Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json)
Hash identifier: vagGZYyLD2/A5fti6qlodqjVSu5C9hyNQaXsEaofBQc=
Subject key identifier: 94:B6:83:D3:7D:86:4C:92:9D:FE:24:4E:0A:C7:2C:E9:73:43:A5:E8
Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Certificate serial: 019FACE453635996671F0F7262AE5DAFF9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 08:01:12 +0000
Manifest this update: Wed 29 Jul 2026 08:01:12 +0000
Manifest next update: Thu 30 Jul 2026 08:01:12 +0000
Files and hashes: 1: Hq3i7QqtOif4jnuIIZrhxOxGPeA.roa (hash: SAjqZzVc45ymPybHk+sKrf2ScBvZ4GgSySB3zC4Qm38=)
2: U0apLFpP69_tXdLzda-grKolMoc.roa (hash: luYwz0PpHAMPxJN+VQDVTHVznpwlv94vqvOyZ0l/JsM=)
3: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: srdlOlz+rIeE6Q+8L8sXILl0yBlaVfstfHF7x2qUTF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:53:63:59:96:67:1f:0f:72:62:ae:5d:af:f9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Validity
Not Before: Jul 29 08:01:12 2026 GMT
Not After : Jul 30 08:01:12 2026 GMT
Subject: CN=94b683d37d864c929dfe244e0ac72ce97343a5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:9f:32:b6:34:c2:72:c9:a2:38:c0:61:32:
d8:8d:bf:09:bb:b7:9e:e5:67:44:c0:f1:c3:e5:d0:
fe:88:e1:6e:b8:56:e1:6d:bc:34:8e:48:41:80:1f:
ff:dc:01:89:71:cc:b7:e1:b3:dc:09:da:d5:29:ae:
76:cf:97:ac:e5:60:b7:bd:0b:04:ac:aa:84:3a:f4:
60:fd:db:c2:ed:49:eb:77:a1:21:8f:86:9d:43:f3:
63:dd:f8:ec:3f:43:1e:a9:a3:75:27:63:09:33:a8:
19:93:15:34:0a:1c:a8:98:5f:e1:c6:18:ae:67:9d:
5c:09:e4:5e:80:a7:9c:a4:e8:54:de:1a:28:20:ed:
21:4a:dc:dc:b0:d1:53:ba:69:65:6e:03:be:02:62:
28:93:e2:75:70:9b:2d:5c:a9:c3:bb:7c:43:ef:57:
1a:fd:d0:6a:2a:2d:a7:be:01:76:ee:fb:81:59:6b:
6d:82:97:e6:b7:2a:7d:98:f0:0f:20:08:fd:20:0a:
1d:bf:c6:4c:2e:a6:b4:4b:1e:ea:f0:de:b6:0c:03:
9f:4d:f6:e4:63:9b:3d:1b:0e:29:6e:e8:95:80:e8:
86:de:2e:55:ac:4d:13:d8:06:62:17:54:6e:1f:12:
13:9f:fa:4d:32:44:5b:49:15:c3:50:01:55:4c:46:
9f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B6:83:D3:7D:86:4C:92:9D:FE:24:4E:0A:C7:2C:E9:73:43:A5:E8
X509v3 Authority Key Identifier:
keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:01:f7:8c:88:8b:77:da:be:02:63:1e:ba:82:04:58:f5:26:
a5:f6:ec:4d:e4:5f:45:d4:fa:c0:7f:0d:0e:50:ef:5c:7a:87:
f3:71:9d:21:af:6d:c0:9c:7f:ca:c7:5b:0d:a6:61:c0:7f:11:
1e:13:20:58:ff:b4:3d:53:bb:01:cc:e2:fb:c1:23:71:36:4b:
19:2c:fe:56:a3:d2:6a:0f:e7:ec:22:89:0d:68:43:07:c3:0c:
75:78:78:e1:1c:77:12:9c:34:3e:65:3d:ee:52:17:3c:ec:d1:
ea:c8:4e:4c:27:12:e8:a2:6a:5f:bd:d8:1f:ec:43:cb:ff:57:
c3:83:f0:c8:35:6e:82:a2:00:03:fa:a7:e6:60:d8:9e:a7:20:
11:5b:94:4c:aa:f1:59:a9:4c:b5:c7:20:7f:b7:f1:03:6a:99:
0d:53:66:6a:22:1e:c4:63:fa:38:5d:0d:cc:7c:fc:f8:d9:3f:
60:b2:af:b8:44:f4:31:20:13:0c:47:d7:c4:85:a5:77:ee:ac:
5a:c0:c3:0b:f3:42:6d:de:92:e2:8e:bf:4a:2f:47:69:4a:dc:
36:0c:b2:ff:f0:de:a0:d8:c3:d7:41:26:23:9c:62:61:6c:cb:
a7:96:d4:78:86:f8:60:3c:87:a4:80:c9:c0:86:8a:43:cb:01:
5c:2e:76:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:05:35 2026 by rpki-client