Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json)
Hash identifier: jnSmZdfsaQjhStRh6pgtnrO9zxnaslubTQ8yW2kSzu8=
Subject key identifier: 4C:AC:85:A6:A1:E6:CA:E1:E4:EB:69:BB:D2:71:28:C7:B9:CD:DC:23
Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Certificate serial: 01A19D35568B862295B2EC1A62096DED6CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
Manifest number: 1AD5
Signing time: Mon 02 Nov 2026 17:01:20 +0000
Manifest this update: Mon 02 Nov 2026 17:01:20 +0000
Manifest next update: Tue 03 Nov 2026 17:01:20 +0000
Files and hashes: 1: Hq3i7QqtOif4jnuIIZrhxOxGPeA.roa (hash: SAjqZzVc45ymPybHk+sKrf2ScBvZ4GgSySB3zC4Qm38=)
2: U0apLFpP69_tXdLzda-grKolMoc.roa (hash: luYwz0PpHAMPxJN+VQDVTHVznpwlv94vqvOyZ0l/JsM=)
3: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: ubXQyUp0/ouYHgaI58F+s4hod4kEG6r6octtIZaTpyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 14:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:35:56:8b:86:22:95:b2:ec:1a:62:09:6d:ed:6c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Validity
Not Before: Nov 2 17:01:20 2026 GMT
Not After : Nov 3 17:01:20 2026 GMT
Subject: CN=4cac85a6a1e6cae1e4eb69bbd27128c7b9cddc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:18:76:0f:5f:3f:88:c0:b3:c9:60:e9:fb:
1c:c6:bc:15:75:35:8d:2f:0d:03:c6:9a:89:52:dc:
97:5e:26:70:e4:9a:72:e0:75:f8:18:06:50:ac:98:
a5:c2:d8:1c:dc:b9:c2:4a:da:c9:d1:c9:c6:a9:36:
97:18:47:84:8d:1e:0c:a5:71:90:78:0a:b7:72:c8:
d3:51:33:53:74:98:c9:81:b3:b0:db:cc:0a:79:a4:
39:fd:35:a5:92:4d:61:52:f6:4e:3e:d1:ad:26:e4:
46:cb:d0:32:3d:94:4a:2c:4a:a9:f3:ed:39:54:c6:
55:cd:ec:db:73:b5:4e:d6:98:6e:bc:c2:e2:0e:44:
82:8a:44:e0:32:a2:7a:de:62:7d:4e:af:16:c1:0a:
ef:20:25:3b:1a:7a:4e:ee:89:5d:9b:84:ff:61:6c:
6d:b0:58:c3:4f:01:a1:be:99:73:75:5b:f6:d1:8a:
51:72:20:8f:79:9d:86:1c:fe:20:49:45:6e:f1:97:
3b:6f:7a:6a:24:29:da:44:c3:a2:da:a2:9d:bc:e2:
1d:b5:45:20:6c:38:7c:f8:0a:72:ea:d7:53:7e:cc:
80:09:d4:a1:fc:d4:ef:58:31:48:c4:bb:1b:55:cf:
9b:12:19:4b:7a:29:64:6c:f5:48:28:47:1b:08:0a:
a2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AC:85:A6:A1:E6:CA:E1:E4:EB:69:BB:D2:71:28:C7:B9:CD:DC:23
X509v3 Authority Key Identifier:
keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:dd:a5:ac:01:b4:79:b2:2d:f6:35:af:b9:33:77:5c:d4:d7:
22:5e:fb:95:e5:8a:13:51:00:43:a5:58:c3:e8:a6:64:3b:dc:
53:f7:2e:4a:e3:62:76:09:9a:81:09:68:f0:44:4c:8c:aa:76:
b7:92:e1:62:e8:96:ff:ab:f7:59:15:99:03:b2:a7:f6:5b:2f:
28:c9:ea:92:2d:54:f5:a0:db:cc:2d:61:76:23:9e:59:56:0a:
13:d9:d2:1a:c8:08:f5:6f:3b:3c:ac:ae:49:18:1a:13:cd:b3:
d1:ff:38:51:c6:0f:ee:c1:e6:0d:fc:30:f8:63:56:c8:96:c3:
8c:e2:dd:42:5e:28:8c:e1:ad:1b:a4:fa:a1:bb:b5:66:30:cd:
62:65:e9:55:89:43:04:d3:d9:2f:a0:a9:8d:dc:fd:37:c0:20:
6e:88:72:f5:88:3e:36:b5:05:70:ce:00:06:22:a1:21:50:b1:
2e:f1:2d:62:e6:1f:20:d8:36:3e:2c:dc:36:60:b0:5b:7e:2a:
9d:1b:de:06:c2:99:b3:ed:b8:d6:1c:97:77:f8:bf:ba:90:27:
64:64:5d:f5:9e:15:fb:61:9f:64:4c:28:ad:85:aa:94:0f:58:
d8:35:0f:f9:36:57:9c:2d:58:70:f2:4f:71:f9:38:1a:94:ed:
a2:d8:72:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGdNVaLhiKVsuwaYglt7WziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZDhkNzJiMWNiZmM2N2MzNzlhZDlhOTJjNjZmYWM2Yzhk
MzIzM2EwHhcNMjYxMTAyMTcwMTIwWhcNMjYxMTAzMTcwMTIwWjAzMTEwLwYDVQQD
Eyg0Y2FjODVhNmExZTZjYWUxZTRlYjY5YmJkMjcxMjhjN2I5Y2RkYzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKIYdg9fP4jAs8lg6fscxrwVdTWN
Lw0DxpqJUtyXXiZw5Jpy4HX4GAZQrJilwtgc3LnCStrJ0cnGqTaXGEeEjR4MpXGQ
eAq3csjTUTNTdJjJgbOw28wKeaQ5/TWlkk1hUvZOPtGtJuRGy9AyPZRKLEqp8+05
VMZVzezbc7VO1phuvMLiDkSCikTgMqJ63mJ9Tq8WwQrvICU7GnpO7oldm4T/YWxt
sFjDTwGhvplzdVv20YpRciCPeZ2GHP4gSUVu8Zc7b3pqJCnaRMOi2qKdvOIdtUUg
bDh8+Apy6tdTfsyACdSh/NTvWDFIxLsbVc+bEhlLeilkbPVIKEcbCAqiJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyshaah5srh5Otpu9JxKMe5zdwjMB8GA1UdIwQY
MBaAFFvY1yscv8Z8N5rZqSxm+sbI0yM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kMjk2YTgtYTViMS00YTM0LTgxMjgt
ODkzNTllNzgzMjI0LzEvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kMjk2YTgtYTViMS00YTM0LTgxMjgtODkzNTllNzgzMjI0
LzEvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh92lrAG0
ebIt9jWvuTN3XNTXIl77leWKE1EAQ6VYw+imZDvcU/cuSuNidgmagQlo8ERMjKp2
t5LhYuiW/6v3WRWZA7Kn9lsvKMnqki1U9aDbzC1hdiOeWVYKE9nSGsgI9W87PKyu
SRgaE82z0f84UcYP7sHmDfww+GNWyJbDjOLdQl4ojOGtG6T6obu1ZjDNYmXpVYlD
BNPZL6Cpjdz9N8Agbohy9Yg+NrUFcM4ABiKhIVCxLvEtYuYfINg2PizcNmCwW34q
nRveBsKZs+241hyXd/i/upAnZGRd9Z4V+2GfZEworYWqlA9Y2DUP+TZXnC1YcPJP
cfk4GpTtothyIw==
-----END CERTIFICATE-----
Generated at Mon Nov 2 21:17:47 2026 by rpki-client