Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json)
Hash identifier: KQa/LYUnYTzNkP5ufrHjSKWUi5U87SFXG2dSMpuhrNI=
Subject key identifier: 36:C8:B9:9F:9B:92:A6:10:9F:06:E2:BF:87:3D:24:73:EB:C7:32:A5
Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Certificate serial: 019EB98FC3BEF5734585E04BA33A3382D176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
Manifest number: 1956
Signing time: Fri 12 Jun 2026 02:01:07 +0000
Manifest this update: Fri 12 Jun 2026 02:01:07 +0000
Manifest next update: Sat 13 Jun 2026 02:01:07 +0000
Files and hashes: 1: Hq3i7QqtOif4jnuIIZrhxOxGPeA.roa (hash: SAjqZzVc45ymPybHk+sKrf2ScBvZ4GgSySB3zC4Qm38=)
2: U0apLFpP69_tXdLzda-grKolMoc.roa (hash: luYwz0PpHAMPxJN+VQDVTHVznpwlv94vqvOyZ0l/JsM=)
3: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: kzJrg+tsamOKz3yE7cAqL7S8PKTJBRRev/IAuGjnSQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:c3:be:f5:73:45:85:e0:4b:a3:3a:33:82:d1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Validity
Not Before: Jun 12 02:01:07 2026 GMT
Not After : Jun 13 02:01:07 2026 GMT
Subject: CN=36c8b99f9b92a6109f06e2bf873d2473ebc732a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:a2:d2:e6:ac:bb:24:1f:4a:bc:ee:ce:50:
4e:8f:7d:6f:27:fc:7e:f9:46:ba:02:f3:93:21:0c:
be:de:be:e8:e4:cd:c2:dc:4e:64:12:ca:ff:f1:62:
de:53:35:18:fa:f2:a1:07:44:fe:1e:3c:ca:47:da:
66:c8:c1:e3:77:8a:8a:8c:ff:45:87:92:13:51:5c:
5e:81:c3:b0:00:ae:4e:d9:85:27:11:80:72:60:9d:
e1:68:3f:49:1c:a7:94:83:b0:c9:5b:db:8e:7c:99:
0f:c8:0d:f7:58:f7:0e:13:c7:b6:ea:f6:5c:54:a3:
3d:12:40:88:4b:25:98:2f:54:30:0d:be:c5:be:5c:
a1:b6:82:65:6e:8f:bf:7d:d1:ed:ae:28:87:1b:d4:
e6:db:af:8b:e5:5d:d1:a2:db:64:0d:f8:f3:d8:93:
f3:17:c5:47:e6:0b:01:00:b1:1e:dc:01:66:52:7b:
a4:0e:1a:a3:6a:ea:39:6f:0b:16:1b:b1:f7:a3:50:
7f:bf:13:d4:68:e1:da:a4:5b:54:d2:2a:96:cb:e9:
5a:33:73:9a:53:26:43:b7:8a:61:77:a3:5f:96:29:
a4:8b:4d:1d:06:11:c2:f1:98:85:16:30:06:b8:53:
70:8c:8a:2b:d6:cb:11:ae:0a:b4:aa:11:65:27:6f:
20:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C8:B9:9F:9B:92:A6:10:9F:06:E2:BF:87:3D:24:73:EB:C7:32:A5
X509v3 Authority Key Identifier:
keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c6:0c:cb:6c:46:05:6d:7d:23:74:ff:94:d1:9f:df:92:09:
44:70:c3:9d:b4:25:43:c5:a9:32:43:6d:54:9b:bd:84:f4:82:
b8:00:d6:8b:ec:71:06:65:31:20:26:4c:c7:a7:95:29:f0:bb:
ca:0b:62:bd:59:b7:ef:ee:35:18:98:70:9d:04:15:ec:84:03:
a4:64:ce:e9:fa:3f:08:32:17:6d:77:13:ea:77:30:f1:5e:c5:
14:e7:88:19:9b:fc:b5:a1:aa:0e:fb:2f:14:0a:5e:8f:fe:1e:
8b:f1:20:b1:11:46:9a:9a:b8:a1:c5:b6:20:e4:45:95:d5:61:
46:ba:90:31:3a:5a:f8:fa:1e:f0:67:82:3d:9d:a5:25:d3:ce:
4d:40:98:c0:4c:2d:9f:76:3c:65:f1:1d:8e:98:19:55:80:e9:
64:6a:2e:e8:a9:5f:42:e8:70:70:bf:f9:0f:e9:aa:52:8e:f9:
ff:bc:bc:22:1f:1e:d0:f4:b5:d5:01:ce:09:9b:df:bd:ae:fd:
b9:12:2d:bd:99:6a:63:d9:8d:9d:82:c6:89:dd:1c:f1:ee:08:
bc:4c:fd:61:db:81:be:7c:49:c1:19:39:17:03:f0:a4:38:23:
42:46:da:10:25:3b:f7:34:cf:64:db:71:03:0c:cf:d4:f3:54:
41:7d:82:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:53:45 2026 by rpki-client