Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
File: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft (raw, json)
Hash identifier: Gj/ErUcOx5dWBYK6T4QBroZBEWVJAN6lSVHateZT3Gs=
Subject key identifier: 9B:82:C8:1F:6C:84:11:61:E4:4E:8A:10:70:6A:89:8F:DA:F3:19:AB
Authority key identifier: 5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
Certificate issuer: /CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Certificate serial: 01A0D1251A322F86988B6AD6EF75D9671469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
Manifest number: 05DA
Signing time: Thu 24 Sep 2026 02:01:04 +0000
Manifest this update: Thu 24 Sep 2026 02:01:04 +0000
Manifest next update: Fri 25 Sep 2026 02:01:04 +0000
Files and hashes: 1: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl (hash: y1S665laOCqaZ/i4C2q1GDzRrHxmsZ/VjjspEN42d9g=)
2: _UJDxh9rYkUlgNW-nJfPDms9qbE.asa (hash: /qi/AhdyNiL+vJoRDKU2mJ5839ZWh3+RI/SKU6zPg90=)
3: bYFNWMi4DStmMjoV0tL6j97Khao.roa (hash: 2j9NKfwDUmD4G/qj7URDaF2T8o11L7u7ZgoHRPOGxcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:25:1a:32:2f:86:98:8b:6a:d6:ef:75:d9:67:14:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Validity
Not Before: Sep 24 02:01:04 2026 GMT
Not After : Sep 25 02:01:04 2026 GMT
Subject: CN=9b82c81f6c841161e44e8a10706a898fdaf319ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c0:7d:b5:77:1d:f6:05:75:02:84:27:0d:c4:
58:8f:94:6c:6e:08:8a:5b:85:a6:20:00:1b:2f:98:
bf:76:c6:d2:b1:2f:04:35:e6:ca:09:3a:7b:f7:f5:
85:28:66:43:47:93:9e:17:f6:65:7b:24:77:44:69:
94:58:c6:b7:4a:64:d9:80:7c:7c:7d:4f:68:eb:bb:
5a:52:e4:62:93:eb:aa:2e:af:39:03:09:21:8e:91:
a0:ee:25:1a:18:9f:0c:4e:09:99:69:d4:72:ff:d1:
02:1a:9a:41:8b:45:d8:f2:cb:fa:50:14:9a:f8:32:
ec:99:2e:be:85:e4:07:fa:36:59:22:5c:8f:9e:cc:
47:d5:cc:48:cd:b7:22:fe:78:b0:87:87:b4:b7:94:
c6:7f:f1:f4:5e:76:84:d3:a1:fe:e4:97:02:26:cb:
b9:24:14:ac:a1:a3:82:56:c1:f5:b1:99:60:1e:5e:
5b:5f:4c:c8:1b:62:25:0a:ef:24:b8:09:51:db:4f:
35:d5:b5:96:0e:01:ca:ff:2d:fe:fe:94:0d:ba:ef:
8e:3b:3a:30:f7:3b:70:32:3d:5e:a9:bb:8f:99:84:
63:fe:34:2c:ae:ee:9c:18:d9:83:3d:c7:21:6c:7e:
9e:82:8d:c3:d7:f5:de:c2:46:20:63:51:07:bc:ea:
91:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:82:C8:1F:6C:84:11:61:E4:4E:8A:10:70:6A:89:8F:DA:F3:19:AB
X509v3 Authority Key Identifier:
keyid:5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:aa:50:44:ef:d2:a1:9a:69:b7:58:a1:25:4e:66:cd:84:13:
59:23:51:33:65:70:61:48:c6:af:38:79:b1:dc:3c:9e:7f:74:
15:ea:14:69:c5:f4:14:6b:cb:cc:0e:51:d5:87:c9:24:da:13:
aa:8c:d3:7f:1d:c4:f5:8e:df:e1:98:14:c0:12:76:d8:36:67:
d1:55:51:49:95:2b:d7:3d:40:9a:d5:74:4d:50:5e:a3:ea:44:
b0:d1:8d:2c:ee:cd:4a:03:f3:1d:b8:1d:35:61:c5:4d:a6:19:
7f:3a:b9:2f:de:2a:eb:d5:7b:fd:e9:8e:14:8f:7b:d2:7c:d3:
2c:64:b5:3f:b5:45:c6:9f:e5:96:3a:f4:f2:ef:73:72:31:2d:
53:69:59:fb:cc:95:c1:02:d7:8d:d6:bf:24:94:f1:b8:ef:25:
d8:08:89:97:50:f1:5c:dd:c5:ef:df:d7:48:e6:06:21:f6:5d:
45:28:79:e5:17:5e:c0:20:8c:45:fd:11:69:06:4a:77:d9:1d:
3d:63:33:6d:8c:1c:73:32:c8:cc:cc:c0:98:94:9a:5f:96:f4:
d7:16:ee:78:5a:46:57:38:88:d3:16:8e:3d:8d:ec:8d:be:74:
5c:e4:b5:a5:ec:aa:21:bf:8c:9b:c2:77:40:e9:02:34:9c:17:
81:dc:18:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRJRoyL4aYi2rW73XZZxRpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNzk3ZmNkODQzM2IxZjQ4OWY4OTExOTQ4NjJmYzM2YmZi
ZWY2NmIwHhcNMjYwOTI0MDIwMTA0WhcNMjYwOTI1MDIwMTA0WjAzMTEwLwYDVQQD
Eyg5YjgyYzgxZjZjODQxMTYxZTQ0ZThhMTA3MDZhODk4ZmRhZjMxOWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcB9tXcd9gV1AoQnDcRYj5RsbgiK
W4WmIAAbL5i/dsbSsS8ENebKCTp79/WFKGZDR5OeF/ZleyR3RGmUWMa3SmTZgHx8
fU9o67taUuRik+uqLq85AwkhjpGg7iUaGJ8MTgmZadRy/9ECGppBi0XY8sv6UBSa
+DLsmS6+heQH+jZZIlyPnsxH1cxIzbci/niwh4e0t5TGf/H0XnaE06H+5JcCJsu5
JBSsoaOCVsH1sZlgHl5bX0zIG2IlCu8kuAlR20811bWWDgHK/y3+/pQNuu+OOzow
9ztwMj1eqbuPmYRj/jQsru6cGNmDPcchbH6ego3D1/XewkYgY1EHvOqRewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuCyB9shBFh5E6KEHBqiY/a8xmrMB8GA1UdIwQY
MBaAFFt5f82EM7H0ifiRGUhi/Da/vvZrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzNsX3pZUXpzZlNKLUpFWlNHTDhOci0tOW1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84ZmU0ZGItOGM1Yi00MGY1LTkzNjAt
ZTU5NmU1MjRjYWJlLzEvVzNsX3pZUXpzZlNKLUpFWlNHTDhOci0tOW1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC84ZmU0ZGItOGM1Yi00MGY1LTkzNjAtZTU5NmU1MjRjYWJl
LzEvVzNsX3pZUXpzZlNKLUpFWlNHTDhOci0tOW1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqpQRO/S
oZppt1ihJU5mzYQTWSNRM2VwYUjGrzh5sdw8nn90FeoUacX0FGvLzA5R1YfJJNoT
qozTfx3E9Y7f4ZgUwBJ22DZn0VVRSZUr1z1AmtV0TVBeo+pEsNGNLO7NSgPzHbgd
NWHFTaYZfzq5L94q69V7/emOFI970nzTLGS1P7VFxp/lljr08u9zcjEtU2lZ+8yV
wQLXjda/JJTxuO8l2AiJl1DxXN3F79/XSOYGIfZdRSh55RdewCCMRf0RaQZKd9kd
PWMzbYwcczLIzMzAmJSaX5b01xbueFpGVziI0xaOPY3sjb50XOS1peyqIb+Mm8J3
QOkCNJwXgdwYkg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:10:13 2026 by rpki-client