Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json)
Hash identifier: aiqedIC8O6/3CLeibJpBBwlsgrPaTuGHFaCaR1euVhg=
Subject key identifier: 00:98:ED:8E:BD:9A:E3:02:31:00:7E:42:42:76:82:DB:AF:52:E3:C8
Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Certificate serial: 019D2AA9936C68E6719145B1B178EEB4D14B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 15:00:49 +0000
Manifest this update: Thu 26 Mar 2026 15:00:49 +0000
Manifest next update: Fri 27 Mar 2026 15:00:49 +0000
Files and hashes: 1: CMyPiezTn5D8-YXplmxvsmXX2bc.roa (hash: ookrXpU00j/ibJDIb1qnIotSBgooiA09iz417PKBh/s=)
2: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: ubT2Mmhb5kOomy1JhYnq2CC+p7EFVikwN+mtppgBf98=)
3: Z7_grVtAJU7hfwbq-pCXGjagV74.roa (hash: YxhFU3h3k0uDJ916nZ5V7OvtkvXv5Nzb7/nDDuA04NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:93:6c:68:e6:71:91:45:b1:b1:78:ee:b4:d1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Validity
Not Before: Mar 26 15:00:49 2026 GMT
Not After : Mar 27 15:00:49 2026 GMT
Subject: CN=0098ed8ebd9ae30231007e42427682dbaf52e3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bf:e5:77:50:c2:cc:cb:a0:06:e2:f8:e4:72:
33:4c:69:58:b0:b6:ea:b3:ef:dd:a5:9a:e1:00:bf:
69:62:ea:03:91:f5:a4:b9:e3:50:05:85:a6:70:21:
67:c4:97:c3:65:00:98:59:61:bf:09:8b:8a:8e:11:
f2:43:88:5f:a3:44:be:b5:56:31:04:96:e1:3f:3b:
54:43:51:79:34:dd:05:36:b8:f4:77:dd:31:8a:94:
f5:fa:1e:7b:c9:0d:19:94:be:0a:ba:5e:c0:0a:40:
58:cc:60:04:74:98:1c:99:09:7b:89:c9:b4:a9:96:
15:e2:31:d8:70:b7:e8:07:6e:fe:b3:51:52:f3:0d:
fc:5d:2c:ce:ca:5b:27:9c:8e:bd:46:58:74:39:b6:
55:b1:27:e9:59:c4:7e:72:02:61:05:98:eb:91:42:
f5:77:2f:ce:fb:1a:ee:fe:7e:fc:57:10:b7:1c:00:
c9:6f:6c:3b:01:62:4f:f8:b7:e9:b7:41:a0:94:92:
b0:5a:99:cb:36:70:d5:0f:c5:a1:36:bc:e3:54:9d:
7a:35:e6:fa:be:55:a5:70:e0:2f:dd:98:f7:d9:c1:
e5:78:c5:ea:18:14:06:c0:86:74:6a:9d:f8:15:4b:
d5:11:cd:72:39:72:55:ed:18:0a:b0:bc:45:87:f4:
5c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:98:ED:8E:BD:9A:E3:02:31:00:7E:42:42:76:82:DB:AF:52:E3:C8
X509v3 Authority Key Identifier:
keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:fe:0d:ac:3b:a2:a3:26:48:f9:4a:83:01:51:d1:a9:02:c4:
cd:db:ac:8d:ab:bf:5c:a0:a1:bf:a5:ff:6f:87:2f:f3:86:44:
1a:7c:e8:9c:fa:90:d0:75:75:cf:33:86:47:bc:7c:b7:59:ce:
29:d8:29:b8:e0:a2:9a:7a:ab:ec:98:c0:c8:4b:ea:eb:e0:06:
be:d4:f3:24:17:72:8a:a9:f6:67:d8:f7:45:ee:18:09:11:42:
f7:b6:d4:ea:60:a8:70:13:b3:e3:7e:54:95:0e:ca:7c:86:ca:
84:0a:9b:a5:ec:f7:fa:e1:19:12:c1:9f:9d:8f:15:6e:01:59:
66:9e:8c:0b:aa:f0:bc:9f:e7:19:f3:ed:44:24:a6:ba:3c:46:
e2:d9:5a:1d:ae:c9:7c:c3:3c:28:58:88:44:a4:d9:dc:f5:82:
60:06:b7:56:47:bc:ee:f5:78:80:64:d4:e3:74:2c:a7:e7:80:
42:a0:87:9a:ca:45:a1:33:ed:27:46:7d:8e:4a:88:68:17:93:
7a:90:37:99:59:74:11:8f:5e:b7:60:c8:70:56:d6:ef:02:0d:
cc:61:4d:ed:75:15:5a:23:fd:21:96:c8:89:d7:07:f2:3d:db:
52:84:f6:b1:88:1f:40:39:d2:5c:b3:dd:b7:41:12:b9:c0:a4:
c5:2b:0a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:14:58 2026 by rpki-client