Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json)
Hash identifier: 8S1H2gwl26uBXVkgX5KvYfbU/7mAb45LASVZfAWVk+8=
Subject key identifier: C7:38:86:5A:E7:C0:A3:56:F9:6D:2C:89:C6:3E:4E:F6:96:F6:F0:B7
Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Certificate serial: 019E21000C4ECBE1E26F471A127082CB602D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 11:01:51 +0000
Manifest this update: Wed 13 May 2026 11:01:51 +0000
Manifest next update: Thu 14 May 2026 11:01:51 +0000
Files and hashes: 1: Hq3i7QqtOif4jnuIIZrhxOxGPeA.roa (hash: SAjqZzVc45ymPybHk+sKrf2ScBvZ4GgSySB3zC4Qm38=)
2: U0apLFpP69_tXdLzda-grKolMoc.roa (hash: luYwz0PpHAMPxJN+VQDVTHVznpwlv94vqvOyZ0l/JsM=)
3: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: Lx3vff7KqOWT9nGzlS7rfML7RJ+Nt4ZMiHbcec+yYe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:00:0c:4e:cb:e1:e2:6f:47:1a:12:70:82:cb:60:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Validity
Not Before: May 13 11:01:51 2026 GMT
Not After : May 14 11:01:51 2026 GMT
Subject: CN=c738865ae7c0a356f96d2c89c63e4ef696f6f0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:fa:01:7c:b5:fa:00:42:32:da:d0:05:63:
8a:15:ae:ff:0c:70:18:92:0a:17:49:fd:a0:8d:69:
36:6c:89:d8:67:ea:d0:56:3c:d8:d4:bd:4a:a4:46:
fe:4b:ef:ec:8d:70:ff:50:2b:52:74:db:a6:ea:74:
8d:2a:c2:36:16:71:1a:a3:4f:73:dd:21:af:fa:22:
b1:24:bd:b7:43:94:f3:85:cb:09:4d:01:00:f0:3c:
24:1b:0e:83:f5:83:cc:f4:86:53:4d:b0:24:e1:18:
44:95:05:10:ff:68:e3:b2:ac:58:51:3a:28:be:1b:
15:5a:e5:ef:06:18:29:e4:70:9c:7f:92:07:1e:f1:
80:87:18:8b:1f:7f:44:79:19:34:26:24:90:26:a9:
c0:f8:e0:e9:65:1b:17:57:3d:a2:43:90:2b:a3:3f:
23:92:11:93:35:1f:24:1d:ab:1e:1a:a0:22:80:5d:
a1:a3:3c:1d:62:f0:26:8d:26:0b:33:2c:54:71:29:
3f:de:51:4d:1c:7a:38:64:f2:b1:61:b6:14:be:d1:
3b:ca:b3:4d:51:a8:b7:c7:6d:43:14:bc:67:0d:d7:
ee:61:56:cf:b9:46:df:d8:7f:ca:3b:35:60:03:12:
d0:7b:93:80:36:34:e8:9d:76:50:f8:16:cd:ce:40:
cd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:38:86:5A:E7:C0:A3:56:F9:6D:2C:89:C6:3E:4E:F6:96:F6:F0:B7
X509v3 Authority Key Identifier:
keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:bd:46:c5:f9:8b:64:8d:6c:ad:1e:e0:5b:09:f6:15:82:ab:
a6:89:7f:06:65:78:62:87:de:68:d3:e5:17:26:e5:92:b2:c2:
02:65:0d:d7:af:6c:26:99:4b:e7:e8:83:c9:64:51:15:34:e7:
ee:5d:74:d0:64:15:1a:df:f3:91:15:b9:88:70:f7:4f:41:12:
4c:34:b8:e9:9a:38:1b:80:07:d2:ce:ee:71:a4:59:d4:da:37:
4b:14:50:25:6b:c1:b2:74:ab:69:59:41:d0:68:60:a9:0d:c9:
70:39:9d:2c:4a:23:4c:5c:96:c7:40:9e:8c:18:42:09:56:44:
57:31:31:e8:20:fb:d5:c2:de:75:6b:65:74:60:78:90:f2:2d:
94:c1:77:2d:50:cc:5f:42:2f:10:e7:3c:6c:ac:49:f5:cb:32:
7a:c7:61:c4:f3:df:dc:42:f9:1e:4a:21:31:ca:41:42:3f:57:
bd:75:67:db:57:1d:5c:50:fd:2a:37:c1:05:31:31:fb:0d:c7:
4e:6a:c5:fa:56:d9:3c:05:e8:61:24:b7:64:58:d2:b1:b7:7d:
fa:0a:ab:75:ae:19:6c:49:e8:f8:c4:92:ff:33:50:6e:62:21:
6d:33:76:65:91:5c:cf:1b:85:54:e3:90:b6:36:0c:4e:bb:ac:
88:bf:c2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:05:55 2026 by rpki-client