Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json)
Hash identifier: GMHkU9rzzY5vGoV1fBY90j4A+6njTXgOmZm90St6uFw=
Subject key identifier: 89:5A:8D:C9:A0:B3:22:4E:8F:C8:35:1B:34:34:26:49:1F:FC:F8:39
Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Certificate serial: 019F93C94459E395ABB400F4A2053E6ED5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 11:01:08 +0000
Manifest this update: Fri 24 Jul 2026 11:01:08 +0000
Manifest next update: Sat 25 Jul 2026 11:01:08 +0000
Files and hashes: 1: Hq3i7QqtOif4jnuIIZrhxOxGPeA.roa (hash: SAjqZzVc45ymPybHk+sKrf2ScBvZ4GgSySB3zC4Qm38=)
2: U0apLFpP69_tXdLzda-grKolMoc.roa (hash: luYwz0PpHAMPxJN+VQDVTHVznpwlv94vqvOyZ0l/JsM=)
3: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: YqZuWzGYEhhZrlzMAekPS3SSge0jw93+dxBZK5A0Rkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:44:59:e3:95:ab:b4:00:f4:a2:05:3e:6e:d5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Validity
Not Before: Jul 24 11:01:08 2026 GMT
Not After : Jul 25 11:01:08 2026 GMT
Subject: CN=895a8dc9a0b3224e8fc8351b343426491ffcf839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:11:b7:70:fd:73:d7:95:00:61:44:ba:8c:bc:
d2:88:38:a3:4f:82:4e:1e:b8:e5:43:5d:e5:8d:bc:
17:e4:3f:e0:1a:a3:7a:8b:82:0e:b0:6a:9c:0b:da:
f0:23:4c:ca:74:15:6f:ac:1c:e2:34:94:ec:47:76:
58:b8:93:34:22:2a:82:c2:1c:6c:84:72:99:bc:85:
43:5e:8c:3f:a1:cc:e0:4c:cd:16:c7:37:97:44:a5:
4c:56:e9:05:9f:13:7c:b2:fa:54:3a:26:a5:c0:09:
e8:77:e6:be:2d:e1:7f:b5:96:73:c7:b8:3f:72:06:
df:2d:74:da:74:25:e9:45:d0:73:9d:bf:3f:cb:11:
dc:8c:16:fb:e8:2c:b9:6f:de:16:00:f5:85:d3:b7:
42:4d:0b:70:46:d6:9a:68:bf:6f:98:e0:fb:a9:56:
bd:ea:53:ac:23:83:91:15:1e:6c:35:1d:59:1b:7c:
76:80:6c:93:89:e5:4f:06:5b:3b:0e:5c:b0:37:a6:
93:67:9b:cd:f9:ae:47:6f:ad:56:d7:bd:9b:38:7b:
e0:1f:09:d7:ac:84:97:b5:6a:57:af:78:ed:22:06:
56:e5:75:6c:2d:fb:cf:6f:1e:69:c8:c5:b3:53:ac:
b3:52:ce:a7:6d:ba:98:ec:2e:af:76:4e:b8:cb:c0:
34:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5A:8D:C9:A0:B3:22:4E:8F:C8:35:1B:34:34:26:49:1F:FC:F8:39
X509v3 Authority Key Identifier:
keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:65:07:74:37:25:4c:f2:de:8a:72:04:31:ae:26:22:db:3d:
27:41:db:6d:5e:21:fe:74:3b:67:65:c6:ca:40:18:82:fd:8d:
a2:80:84:93:e9:c7:e8:76:a5:b6:43:e4:8d:6e:29:0a:9f:ee:
27:d2:8c:e3:b2:98:fb:7a:c9:69:3b:4d:ed:74:cc:58:3d:11:
ac:8b:b1:a3:56:fb:22:f2:35:00:59:49:92:3b:8d:c0:f7:92:
33:84:6a:8c:59:33:32:7d:6f:95:37:d5:2b:4a:89:9d:49:ae:
91:55:e5:b4:e6:30:93:28:ba:fe:5b:b7:74:3b:61:d2:16:24:
51:ff:aa:ad:18:d2:88:93:d5:4b:54:18:c2:14:15:c4:7e:41:
8c:aa:6d:de:32:37:c7:ef:86:64:7a:7f:2a:1a:99:86:5d:6d:
05:08:b9:bb:8b:1a:a2:b5:42:6e:44:ca:4c:f3:5c:d2:0e:cc:
31:ce:68:76:8d:ac:8d:a0:e3:58:7f:ce:db:a3:d5:8d:53:84:
85:63:87:ae:aa:e7:73:ca:c0:e7:52:37:69:48:cd:27:9b:5d:
f9:1c:39:f8:ed:1c:cc:06:39:1b:d0:d8:4d:ea:cd:43:84:3c:
21:d3:09:a3:46:5e:ca:b5:ec:6d:c8:48:c6:c8:6f:dd:26:bc:
dc:d4:ab:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:53:19 2026 by rpki-client