Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json)
Hash identifier: QbQ0FTL53ViPH9llKnyILJcrSEcbTl9deDkU0O7ShaI=
Subject key identifier: 05:FE:7F:AC:87:41:F1:ED:B4:7A:B3:D2:FB:4B:38:56:0F:46:74:B0
Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Certificate serial: 019CE71298702572D0A87EC1B164D55B7722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
Manifest number: 1864
Signing time: Fri 13 Mar 2026 12:01:21 +0000
Manifest this update: Fri 13 Mar 2026 12:01:21 +0000
Manifest next update: Sat 14 Mar 2026 12:01:21 +0000
Files and hashes: 1: CMyPiezTn5D8-YXplmxvsmXX2bc.roa (hash: ookrXpU00j/ibJDIb1qnIotSBgooiA09iz417PKBh/s=)
2: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: p/sJ0KDjCT+L3FhTeAaLCMeE5cLJ41UgQpWOXFDrd+c=)
3: Z7_grVtAJU7hfwbq-pCXGjagV74.roa (hash: YxhFU3h3k0uDJ916nZ5V7OvtkvXv5Nzb7/nDDuA04NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:12:98:70:25:72:d0:a8:7e:c1:b1:64:d5:5b:77:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Validity
Not Before: Mar 13 12:01:21 2026 GMT
Not After : Mar 14 12:01:21 2026 GMT
Subject: CN=05fe7fac8741f1edb47ab3d2fb4b38560f4674b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:56:36:14:11:75:51:9d:62:61:4a:96:54:3e:
0b:02:05:86:1c:ef:f7:c0:8e:7d:e5:44:03:0b:10:
c1:b5:c8:c9:2b:90:90:ad:a3:51:c5:df:34:23:f3:
27:7e:7c:8b:c1:4d:f1:0d:03:af:69:39:f7:2c:c2:
89:d6:9e:70:e2:72:f1:a1:da:31:8c:e1:db:20:6b:
7b:62:3a:61:c9:f0:e6:6d:62:5b:84:20:1c:c3:7d:
55:42:54:14:1d:11:ed:b7:69:fd:48:ba:50:53:9d:
17:1d:43:7f:03:0b:68:cc:5a:4a:03:49:5b:a4:ca:
37:e7:63:03:82:69:08:e0:ab:97:6e:7c:4f:5a:b7:
d2:0b:8a:1f:10:f0:23:ae:18:ea:f5:c0:c7:50:5a:
d5:9c:c0:68:c1:c4:1d:96:4d:d0:9b:d6:e5:1a:b7:
3c:6d:63:6a:90:15:c1:8e:9c:ea:64:58:b9:c9:6f:
d1:ce:b1:d4:d7:f8:6d:ac:03:e4:7d:fc:89:e3:06:
93:71:6e:b4:61:87:bf:5c:26:51:cf:4e:0d:96:c0:
81:23:66:60:56:b5:1e:8f:f5:4a:85:86:e4:a3:7b:
40:47:f3:c9:0c:42:d3:34:e8:3e:62:32:8b:7e:a7:
85:61:be:06:04:6b:81:d5:ee:12:bc:82:e7:79:01:
56:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FE:7F:AC:87:41:F1:ED:B4:7A:B3:D2:FB:4B:38:56:0F:46:74:B0
X509v3 Authority Key Identifier:
keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d2:1f:d9:a3:c0:bf:38:8b:d1:4e:ec:69:73:9d:91:e7:a4:
5b:43:fc:cd:31:78:84:15:ab:2a:60:26:eb:3d:32:9b:94:a0:
aa:cd:04:34:9b:77:d1:4b:6f:7f:4e:ba:0c:7e:5f:33:99:d2:
af:5f:10:02:49:8e:a6:cd:af:1a:5b:76:7c:52:03:ca:90:9d:
43:77:d5:63:81:7f:3a:d0:79:b6:7c:bd:6a:ae:45:88:6d:17:
ad:41:55:c8:9b:82:6c:3f:de:c9:12:5b:ea:a7:66:cc:c6:cc:
bf:c2:ce:50:90:6b:d5:d0:c9:5b:82:04:be:a9:19:1d:13:92:
de:32:be:59:0d:63:16:6d:97:d5:ea:da:8d:39:31:85:dc:e8:
b9:77:e1:d9:b3:4c:cb:52:e2:ad:7e:ba:6c:2b:79:8a:a9:37:
8c:d3:6b:c5:de:71:00:96:05:70:d3:5d:65:8f:12:cb:7d:85:
09:19:e0:dd:c7:d5:b3:54:ba:f5:bb:1f:6e:58:23:5f:0e:2f:
49:b2:81:b8:b1:12:ef:0e:24:a5:56:74:b7:89:d8:ac:bb:b6:
f0:9f:2b:e9:72:88:c2:92:be:7d:ce:4a:a3:90:6d:40:61:8e:
4c:4a:07:28:69:3b:2e:eb:6e:02:af:84:b2:53:e7:75:2c:f6:
7f:41:52:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZznEphwJXLQqH7BsWTVW3ciMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZDhkNzJiMWNiZmM2N2MzNzlhZDlhOTJjNjZmYWM2Yzhk
MzIzM2EwHhcNMjYwMzEzMTIwMTIxWhcNMjYwMzE0MTIwMTIxWjAzMTEwLwYDVQQD
EygwNWZlN2ZhYzg3NDFmMWVkYjQ3YWIzZDJmYjRiMzg1NjBmNDY3NGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFY2FBF1UZ1iYUqWVD4LAgWGHO/3
wI595UQDCxDBtcjJK5CQraNRxd80I/MnfnyLwU3xDQOvaTn3LMKJ1p5w4nLxodox
jOHbIGt7YjphyfDmbWJbhCAcw31VQlQUHRHtt2n9SLpQU50XHUN/AwtozFpKA0lb
pMo352MDgmkI4KuXbnxPWrfSC4ofEPAjrhjq9cDHUFrVnMBowcQdlk3Qm9blGrc8
bWNqkBXBjpzqZFi5yW/RzrHU1/htrAPkffyJ4waTcW60YYe/XCZRz04NlsCBI2Zg
VrUej/VKhYbko3tAR/PJDELTNOg+YjKLfqeFYb4GBGuB1e4SvILneQFWPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAX+f6yHQfHttHqz0vtLOFYPRnSwMB8GA1UdIwQY
MBaAFFvY1yscv8Z8N5rZqSxm+sbI0yM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kMjk2YTgtYTViMS00YTM0LTgxMjgt
ODkzNTllNzgzMjI0LzEvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kMjk2YTgtYTViMS00YTM0LTgxMjgtODkzNTllNzgzMjI0
LzEvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArNIf2aPA
vziL0U7saXOdkeekW0P8zTF4hBWrKmAm6z0ym5Sgqs0ENJt30Utvf066DH5fM5nS
r18QAkmOps2vGlt2fFIDypCdQ3fVY4F/OtB5tny9aq5FiG0XrUFVyJuCbD/eyRJb
6qdmzMbMv8LOUJBr1dDJW4IEvqkZHROS3jK+WQ1jFm2X1erajTkxhdzouXfh2bNM
y1LirX66bCt5iqk3jNNrxd5xAJYFcNNdZY8Sy32FCRng3cfVs1S69bsfblgjXw4v
SbKBuLES7w4kpVZ0t4nYrLu28J8r6XKIwpK+fc5Ko5BtQGGOTEoHKGk7LutuAq+E
slPndSz2f0FSOA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 19:36:44 2026 by rpki-client