Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json)
Hash identifier: 5+r290rLdWmkrZfSLCDNFZk1RHd6gZI0Fvgugg5tqpY=
Subject key identifier: 12:51:24:F2:A1:21:4C:25:72:2A:02:EF:DB:1E:FD:07:21:CB:01:7E
Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Certificate serial: 019FA33C57F9021DF371F52F40A0745C315A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 11:01:08 +0000
Manifest this update: Mon 27 Jul 2026 11:01:08 +0000
Manifest next update: Tue 28 Jul 2026 11:01:08 +0000
Files and hashes: 1: Hq3i7QqtOif4jnuIIZrhxOxGPeA.roa (hash: SAjqZzVc45ymPybHk+sKrf2ScBvZ4GgSySB3zC4Qm38=)
2: U0apLFpP69_tXdLzda-grKolMoc.roa (hash: luYwz0PpHAMPxJN+VQDVTHVznpwlv94vqvOyZ0l/JsM=)
3: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: px9iD4XkKFNslQMg+RnS51KJzGPt77ETgTnYBNpgHJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:57:f9:02:1d:f3:71:f5:2f:40:a0:74:5c:31:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Validity
Not Before: Jul 27 11:01:08 2026 GMT
Not After : Jul 28 11:01:08 2026 GMT
Subject: CN=125124f2a1214c25722a02efdb1efd0721cb017e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:57:44:3f:aa:b5:7d:7b:05:fa:7a:35:b6:
4f:70:c0:77:65:0a:93:bd:d1:68:20:96:08:7b:2c:
8f:37:40:0b:26:ff:0f:83:f4:0d:4a:20:d7:88:59:
b2:b2:f7:68:28:f8:e5:52:32:56:f9:02:01:f7:ad:
4c:2d:e0:c1:5c:88:bc:ef:0f:20:3e:fb:4d:70:ab:
49:7f:68:ee:c0:80:74:9d:4a:21:4d:bd:41:7a:57:
db:1e:3b:0e:9d:ce:a7:7d:63:7f:1b:02:86:58:14:
ee:90:5c:09:73:30:eb:21:af:f6:3b:dc:5d:b8:ab:
54:6c:7e:3d:4f:86:00:9a:5a:5e:a6:a7:fc:68:5f:
9f:4d:40:22:20:e2:6a:bb:1b:0a:72:c4:f7:0b:a3:
ed:6b:49:f8:a3:77:cd:62:34:f9:b6:d3:3f:91:9a:
4e:a0:e8:47:4d:0b:1a:83:84:9c:0b:5f:27:23:66:
e9:9d:fd:62:ae:13:72:58:04:7f:f3:ab:6e:cc:4f:
e9:70:24:ae:d2:87:38:96:9f:43:b9:dc:c5:92:f7:
d0:6a:79:cb:d7:45:4b:1b:88:76:d6:36:37:9a:87:
1b:7c:bf:fb:30:f1:88:79:34:eb:f1:12:1e:c1:a8:
1b:d7:71:4f:39:31:e0:d6:ca:84:f3:09:f5:ca:a0:
86:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:51:24:F2:A1:21:4C:25:72:2A:02:EF:DB:1E:FD:07:21:CB:01:7E
X509v3 Authority Key Identifier:
keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:cf:87:77:39:10:f7:2e:a9:61:3c:45:b4:22:19:37:53:64:
e1:f2:67:94:26:41:4e:75:ef:fd:a0:a2:85:01:44:5e:4a:c5:
94:82:9d:c6:2d:36:88:bb:f5:03:d4:da:61:65:a9:a3:53:fa:
8f:0f:2f:90:20:05:9a:ff:0d:fc:84:23:2b:b8:5a:43:21:51:
d6:32:16:eb:b4:8d:43:7e:c1:fb:48:84:cd:9e:0a:83:16:af:
2a:17:a2:e3:c7:47:8e:a6:a7:36:9b:3c:ee:e5:72:d4:5d:c7:
fb:89:fe:66:2f:2f:ac:18:ef:0c:fa:ef:cd:92:e1:e6:83:13:
1c:e5:09:b6:ce:75:22:00:38:07:e4:c6:5a:eb:27:8f:23:bb:
8a:8f:c9:e8:24:ae:bf:ef:f4:86:ee:e0:56:31:e2:9e:a1:9f:
83:ea:ae:20:4c:82:dd:64:ad:4e:80:9a:48:8c:2d:6f:81:ab:
50:1f:81:2b:dc:b8:57:f8:68:40:bb:3c:df:a3:b1:db:88:a1:
61:ba:9e:6d:37:89:0e:7b:68:b2:32:e5:c2:33:c5:47:79:95:
f1:4a:ff:aa:a1:58:62:ec:d6:c4:91:b3:32:fa:cc:2b:9e:8c:
d4:af:3f:70:89:b7:74:e1:db:ef:6a:8e:0f:19:d2:29:29:74:
7c:28:b3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:18:19 2026 by rpki-client