Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
File: W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft (raw, json)
Hash identifier: JaP36Q0aMey62BlMkL3a0rwQsDCgqo3KHeXo0K/rnFI=
Subject key identifier: D4:FF:39:9B:B2:0F:99:17:9B:35:7D:82:5F:87:3D:CA:02:93:98:C3
Authority key identifier: 5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
Certificate issuer: /CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Certificate serial: 01A0DE0587380B6C71F12A5F5D7E62CDDA1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
Manifest number: 1A04
Signing time: Sat 26 Sep 2026 14:01:38 +0000
Manifest this update: Sat 26 Sep 2026 14:01:38 +0000
Manifest next update: Sun 27 Sep 2026 14:01:38 +0000
Files and hashes: 1: F53s4VdjXr7dOCw6IX6jU3qY5J4.roa (hash: yQvYJ+0p2+3wpKRMcM4jA1uaQpryijTgHN/BYB8sZlw=)
2: W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl (hash: 3rHS/D9DpYKbYmRA5ZKE6fQVTbuf4pnLAAOq0FuKETw=)
3: o8WUGclaUTK-Yx3TsVxtYw-6VCM.roa (hash: +0iTbM7TxxU8I5HwGr9jHcdLf9Mcq2k7c23zU2G7lvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:87:38:0b:6c:71:f1:2a:5f:5d:7e:62:cd:da:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Validity
Not Before: Sep 26 14:01:38 2026 GMT
Not After : Sep 27 14:01:38 2026 GMT
Subject: CN=d4ff399bb20f99179b357d825f873dca029398c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:24:6b:d8:3b:af:f0:b0:d8:e5:6f:96:35:44:
db:7c:dc:2b:6b:20:3c:ca:01:06:7a:d4:f3:1e:1c:
eb:72:76:33:4b:11:cb:dd:03:b1:c9:f8:f0:58:fe:
33:77:47:97:e0:da:31:a9:c7:e5:c4:e0:b9:a9:3b:
ec:68:57:43:85:6d:bc:22:8e:63:3f:ac:aa:88:e9:
ca:92:d2:f8:55:da:22:12:c9:4f:b5:63:84:4a:06:
50:9e:47:99:3b:c6:76:e1:8c:b5:9c:4b:72:03:15:
c7:13:82:46:dd:45:34:23:23:1e:2b:b5:8a:16:f9:
28:8f:07:66:9e:1b:d8:fa:cd:19:8b:6d:59:54:d6:
07:a9:a7:1f:4c:c3:18:a4:6e:9e:54:ea:b2:cc:b4:
e4:11:6d:ab:87:f3:94:bc:65:33:da:ee:01:3a:31:
2c:49:81:d6:d5:bd:97:73:53:38:3d:35:e8:cc:53:
16:f3:28:9e:e8:5e:91:4b:3f:cb:ec:1b:b8:16:52:
ad:f7:67:2e:ef:c6:1e:ff:04:73:3c:29:49:3c:08:
7f:a0:4e:2b:d4:41:30:dc:ea:f0:65:ec:eb:41:44:
2f:df:cf:74:b4:bc:18:13:2b:1d:36:09:2b:5f:37:
65:c7:2c:ef:c9:c9:ff:10:34:18:8c:8a:f6:68:50:
63:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FF:39:9B:B2:0F:99:17:9B:35:7D:82:5F:87:3D:CA:02:93:98:C3
X509v3 Authority Key Identifier:
keyid:5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ef:37:eb:c5:0c:47:b9:8b:b0:aa:57:12:00:a8:dd:06:54:
ee:f2:70:60:78:53:48:e3:22:c9:ec:9a:5c:04:5e:00:63:10:
d4:3e:bd:08:fc:ac:e6:0d:19:f8:20:d4:f2:2d:f4:68:36:78:
e1:5d:d9:b7:4f:c1:91:85:f7:d9:6b:9b:cb:7a:58:99:0c:a4:
cb:46:a2:d9:32:58:e5:af:c1:b5:2f:a6:0c:ed:69:03:06:c0:
5b:fb:3f:c9:71:1e:b2:94:0c:50:39:67:4c:c3:46:92:53:8a:
7f:00:ab:76:38:fc:d2:d8:6b:86:54:24:13:e4:00:84:5f:7f:
7f:00:a6:0c:56:68:d8:77:ae:aa:e7:f8:06:2c:90:cd:bd:20:
cf:18:e6:62:61:b2:fc:29:9e:24:48:d4:cf:c9:3d:25:2b:fe:
72:96:47:d7:ee:f4:ac:1a:38:5f:2a:70:46:63:4c:70:fc:4b:
d9:56:a0:44:03:35:c5:19:83:18:f6:58:a7:10:0a:d0:09:68:
73:81:8f:d5:ad:04:cb:5b:8d:b2:b7:2b:fa:9b:b3:38:73:93:
23:f7:21:90:e9:12:b6:27:54:20:69:10:c5:2f:c3:b6:7c:41:
27:4e:0b:cb:d0:97:88:f0:11:8c:d8:06:fd:41:21:84:e7:34:
24:fb:e7:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDeBYc4C2xx8SpfXX5izdobMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZDZjYmRhYTc5NGE5N2E3ZDgyNjY3MDJjYjA1NGYxYjI0
OWQ0YmYwHhcNMjYwOTI2MTQwMTM4WhcNMjYwOTI3MTQwMTM4WjAzMTEwLwYDVQQD
EyhkNGZmMzk5YmIyMGY5OTE3OWIzNTdkODI1Zjg3M2RjYTAyOTM5OGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziRr2Duv8LDY5W+WNUTbfNwrayA8
ygEGetTzHhzrcnYzSxHL3QOxyfjwWP4zd0eX4NoxqcflxOC5qTvsaFdDhW28Io5j
P6yqiOnKktL4VdoiEslPtWOESgZQnkeZO8Z24Yy1nEtyAxXHE4JG3UU0IyMeK7WK
FvkojwdmnhvY+s0Zi21ZVNYHqacfTMMYpG6eVOqyzLTkEW2rh/OUvGUz2u4BOjEs
SYHW1b2Xc1M4PTXozFMW8yie6F6RSz/L7Bu4FlKt92cu78Ye/wRzPClJPAh/oE4r
1EEw3OrwZezrQUQv3890tLwYEysdNgkrXzdlxyzvycn/EDQYjIr2aFBjkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNT/OZuyD5kXmzV9gl+HPcoCk5jDMB8GA1UdIwQY
MBaAFFvWy9qnlKl6fYJmcCywVPGySdS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzliTDJxZVVxWHA5Z21ad0xMQlU4YkpKMUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9jOTMxZmMtZGYxZS00YmIxLTlkZTkt
ZDc0YTEyOTU5YWQ3LzEvVzliTDJxZVVxWHA5Z21ad0xMQlU4YkpKMUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9jOTMxZmMtZGYxZS00YmIxLTlkZTktZDc0YTEyOTU5YWQ3
LzEvVzliTDJxZVVxWHA5Z21ad0xMQlU4YkpKMUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfe8368UM
R7mLsKpXEgCo3QZU7vJwYHhTSOMiyeyaXAReAGMQ1D69CPys5g0Z+CDU8i30aDZ4
4V3Zt0/BkYX32Wuby3pYmQyky0ai2TJY5a/BtS+mDO1pAwbAW/s/yXEespQMUDln
TMNGklOKfwCrdjj80thrhlQkE+QAhF9/fwCmDFZo2Heuquf4BiyQzb0gzxjmYmGy
/CmeJEjUz8k9JSv+cpZH1+70rBo4XypwRmNMcPxL2VagRAM1xRmDGPZYpxAK0Alo
c4GP1a0Ey1uNsrcr+puzOHOTI/chkOkStidUIGkQxS/DtnxBJ04Ly9CXiPARjNgG
/UEhhOc0JPvn6w==
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:42:11 2026 by rpki-client