Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json)
Hash identifier: vmD8JBq47IaC/Q0LRUAeLdGperLtdDfq6leoktBkpaA=
Subject key identifier: 0A:E2:43:5B:F6:0F:06:BC:2D:1A:6C:5C:F9:FB:87:7C:D2:F2:DE:E2
Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Certificate serial: 01A18FB0671E46FB0E0941B4EA6D5145180A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
Manifest number: 1ACE
Signing time: Sat 31 Oct 2026 02:01:04 +0000
Manifest this update: Sat 31 Oct 2026 02:01:04 +0000
Manifest next update: Sun 01 Nov 2026 02:01:04 +0000
Files and hashes: 1: Hq3i7QqtOif4jnuIIZrhxOxGPeA.roa (hash: SAjqZzVc45ymPybHk+sKrf2ScBvZ4GgSySB3zC4Qm38=)
2: U0apLFpP69_tXdLzda-grKolMoc.roa (hash: luYwz0PpHAMPxJN+VQDVTHVznpwlv94vqvOyZ0l/JsM=)
3: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: +iaWJUhuLDhJikCEgrpfhELAriLhTg0UvVC6fyt2C5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:b0:67:1e:46:fb:0e:09:41:b4:ea:6d:51:45:18:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Validity
Not Before: Oct 31 02:01:04 2026 GMT
Not After : Nov 1 02:01:04 2026 GMT
Subject: CN=0ae2435bf60f06bc2d1a6c5cf9fb877cd2f2dee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:54:c0:d6:9f:a0:d1:44:89:5a:9c:2c:1b:
4d:41:5d:9a:a9:4c:58:17:9a:a2:a1:7c:f7:e1:57:
37:66:fe:b2:54:b0:42:83:3d:e0:3a:26:f4:4d:9f:
91:02:26:02:db:0b:68:e9:a1:1e:3e:3b:bd:cf:db:
ad:73:97:9a:6b:84:90:be:ce:8d:48:c8:54:c2:f4:
73:4f:40:c8:f3:ad:3a:cb:ff:79:fc:b3:37:04:45:
d1:da:a1:39:4f:68:b5:3d:02:41:18:fb:93:84:0f:
4c:07:37:2a:e3:e8:bf:99:e6:1d:2b:84:54:fa:ff:
7f:31:fa:ea:70:5d:9d:01:f7:71:a1:a8:53:d1:35:
8b:7c:52:a2:96:04:83:a9:c8:04:f5:44:cc:02:68:
70:b8:95:60:8c:9a:a5:7c:8c:c5:da:0d:a2:7d:70:
91:d7:99:82:e9:7a:1f:3f:7b:71:ec:e3:03:ef:68:
a0:12:57:df:a7:5e:9d:57:a6:78:2f:2d:a9:b6:9e:
c3:5d:39:92:21:15:ea:2b:06:67:34:fc:97:38:8b:
ee:f6:d8:2b:74:85:bd:27:b4:d7:56:e2:56:36:94:
ca:84:89:27:76:0d:bf:52:5d:1c:11:e6:e4:60:e2:
c1:f2:9d:1f:72:58:70:dd:a9:c0:eb:4a:37:8e:a1:
8b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E2:43:5B:F6:0F:06:BC:2D:1A:6C:5C:F9:FB:87:7C:D2:F2:DE:E2
X509v3 Authority Key Identifier:
keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f4:87:b1:20:63:de:19:d9:35:21:07:ac:43:20:94:cd:d0:
a9:a1:e6:19:71:8f:61:21:93:99:19:02:91:6a:09:39:0a:c7:
47:53:6c:3d:34:91:96:47:93:02:c6:f0:6d:76:fc:dd:e1:89:
c7:40:0d:98:05:bd:71:dc:6d:36:76:08:27:14:a0:ce:44:90:
fe:51:93:b4:e0:79:38:0a:bb:67:85:ca:dc:7f:50:29:a3:0a:
e2:7f:59:9f:4e:43:8d:82:8a:0b:7a:d8:42:ce:84:03:72:ca:
6d:24:8c:c5:fd:af:f5:0d:84:f1:4d:58:a2:64:f3:72:fd:0f:
ec:47:4c:16:e4:71:e7:1d:f9:90:ff:b6:d6:30:8c:6e:34:27:
f3:25:7d:7f:c2:24:bc:4f:3a:cd:aa:a0:72:b6:54:03:9f:13:
ec:72:9d:3a:81:4e:8b:6d:27:74:0d:31:cb:c8:33:20:c2:05:
ec:4d:88:23:30:6d:ac:12:ef:b7:2f:62:28:06:19:50:8e:bd:
bd:ed:3c:b3:ee:3d:e4:5b:16:bb:1a:c9:df:b2:79:85:03:2f:
ff:a1:28:f9:53:33:54:a0:3d:57:38:77:98:84:19:9c:3a:4e:
2c:96:36:4d:09:88:b2:de:06:c5:0d:c1:80:45:29:dd:76:4d:
0c:ef:90:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGPsGceRvsOCUG06m1RRRgKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZDhkNzJiMWNiZmM2N2MzNzlhZDlhOTJjNjZmYWM2Yzhk
MzIzM2EwHhcNMjYxMDMxMDIwMTA0WhcNMjYxMTAxMDIwMTA0WjAzMTEwLwYDVQQD
EygwYWUyNDM1YmY2MGYwNmJjMmQxYTZjNWNmOWZiODc3Y2QyZjJkZWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTFUwNafoNFEiVqcLBtNQV2aqUxY
F5qioXz34Vc3Zv6yVLBCgz3gOib0TZ+RAiYC2wto6aEePju9z9utc5eaa4SQvs6N
SMhUwvRzT0DI8606y/95/LM3BEXR2qE5T2i1PQJBGPuThA9MBzcq4+i/meYdK4RU
+v9/MfrqcF2dAfdxoahT0TWLfFKilgSDqcgE9UTMAmhwuJVgjJqlfIzF2g2ifXCR
15mC6XofP3tx7OMD72igElffp16dV6Z4Ly2ptp7DXTmSIRXqKwZnNPyXOIvu9tgr
dIW9J7TXVuJWNpTKhIkndg2/Ul0cEebkYOLB8p0fclhw3anA60o3jqGL6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAriQ1v2Dwa8LRpsXPn7h3zS8t7iMB8GA1UdIwQY
MBaAFFvY1yscv8Z8N5rZqSxm+sbI0yM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kMjk2YTgtYTViMS00YTM0LTgxMjgt
ODkzNTllNzgzMjI0LzEvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kMjk2YTgtYTViMS00YTM0LTgxMjgtODkzNTllNzgzMjI0
LzEvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/SHsSBj
3hnZNSEHrEMglM3QqaHmGXGPYSGTmRkCkWoJOQrHR1NsPTSRlkeTAsbwbXb83eGJ
x0ANmAW9cdxtNnYIJxSgzkSQ/lGTtOB5OAq7Z4XK3H9QKaMK4n9Zn05DjYKKC3rY
Qs6EA3LKbSSMxf2v9Q2E8U1YomTzcv0P7EdMFuRx5x35kP+21jCMbjQn8yV9f8Ik
vE86zaqgcrZUA58T7HKdOoFOi20ndA0xy8gzIMIF7E2IIzBtrBLvty9iKAYZUI69
ve08s+495FsWuxrJ37J5hQMv/6Eo+VMzVKA9Vzh3mIQZnDpOLJY2TQmIst4GxQ3B
gEUp3XZNDO+QoA==
-----END CERTIFICATE-----
Generated at Sat Oct 31 09:48:49 2026 by rpki-client