Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json)
Hash identifier: RegyvgeL+71FA9KLbjqY+3jeIc0VHhwbAA9yfXwjTiI=
Subject key identifier: D6:30:4C:37:6F:40:CD:50:53:DC:9C:02:88:D0:55:04:28:57:E1:A9
Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Certificate serial: 019CAD22A75066434EA71F38F695F1B4E6FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 06:00:55 +0000
Manifest this update: Mon 02 Mar 2026 06:00:55 +0000
Manifest next update: Tue 03 Mar 2026 06:00:55 +0000
Files and hashes: 1: CMyPiezTn5D8-YXplmxvsmXX2bc.roa (hash: ookrXpU00j/ibJDIb1qnIotSBgooiA09iz417PKBh/s=)
2: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: A8z2D7c8IVEPlubshxBc7QSzlyl35GnoaPSuD5YIc0c=)
3: Z7_grVtAJU7hfwbq-pCXGjagV74.roa (hash: YxhFU3h3k0uDJ916nZ5V7OvtkvXv5Nzb7/nDDuA04NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:a7:50:66:43:4e:a7:1f:38:f6:95:f1:b4:e6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Validity
Not Before: Mar 2 06:00:55 2026 GMT
Not After : Mar 3 06:00:55 2026 GMT
Subject: CN=d6304c376f40cd5053dc9c0288d055042857e1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:fc:7f:ea:52:35:0c:98:4b:e8:f9:d2:34:
33:b3:df:c6:3c:10:e3:be:1c:77:1a:3e:1e:74:cf:
23:57:19:6f:9b:94:e4:65:b2:08:14:5c:02:05:4e:
4d:49:f2:e7:8f:f8:a6:28:bf:b7:52:ae:be:14:2b:
f2:84:1d:ce:2c:62:ae:9d:c3:3e:79:6a:84:9c:f9:
29:23:13:13:49:8a:e3:40:e6:ce:9d:0a:d5:7a:8b:
e6:0d:34:05:eb:d6:ec:46:5c:6d:3c:c4:f3:1c:f4:
9c:34:64:f8:78:32:d9:7f:53:c9:2a:55:7d:7c:ef:
9b:48:5b:c3:83:2d:02:f1:bb:11:04:3f:f6:20:fc:
ef:37:2a:ef:cd:da:38:58:7d:ae:c5:2c:8e:eb:07:
9a:17:db:f7:4d:f4:e1:6a:31:c0:83:0c:99:6f:d4:
12:27:34:5a:85:b1:81:ee:04:8a:f2:a4:f4:a2:10:
49:53:57:42:b3:d2:98:1a:30:b5:25:10:1e:21:60:
ee:36:60:c4:2d:fa:7f:77:bb:8f:e0:41:91:32:be:
06:19:5a:4a:e8:c8:59:63:53:7f:67:6a:e0:9b:b6:
01:83:21:c4:82:c2:7a:1c:87:2c:8e:0d:45:ed:3c:
86:3c:92:4e:8c:57:e9:42:3e:ba:02:2b:77:73:44:
55:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:30:4C:37:6F:40:CD:50:53:DC:9C:02:88:D0:55:04:28:57:E1:A9
X509v3 Authority Key Identifier:
keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:01:6b:d6:d0:41:52:f5:f7:37:a1:1c:06:5b:a8:ef:48:15:
e6:c3:1c:89:af:47:8f:3d:73:88:c6:bd:51:3c:c4:c9:45:56:
e5:13:69:d0:11:07:e4:21:b9:a3:95:a0:10:ec:2a:cc:70:17:
95:13:74:99:ea:0d:7d:6e:e4:44:aa:b7:99:57:14:0a:42:2e:
a5:b1:27:a5:3b:97:bc:e2:e2:7e:9b:83:a4:8b:af:ad:22:78:
f5:5b:11:4c:32:6e:3f:b3:9f:4f:c7:f1:c1:70:66:62:30:ff:
fa:99:83:72:6d:66:95:19:aa:d1:50:64:56:20:9c:60:c8:a1:
19:2c:7b:c5:34:bc:7b:67:0f:ff:31:ef:33:b2:89:8b:e2:7c:
0e:98:70:77:10:ac:63:41:ed:e9:f8:6b:17:79:e5:39:63:b3:
47:a7:c1:9b:2a:59:a5:e9:00:92:c0:60:08:69:22:cd:85:99:
8e:75:9e:a7:fa:5e:1c:4d:35:2f:2d:f6:25:12:e1:b5:57:0a:
fe:67:ca:6f:36:a0:d3:2e:ad:51:07:6d:e5:c6:7a:08:2c:df:
09:9f:ec:13:ad:08:4f:75:24:46:f5:4b:7e:4b:f1:e3:cb:ec:
74:8e:68:b0:cb:87:06:76:58:d0:db:f7:74:d2:a3:4e:e5:b7:
6d:24:76:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIqdQZkNOpx849pXxtOb/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZDhkNzJiMWNiZmM2N2MzNzlhZDlhOTJjNjZmYWM2Yzhk
MzIzM2EwHhcNMjYwMzAyMDYwMDU1WhcNMjYwMzAzMDYwMDU1WjAzMTEwLwYDVQQD
EyhkNjMwNGMzNzZmNDBjZDUwNTNkYzljMDI4OGQwNTUwNDI4NTdlMWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7L8f+pSNQyYS+j50jQzs9/GPBDj
vhx3Gj4edM8jVxlvm5TkZbIIFFwCBU5NSfLnj/imKL+3Uq6+FCvyhB3OLGKuncM+
eWqEnPkpIxMTSYrjQObOnQrVeovmDTQF69bsRlxtPMTzHPScNGT4eDLZf1PJKlV9
fO+bSFvDgy0C8bsRBD/2IPzvNyrvzdo4WH2uxSyO6weaF9v3TfThajHAgwyZb9QS
JzRahbGB7gSK8qT0ohBJU1dCs9KYGjC1JRAeIWDuNmDELfp/d7uP4EGRMr4GGVpK
6MhZY1N/Z2rgm7YBgyHEgsJ6HIcsjg1F7TyGPJJOjFfpQj66Ait3c0RVmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYwTDdvQM1QU9ycAojQVQQoV+GpMB8GA1UdIwQY
MBaAFFvY1yscv8Z8N5rZqSxm+sbI0yM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kMjk2YTgtYTViMS00YTM0LTgxMjgt
ODkzNTllNzgzMjI0LzEvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kMjk2YTgtYTViMS00YTM0LTgxMjgtODkzNTllNzgzMjI0
LzEvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQFr1tBB
UvX3N6EcBluo70gV5sMcia9Hjz1ziMa9UTzEyUVW5RNp0BEH5CG5o5WgEOwqzHAX
lRN0meoNfW7kRKq3mVcUCkIupbEnpTuXvOLifpuDpIuvrSJ49VsRTDJuP7OfT8fx
wXBmYjD/+pmDcm1mlRmq0VBkViCcYMihGSx7xTS8e2cP/zHvM7KJi+J8DphwdxCs
Y0Ht6fhrF3nlOWOzR6fBmypZpekAksBgCGkizYWZjnWep/peHE01Ly32JRLhtVcK
/mfKbzag0y6tUQdt5cZ6CCzfCZ/sE60IT3UkRvVLfkvx48vsdI5osMuHBnZY0Nv3
dNKjTuW3bSR21w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:57:33 2026 by rpki-client