Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
File: WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json)
Hash identifier: RkwbNRLLkDgQT6skNFBIFDMZhGKT9wTNv+FMhGYRJ/I=
Subject key identifier: 4D:8A:E3:DE:4D:C5:C8:95:0F:EC:1C:4C:D5:86:4E:36:D4:97:69:AB
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial: 019E1D22D8FFCCD47A2D410C8ECA4EA45BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
Manifest number: 1662
Signing time: Tue 12 May 2026 17:01:23 +0000
Manifest this update: Tue 12 May 2026 17:01:23 +0000
Manifest next update: Wed 13 May 2026 17:01:23 +0000
Files and hashes: 1: 01R0I9DHDPHcmxrcTn54aUYrxU4.roa (hash: LZW1SFZial6vNqkBHwqDupXnYLh58eQuRcWzvrTL1pI=)
2: 1RuzsOoiPTgqsuSzzAU9YdpD_xE.roa (hash: Fsh9osUtIPyPkM6syYXVCCskaMH4p0nvyx/Ce7UJowo=)
3: URu6RbbpNeggkq99HoBQq0K-CGw.roa (hash: SglHd7je2yZY5MNS1/0/uqc+KTjzW8LFZ4Gz7SHINKQ=)
4: UkVdKWIJtxN1ZPO561wg1yvlmnU.roa (hash: T1UGvaY+sPgOyfHIoNQmJTNfshFbXNmoAxXGY7h2ENY=)
5: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: wQLKxO2C9mvV9fL7bcIZYebYZQIWPzVU1UOi5b2KSU0=)
6: bjhvb0BbgpYztttOjwclzlXFPK0.roa (hash: vvxA9AxL6k1mLc2qjx+t+3GOkd26vCFzAe2CCZNqNvw=)
7: jgH6u912rK5Xtxpxfif3Cfl9DZ4.roa (hash: t2SsP6gmWCBRP4SsEFRkLirUYBsfe7RvyzM3ohHxmzE=)
8: sj-ab-RcHql4I59TCTsyMkUD6vg.roa (hash: VE0oA0NLUA2NKVotc1jXBr68T3tf7XY/p7hOR23C2ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:d8:ff:cc:d4:7a:2d:41:0c:8e:ca:4e:a4:5b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597a01de87e011803f890ae17749020f995f140c
Validity
Not Before: May 12 17:01:23 2026 GMT
Not After : May 13 17:01:23 2026 GMT
Subject: CN=4d8ae3de4dc5c8950fec1c4cd5864e36d49769ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:bc:6d:a8:4f:06:55:a3:35:53:f6:a5:29:
e2:b4:8d:d2:f8:fa:95:5d:7e:03:6e:6d:bb:1f:40:
02:61:a2:0c:ee:c0:bb:78:b5:a1:da:8e:26:35:f9:
35:df:cc:82:cc:71:2b:1b:3b:92:e9:2c:4e:20:f0:
64:f3:e2:3c:45:3f:65:9e:dd:f2:3b:7a:f8:ff:1e:
b4:22:0a:a7:46:22:6c:05:b2:23:49:26:f6:a7:e8:
57:cc:54:2a:d6:05:6f:7d:75:b1:c1:74:a1:6c:a4:
67:e7:f9:0c:e6:49:82:71:93:06:87:a7:8d:eb:7b:
3e:c1:58:20:25:4a:5e:60:35:b2:9d:3c:da:64:a3:
77:2f:d5:d5:85:ae:03:54:84:3a:96:78:67:6d:8f:
0c:49:41:30:77:8f:8c:5f:b3:de:18:2d:45:dd:24:
c2:1a:ea:3b:6b:16:65:9e:b1:3f:70:8e:ae:87:67:
9e:67:b5:85:e6:ae:3b:90:c0:6e:da:7f:b3:54:d9:
ff:f7:c6:90:5c:07:8b:f2:a0:d5:90:e0:7f:c5:3e:
c4:23:4f:9b:49:0c:e6:c2:aa:36:a0:c2:6d:54:ff:
b6:88:6a:54:b4:7b:44:51:e3:38:57:d5:a6:a3:1a:
76:3c:28:8d:6e:72:4f:28:37:8c:7a:d9:74:2e:2c:
e6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8A:E3:DE:4D:C5:C8:95:0F:EC:1C:4C:D5:86:4E:36:D4:97:69:AB
X509v3 Authority Key Identifier:
keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:74:55:d1:8c:14:4d:f6:8a:bd:b6:ed:dd:40:71:65:f5:af:
95:d0:88:83:f8:0b:4a:bf:78:bc:d2:91:db:54:1d:2c:58:bc:
ff:43:3d:c3:da:27:88:06:25:45:26:f2:5a:d7:54:cb:ec:7f:
6e:1d:c0:d4:73:ae:a7:ca:2f:63:b4:56:07:cf:08:66:58:fb:
ae:4a:02:26:bf:69:91:d6:0b:d9:5d:7b:5d:30:87:49:30:cd:
1a:68:df:c0:96:38:8f:38:e1:7d:9d:fb:be:13:f3:26:00:98:
2e:14:cf:b5:92:50:d2:a6:03:6d:11:ad:ea:3a:b6:0b:a4:74:
e7:cd:cb:01:18:c7:94:ad:36:e6:26:d6:76:05:11:f1:bc:45:
09:35:69:43:24:46:27:c3:8e:22:b5:e3:56:bc:49:8a:00:00:
85:fd:af:46:09:c1:fa:ba:d4:d7:1e:93:35:dd:0c:21:b7:23:
77:65:b2:88:9a:a8:f0:48:2c:cd:bb:81:dd:51:04:96:e8:0b:
15:de:8b:d1:89:24:f0:b3:0e:39:51:9b:51:c2:79:f2:04:39:
de:e1:09:96:73:01:b6:1d:a9:4f:ae:d8:ab:9c:29:07:5d:2c:
a7:db:67:76:91:03:de:87:d5:b4:53:65:21:43:a9:86:62:17:
e6:99:4a:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dItj/zNR6LUEMjspOpFvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5N2EwMWRlODdlMDExODAzZjg5MGFlMTc3NDkwMjBmOTk1
ZjE0MGMwHhcNMjYwNTEyMTcwMTIzWhcNMjYwNTEzMTcwMTIzWjAzMTEwLwYDVQQD
Eyg0ZDhhZTNkZTRkYzVjODk1MGZlYzFjNGNkNTg2NGUzNmQ0OTc2OWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMu8bahPBlWjNVP2pSnitI3S+PqV
XX4Dbm27H0ACYaIM7sC7eLWh2o4mNfk138yCzHErGzuS6SxOIPBk8+I8RT9lnt3y
O3r4/x60IgqnRiJsBbIjSSb2p+hXzFQq1gVvfXWxwXShbKRn5/kM5kmCcZMGh6eN
63s+wVggJUpeYDWynTzaZKN3L9XVha4DVIQ6lnhnbY8MSUEwd4+MX7PeGC1F3STC
Guo7axZlnrE/cI6uh2eeZ7WF5q47kMBu2n+zVNn/98aQXAeL8qDVkOB/xT7EI0+b
SQzmwqo2oMJtVP+2iGpUtHtEUeM4V9Wmoxp2PCiNbnJPKDeMetl0LizmawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2K495NxciVD+wcTNWGTjbUl2mrMB8GA1UdIwQY
MBaAFFl6Ad6H4BGAP4kK4XdJAg+ZXxQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yM2VkOWEtMWNhNS00NWVhLTliOGMt
NzM1MzNkZTA5OWMzLzEvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8yM2VkOWEtMWNhNS00NWVhLTliOGMtNzM1MzNkZTA5OWMz
LzEvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQnRV0YwU
TfaKvbbt3UBxZfWvldCIg/gLSr94vNKR21QdLFi8/0M9w9oniAYlRSbyWtdUy+x/
bh3A1HOup8ovY7RWB88IZlj7rkoCJr9pkdYL2V17XTCHSTDNGmjfwJY4jzjhfZ37
vhPzJgCYLhTPtZJQ0qYDbRGt6jq2C6R0583LARjHlK025ibWdgUR8bxFCTVpQyRG
J8OOIrXjVrxJigAAhf2vRgnB+rrU1x6TNd0MIbcjd2WyiJqo8EgszbuB3VEElugL
Fd6L0Ykk8LMOOVGbUcJ58gQ53uEJlnMBth2pT67Yq5wpB10sp9tndpED3ofVtFNl
IUOphmIX5plKAA==
-----END CERTIFICATE-----
Generated at Wed May 13 03:36:49 2026 by rpki-client