM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kMjk2YTgtYTViMS00YTM0LTgxMjgt
ODkzNTllNzgzMjI0LzEvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kMjk2YTgtYTViMS00YTM0LTgxMjgtODkzNTllNzgzMjI0
LzEvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiH67xfGx
1sXfM/sToHp/67NI5Qp3d2eGRuv0YCiHclTAXFPoRks5qeBi3/KsUkcbMWTJyIT9
6B6EjwD1xQD0mK0rfm4YA2Eqr5xkOU+hdsn+BorOnadL9AY7W0oQTEPUiRcl3qcx
F383L30BPnavA2xIMZX76n3on7RqIFz+9NplDo6MrW/dRBHOt3YyjAHF37wku1I7
YYokkiPfVNQuQgDQNThx3zhAG7DNorOkO62G3ussSpYCb4slBeLDsj3H0Nsw5Eb1
NTsFJs2B2kRp8mdUXAmFL9HmB3UGIR3Z+/9BYbh+gvQZAm7rkPtfpRf8xBkWbWZJ
3jOx3TE1frnkSQ==
-----END CERTIFICATE-----
Generated at Mon Oct 12 23:46:06 2026 by rpki-client