Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
File: W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft (raw, json)
Hash identifier: kSFVqmSssxHGNEXcaRY1Ll2MmQYpkqkbriik2NL006w=
Subject key identifier: B4:91:9E:22:10:E5:5F:CF:53:E2:01:EB:EB:13:F2:67:1A:AD:3C:84
Authority key identifier: 5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51
Certificate issuer: /CN=5bdc41674d65d2af9174b1abace0b371362b4851
Certificate serial: 019CAAFD3FD11EF021CB70383A1077F33F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
Manifest number: 0DF6
Signing time: Sun 01 Mar 2026 20:00:49 +0000
Manifest this update: Sun 01 Mar 2026 20:00:49 +0000
Manifest next update: Mon 02 Mar 2026 20:00:49 +0000
Files and hashes: 1: EPkMocEIf6YHtVveQVCBv3QN0fQ.roa (hash: P29zKbxU8CX1RFik6k8KtMo4X8xEhL7qfYBrdaaVZmo=)
2: W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl (hash: BeP3VN2vCjEbU9hPZ/hBukhhgMkHEdEkQLZZdRmKpsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:3f:d1:1e:f0:21:cb:70:38:3a:10:77:f3:3f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bdc41674d65d2af9174b1abace0b371362b4851
Validity
Not Before: Mar 1 20:00:49 2026 GMT
Not After : Mar 2 20:00:49 2026 GMT
Subject: CN=b4919e2210e55fcf53e201ebeb13f2671aad3c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2f:d3:1c:0e:39:04:de:89:6f:7c:60:a2:7d:
a0:2c:65:13:68:ff:20:53:9d:1b:50:2e:ce:50:25:
12:7a:c3:37:dc:00:41:55:94:3c:00:84:b9:a4:da:
15:ee:db:05:51:4f:16:c2:8d:70:06:85:ba:38:cc:
45:da:8c:d1:c1:4a:5b:ed:b1:3e:c0:27:54:24:e7:
35:40:17:5c:dd:f7:af:14:16:2f:8d:f6:30:a6:9e:
44:88:12:41:36:e1:f6:90:9b:38:e5:a1:95:7a:2e:
37:b4:4b:8d:10:e1:6c:67:09:da:e8:b5:2c:7d:eb:
71:09:97:4d:61:7f:a7:02:11:60:8a:a6:c1:4a:9d:
bb:5f:ee:10:b3:3d:8f:56:19:2e:fe:c8:db:9f:cc:
d9:46:2e:47:45:9c:87:1a:6f:01:d1:28:20:a3:e2:
d7:2b:6e:b4:06:ab:5b:e3:30:cd:55:58:ac:49:8c:
11:49:96:07:bf:fc:00:b7:cd:a1:8c:11:f0:9a:99:
53:f5:fb:0c:98:dd:8b:82:a6:20:22:8a:ba:13:07:
e3:96:f4:e1:6f:73:69:83:b3:7b:27:bd:59:20:76:
fd:c8:dc:29:8b:7a:cd:76:c6:63:74:4a:bf:d6:d2:
81:85:e3:e7:b6:97:19:cb:ea:2d:06:78:47:e0:b7:
d1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:91:9E:22:10:E5:5F:CF:53:E2:01:EB:EB:13:F2:67:1A:AD:3C:84
X509v3 Authority Key Identifier:
keyid:5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7f:a2:d9:12:54:b5:26:31:b9:48:29:10:eb:e4:c9:5b:e1:
46:9d:47:57:0c:87:48:2d:96:66:41:af:5e:29:6f:ce:c4:b3:
27:31:3e:37:39:e4:6d:b8:fa:01:be:f4:aa:87:2b:75:31:1d:
84:e3:ae:b1:6a:f1:41:4c:4a:51:d3:1e:79:c0:fc:85:17:ae:
27:fb:d2:61:84:a5:d2:e9:46:b2:72:1f:48:f1:65:b5:e3:38:
9b:5d:cb:fd:84:a7:80:c9:08:b1:24:d5:c0:3c:cf:de:8f:4f:
ad:22:37:60:48:27:e4:93:82:68:94:7b:53:ab:6c:11:99:e3:
3e:73:0e:33:21:63:95:da:d1:48:4f:fe:09:25:2e:c5:70:f1:
ac:d1:40:29:2d:c1:c7:b3:8c:7b:84:9e:ec:7a:92:cb:e6:a6:
2f:94:38:3c:65:43:73:29:4b:44:8b:85:21:d8:a3:da:2b:2c:
69:87:7a:26:ab:ba:73:e6:ab:4c:39:b1:f0:90:fa:06:a3:7c:
94:b2:be:ba:d8:24:6d:b2:d2:4a:d6:db:6a:f2:8d:31:77:ac:
7e:ac:32:9b:33:ef:09:28:c3:4b:b4:74:91:35:f5:40:74:66:
d6:99:ab:60:0f:a2:c7:8b:d2:b8:48:a0:a6:84:9b:de:dc:df:
b8:9f:85:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:02 2026 by rpki-client