Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
File: W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft (raw, json)
Hash identifier: ZwYjQ1/pBBdvSERaXiPIeCnG3tjP0MMoQkosSATb1Hc=
Subject key identifier: 8A:39:CE:5B:F6:85:DF:61:0F:6E:E4:32:3C:EB:E3:C2:7E:BF:42:DF
Authority key identifier: 5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51
Certificate issuer: /CN=5bdc41674d65d2af9174b1abace0b371362b4851
Certificate serial: 019D9A74EC724B7FE165F3911B84287609A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
Manifest number: 0E72
Signing time: Fri 17 Apr 2026 08:00:47 +0000
Manifest this update: Fri 17 Apr 2026 08:00:47 +0000
Manifest next update: Sat 18 Apr 2026 08:00:47 +0000
Files and hashes: 1: EPkMocEIf6YHtVveQVCBv3QN0fQ.roa (hash: P29zKbxU8CX1RFik6k8KtMo4X8xEhL7qfYBrdaaVZmo=)
2: W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl (hash: QMo1Zr8wBvY/MdIGL38j3I4MjNu1cMDTUiVNMyRnQkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:ec:72:4b:7f:e1:65:f3:91:1b:84:28:76:09:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bdc41674d65d2af9174b1abace0b371362b4851
Validity
Not Before: Apr 17 08:00:47 2026 GMT
Not After : Apr 18 08:00:47 2026 GMT
Subject: CN=8a39ce5bf685df610f6ee4323cebe3c27ebf42df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:cc:44:ac:a4:07:60:b6:b9:3b:9b:90:27:
6c:81:31:90:e1:c5:96:39:c0:36:ae:0b:70:fa:38:
b4:5e:68:16:74:6b:7f:88:85:84:05:73:f3:cf:c0:
e4:fe:72:d4:9f:ea:78:73:84:38:ff:c1:fd:90:9e:
3c:b2:1d:d2:b1:00:89:86:15:cd:a3:1b:5a:ad:ba:
f7:ed:38:62:b7:0a:64:83:74:36:5d:5f:ad:5b:67:
92:d8:16:03:e5:f5:a1:a6:b9:71:ff:fa:0c:a6:ef:
54:04:4a:06:4d:1a:8f:28:c3:3d:a1:a0:e9:79:fd:
ba:0e:97:86:f1:50:67:65:bb:20:be:cc:c6:90:28:
17:01:52:11:0b:9a:10:84:01:f6:e1:5c:5e:66:df:
69:64:a0:a7:e1:11:cd:c2:a0:58:9e:3b:f9:1e:1c:
42:59:74:9a:5c:c6:a1:4e:d2:8b:63:b1:46:9e:38:
5c:bb:32:97:8d:e9:22:4b:2c:51:91:1a:6e:e4:ed:
0a:ef:ff:ab:d0:5a:7e:00:15:dd:5c:28:cf:e2:f5:
62:b9:7d:2a:21:76:c3:2f:58:cb:7b:97:90:63:b3:
38:64:bf:a2:4a:ba:d1:79:4c:04:8d:00:4c:2a:ae:
6a:aa:74:f8:37:d4:b5:40:2c:c1:8d:71:f0:c3:b8:
1a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:39:CE:5B:F6:85:DF:61:0F:6E:E4:32:3C:EB:E3:C2:7E:BF:42:DF
X509v3 Authority Key Identifier:
keyid:5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d5:c4:a5:d8:95:30:d5:cb:42:43:50:aa:de:74:28:ca:cb:
b0:e3:c9:e3:69:81:40:72:93:67:d0:b8:8f:b5:d1:3e:96:78:
7c:a3:2d:69:5e:ee:48:e9:3d:e1:83:6f:f5:d6:12:54:32:9a:
a3:23:25:ee:0b:25:1c:5d:e5:48:1a:02:7b:cb:9a:dd:fb:6a:
48:fb:31:4f:c4:4a:b8:05:e0:37:94:11:d6:50:90:7c:2c:cd:
43:fe:fd:c6:f4:a3:83:d2:c5:b2:60:3b:02:66:ac:b6:2e:a6:
6b:fc:57:f9:62:47:a0:0d:60:d2:81:93:a9:6d:5a:7b:06:52:
ee:99:7c:db:b1:55:92:3b:cd:3e:68:d9:aa:98:06:1a:dc:bc:
9e:d9:3e:cf:d8:1a:84:8a:29:22:52:20:4d:32:50:e6:fd:e1:
d2:56:b1:28:5f:3e:df:36:34:fb:7d:10:fc:fc:5c:37:93:15:
bd:2d:36:38:fb:94:b3:a9:90:72:31:89:36:e6:5e:f4:a5:32:
e3:30:e5:33:3d:fd:5b:29:7e:11:29:ec:66:c4:56:61:ea:4d:
b5:51:46:f8:54:f9:5f:09:35:c9:2b:53:69:7f:0c:32:71:8a:
34:f7:83:b7:5a:c3:e6:55:46:83:96:cf:f1:d4:ec:35:55:df:
4a:fc:e4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:05 2026 by rpki-client