Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json)
Hash identifier: f0Z1vxsXO/wjWKFNhSm3Qcp9U6/kTq/4ftoeCTsqF2g=
Subject key identifier: 8B:1A:72:47:BA:A2:B9:80:44:4F:D1:AC:0C:B7:09:CF:0E:7A:4A:FA
Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Certificate serial: 019DD0BEC7DBCCB81067F132EF7FFE316CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 21:00:57 +0000
Manifest this update: Mon 27 Apr 2026 21:00:57 +0000
Manifest next update: Tue 28 Apr 2026 21:00:57 +0000
Files and hashes: 1: CMyPiezTn5D8-YXplmxvsmXX2bc.roa (hash: ookrXpU00j/ibJDIb1qnIotSBgooiA09iz417PKBh/s=)
2: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: CjLLF+S3gI2hFJ8o60uVyZx8jYt+Tyvy4NOCthn77tU=)
3: Z7_grVtAJU7hfwbq-pCXGjagV74.roa (hash: YxhFU3h3k0uDJ916nZ5V7OvtkvXv5Nzb7/nDDuA04NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:be:c7:db:cc:b8:10:67:f1:32:ef:7f:fe:31:6c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Validity
Not Before: Apr 27 21:00:57 2026 GMT
Not After : Apr 28 21:00:57 2026 GMT
Subject: CN=8b1a7247baa2b980444fd1ac0cb709cf0e7a4afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:04:78:d8:69:95:7d:0f:3a:9d:ee:5b:fb:cc:
b4:7f:1e:81:6b:57:ea:d6:e3:67:f7:10:7d:16:fb:
6a:61:76:28:df:c1:88:01:bd:90:f3:f7:a6:77:71:
d8:cf:bf:95:f9:a4:b3:0d:07:40:50:16:b9:6b:2f:
62:ad:50:5d:32:22:d3:cf:d3:9c:20:27:78:63:d2:
a1:de:36:c4:6e:6b:b5:a3:1e:e8:c0:58:ba:63:66:
d8:1e:15:ce:92:13:18:d7:b6:3d:75:77:ed:a5:8a:
62:e0:a3:1f:7a:34:b5:b7:90:8b:f9:90:61:81:f9:
e1:56:42:aa:12:ed:98:94:7e:2b:03:5d:17:04:8f:
a8:63:88:d8:90:53:2f:30:af:f0:ee:8b:fa:1f:7e:
c3:52:e6:0c:82:7b:83:6b:74:93:0d:9d:30:4e:4f:
b6:d8:58:0c:03:75:6e:0d:d1:b6:fc:d4:44:2b:b8:
60:04:34:0f:44:16:47:3e:14:26:9b:be:1c:8e:16:
e1:1b:ba:e6:e5:4e:ff:54:fc:c3:01:a9:87:05:c0:
e5:47:1b:12:ae:65:63:ff:df:ef:bf:dc:fd:d6:4c:
69:34:11:03:c5:51:f2:69:32:16:01:ff:76:c5:f0:
87:17:8b:64:ab:f8:76:6f:e0:11:28:9d:06:b6:9c:
3f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1A:72:47:BA:A2:B9:80:44:4F:D1:AC:0C:B7:09:CF:0E:7A:4A:FA
X509v3 Authority Key Identifier:
keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3e:4e:33:7f:09:f1:26:c6:6e:63:c6:ae:b9:cc:05:71:e4:
7c:37:a3:28:2f:f4:c8:74:7c:59:fd:82:75:37:38:41:54:11:
5c:0f:0d:67:a3:70:3e:5d:b0:34:83:60:97:e4:2b:85:78:a6:
8c:43:df:a2:09:2c:72:2c:9e:07:1a:55:24:65:d5:12:54:76:
ce:64:5e:ae:43:fa:7b:39:48:8c:38:c0:c4:b2:a2:d8:c5:e3:
cd:81:75:8c:ae:e6:dd:19:65:3b:93:4f:1b:55:a1:9a:69:6b:
c7:b3:fd:4f:fa:4f:f5:75:ea:75:d9:7e:e1:f3:07:54:74:e9:
e9:53:c2:38:6d:20:d9:5a:b4:27:17:a4:41:af:04:24:dc:1d:
4f:7d:e3:0e:11:84:3a:83:90:fc:3d:55:78:0e:12:bc:e8:c6:
d4:cf:cc:8a:94:12:49:22:07:25:ff:a8:a6:21:3d:4d:f0:25:
47:61:3b:4b:85:fd:1b:c3:fd:59:4c:c8:cc:62:de:31:0e:e8:
b4:51:9f:09:6a:e2:72:7e:83:58:af:33:b3:c9:1a:15:fd:9f:
8b:b7:84:69:06:77:ec:c6:60:1c:1a:53:ea:9c:8c:7b:68:6f:
ad:6c:9e:83:63:b2:8e:ea:0b:e3:45:f8:9f:5d:63:1a:6b:7f:
5e:86:42:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3QvsfbzLgQZ/Ey73/+MWzxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZDhkNzJiMWNiZmM2N2MzNzlhZDlhOTJjNjZmYWM2Yzhk
MzIzM2EwHhcNMjYwNDI3MjEwMDU3WhcNMjYwNDI4MjEwMDU3WjAzMTEwLwYDVQQD
Eyg4YjFhNzI0N2JhYTJiOTgwNDQ0ZmQxYWMwY2I3MDljZjBlN2E0YWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgR42GmVfQ86ne5b+8y0fx6Ba1fq
1uNn9xB9FvtqYXYo38GIAb2Q8/emd3HYz7+V+aSzDQdAUBa5ay9irVBdMiLTz9Oc
ICd4Y9Kh3jbEbmu1ox7owFi6Y2bYHhXOkhMY17Y9dXftpYpi4KMfejS1t5CL+ZBh
gfnhVkKqEu2YlH4rA10XBI+oY4jYkFMvMK/w7ov6H37DUuYMgnuDa3STDZ0wTk+2
2FgMA3VuDdG2/NREK7hgBDQPRBZHPhQmm74cjhbhG7rm5U7/VPzDAamHBcDlRxsS
rmVj/9/vv9z91kxpNBEDxVHyaTIWAf92xfCHF4tkq/h2b+ARKJ0Gtpw/YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsacke6ormARE/RrAy3Cc8Oekr6MB8GA1UdIwQY
MBaAFFvY1yscv8Z8N5rZqSxm+sbI0yM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kMjk2YTgtYTViMS00YTM0LTgxMjgt
ODkzNTllNzgzMjI0LzEvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kMjk2YTgtYTViMS00YTM0LTgxMjgtODkzNTllNzgzMjI0
LzEvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgj5OM38J
8SbGbmPGrrnMBXHkfDejKC/0yHR8Wf2CdTc4QVQRXA8NZ6NwPl2wNINgl+QrhXim
jEPfogksciyeBxpVJGXVElR2zmRerkP6ezlIjDjAxLKi2MXjzYF1jK7m3RllO5NP
G1Whmmlrx7P9T/pP9XXqddl+4fMHVHTp6VPCOG0g2Vq0JxekQa8EJNwdT33jDhGE
OoOQ/D1VeA4SvOjG1M/MipQSSSIHJf+opiE9TfAlR2E7S4X9G8P9WUzIzGLeMQ7o
tFGfCWricn6DWK8zs8kaFf2fi7eEaQZ37MZgHBpT6pyMe2hvrWyeg2OyjuoL40X4
n11jGmt/XoZCzg==
-----END CERTIFICATE-----
Generated at Tue Apr 28 03:24:46 2026 by rpki-client