Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
File: WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json)
Hash identifier: e6HuQMnIO+V7d8NZUMsaJax0q29wecSv0Hqbom5ZIkk=
Subject key identifier: 53:92:DE:7E:58:6D:90:1B:7A:53:3C:77:21:84:C3:8A:CD:AC:3F:01
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial: 01A0D9F1B2CB0D047FBBB1B27D574BE33363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
Manifest number: 17D0
Signing time: Fri 25 Sep 2026 19:01:30 +0000
Manifest this update: Fri 25 Sep 2026 19:01:30 +0000
Manifest next update: Sat 26 Sep 2026 19:01:30 +0000
Files and hashes: 1: 1RuzsOoiPTgqsuSzzAU9YdpD_xE.roa (hash: Fsh9osUtIPyPkM6syYXVCCskaMH4p0nvyx/Ce7UJowo=)
2: FuFk1abxIFK2Ejav-XvLTSDuMQw.roa (hash: 0xnqZLkHCC49vVlWKGLKg1BEJ0gcvfzLoWavQfMGkDg=)
3: URu6RbbpNeggkq99HoBQq0K-CGw.roa (hash: SglHd7je2yZY5MNS1/0/uqc+KTjzW8LFZ4Gz7SHINKQ=)
4: UkVdKWIJtxN1ZPO561wg1yvlmnU.roa (hash: T1UGvaY+sPgOyfHIoNQmJTNfshFbXNmoAxXGY7h2ENY=)
5: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: 0GwsFs9qCj7YVeqsA5vjQ8+8Arh3ocn0Htk8h1Ryvlw=)
6: bjhvb0BbgpYztttOjwclzlXFPK0.roa (hash: vvxA9AxL6k1mLc2qjx+t+3GOkd26vCFzAe2CCZNqNvw=)
7: jgH6u912rK5Xtxpxfif3Cfl9DZ4.roa (hash: t2SsP6gmWCBRP4SsEFRkLirUYBsfe7RvyzM3ohHxmzE=)
8: sj-ab-RcHql4I59TCTsyMkUD6vg.roa (hash: VE0oA0NLUA2NKVotc1jXBr68T3tf7XY/p7hOR23C2ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:b2:cb:0d:04:7f:bb:b1:b2:7d:57:4b:e3:33:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597a01de87e011803f890ae17749020f995f140c
Validity
Not Before: Sep 25 19:01:30 2026 GMT
Not After : Sep 26 19:01:30 2026 GMT
Subject: CN=5392de7e586d901b7a533c772184c38acdac3f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:a6:be:45:58:eb:cc:f8:61:75:bb:8c:29:
1a:ea:9b:ab:20:21:27:37:20:c6:09:a0:b1:ce:03:
f8:25:e2:53:73:02:59:27:f3:ad:35:e6:4d:08:47:
a2:82:03:9b:dc:fb:0c:c0:54:fb:08:b9:66:57:dc:
2a:ff:92:35:7a:f0:8d:8b:45:34:7f:89:a4:6a:61:
dc:7a:8b:0a:bd:ac:68:21:cb:cf:6b:c1:42:36:f5:
8c:bc:1a:f0:d9:c9:5b:04:3d:98:42:bd:8f:8d:fc:
dd:f3:2a:72:f1:10:ec:e6:de:a7:3f:0c:af:44:dc:
1c:45:79:2c:31:90:b8:dc:9f:f9:6c:35:a6:ad:6d:
16:89:f7:06:66:24:13:2f:ed:ee:da:13:75:d9:c8:
22:32:69:3e:77:e3:ec:57:be:48:16:d5:e2:25:31:
e8:60:ff:19:3f:5d:e9:af:40:0e:f1:79:ca:7c:b4:
df:56:33:bc:72:83:fe:61:57:02:77:eb:19:5f:87:
42:5c:13:a0:ca:8e:c5:be:bd:1c:23:80:9a:bd:b6:
bc:36:2f:0a:4b:e8:34:e6:1e:85:4e:eb:4a:79:ef:
f6:3b:d4:76:16:98:06:5b:14:2e:51:32:18:7c:45:
b2:f0:4a:74:94:0f:2b:e7:0f:da:c9:7e:c4:d0:b0:
bd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:92:DE:7E:58:6D:90:1B:7A:53:3C:77:21:84:C3:8A:CD:AC:3F:01
X509v3 Authority Key Identifier:
keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:bd:54:3f:f6:f9:48:72:8a:ba:c4:68:8e:af:38:bb:fa:66:
4c:29:6d:d0:84:0b:16:30:35:3e:0d:ce:bc:b1:ef:57:ab:65:
63:6a:07:54:90:02:54:2a:d6:dc:dd:24:de:b9:e7:30:7c:e2:
ad:60:e5:8c:a8:3b:bd:8f:53:71:25:60:78:4d:97:7d:00:90:
f4:a4:62:2d:96:fc:13:f3:d4:77:a7:7b:65:71:32:a5:37:b8:
e1:c7:1f:9d:65:71:df:8f:63:06:7e:86:2d:a1:ec:71:d4:56:
6d:38:ca:6b:7f:e6:0a:83:d2:31:11:9d:51:da:23:c8:cf:44:
95:8e:73:fb:a1:13:ad:0f:23:b2:8e:8a:02:9f:55:44:b1:31:
b3:81:d3:4e:be:44:7f:51:23:be:f6:85:7a:81:28:02:25:f4:
59:87:71:10:d8:2d:44:98:af:1a:e9:b2:4d:e2:ae:e4:de:9b:
81:07:79:ab:07:51:3d:b0:84:5c:27:13:1b:cd:81:d3:5f:48:
b5:1a:00:10:4c:c5:a7:b7:23:f2:2d:a2:e2:8b:85:5e:ea:11:
01:a6:de:24:09:c9:9d:00:d1:d9:5e:8d:45:9d:33:b3:fb:86:
cf:5b:20:94:20:3f:78:68:28:04:f1:2a:10:5e:00:cd:47:b9:
13:8e:c5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:40:41 2026 by rpki-client