Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
File: WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json)
Hash identifier: wgCHiiAXaLjWKP36QVIJ70eta3X6sCKGrzzyfatOOa0=
Subject key identifier: 71:AA:BB:10:98:D2:DD:23:DC:6A:01:B3:45:F5:0F:83:0B:BD:99:BA
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial: 019D26CD87391A20331EA13CCEF1324D98ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
Manifest number: 15E2
Signing time: Wed 25 Mar 2026 21:01:36 +0000
Manifest this update: Wed 25 Mar 2026 21:01:36 +0000
Manifest next update: Thu 26 Mar 2026 21:01:36 +0000
Files and hashes: 1: 01R0I9DHDPHcmxrcTn54aUYrxU4.roa (hash: LZW1SFZial6vNqkBHwqDupXnYLh58eQuRcWzvrTL1pI=)
2: 1RuzsOoiPTgqsuSzzAU9YdpD_xE.roa (hash: Fsh9osUtIPyPkM6syYXVCCskaMH4p0nvyx/Ce7UJowo=)
3: URu6RbbpNeggkq99HoBQq0K-CGw.roa (hash: SglHd7je2yZY5MNS1/0/uqc+KTjzW8LFZ4Gz7SHINKQ=)
4: UkVdKWIJtxN1ZPO561wg1yvlmnU.roa (hash: T1UGvaY+sPgOyfHIoNQmJTNfshFbXNmoAxXGY7h2ENY=)
5: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: Ksw9fuqaNrpMxTHSzJ0jMJ6zUXE9A/B4ebzNYUfScjY=)
6: bjhvb0BbgpYztttOjwclzlXFPK0.roa (hash: vvxA9AxL6k1mLc2qjx+t+3GOkd26vCFzAe2CCZNqNvw=)
7: sj-ab-RcHql4I59TCTsyMkUD6vg.roa (hash: VE0oA0NLUA2NKVotc1jXBr68T3tf7XY/p7hOR23C2ks=)
8: uNBCqgPm9OGK31TBmTo_MAC1yZU.roa (hash: QNpQXcsFAXHCdiWuXRp1NnyNLbpNgci4N8tXC8HHacM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:87:39:1a:20:33:1e:a1:3c:ce:f1:32:4d:98:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597a01de87e011803f890ae17749020f995f140c
Validity
Not Before: Mar 25 21:01:36 2026 GMT
Not After : Mar 26 21:01:36 2026 GMT
Subject: CN=71aabb1098d2dd23dc6a01b345f50f830bbd99ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:99:e9:58:5a:6e:6d:d9:9a:96:15:ad:6f:
b6:12:b1:0c:e1:17:05:99:89:1d:41:c2:dc:78:cb:
ea:76:ec:af:93:ba:bf:ce:3a:e1:03:1f:18:78:b7:
78:25:12:73:08:89:3f:95:3a:61:f0:b4:46:00:05:
88:f0:a6:58:6e:9d:57:58:07:a9:c5:16:d2:46:51:
7c:88:e9:85:66:45:3d:a7:21:33:b2:07:4a:10:71:
01:7b:76:b8:cd:bb:17:bd:9d:a9:b1:c1:e7:2e:8f:
b6:78:c2:20:51:4c:0b:2f:a9:08:2b:2e:4a:a3:7c:
16:64:ea:7c:69:aa:08:f8:bc:11:21:e1:21:24:06:
1c:f3:82:57:1f:32:51:79:97:b5:79:53:55:38:c3:
83:4d:a4:c5:8c:f7:64:c3:da:b0:f3:79:c8:32:cb:
fc:2c:2f:47:3a:d2:b9:d3:a8:b7:fe:88:e8:23:41:
6e:23:f4:32:33:ae:f9:df:65:27:21:be:76:30:33:
f7:0a:c9:f9:46:54:0c:d6:33:af:8a:17:4c:8f:17:
32:b8:45:5c:a2:45:0e:3a:b6:56:0e:10:12:a1:0d:
71:67:73:80:1d:c2:eb:d6:26:62:14:b1:16:cf:f2:
f2:6b:ae:54:39:73:19:4b:f7:eb:69:14:10:71:da:
42:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AA:BB:10:98:D2:DD:23:DC:6A:01:B3:45:F5:0F:83:0B:BD:99:BA
X509v3 Authority Key Identifier:
keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:73:c2:93:04:54:9b:d6:42:9b:5e:fd:37:32:45:3e:6c:d2:
3c:3d:d0:3f:a2:4f:a3:b3:01:a8:fe:88:9d:e5:94:f0:c2:37:
67:e3:ff:2f:42:59:04:6f:c9:ca:69:86:62:5d:64:ce:25:1d:
0d:dd:0d:39:cf:8c:46:13:ee:53:6d:cc:0d:3b:c1:48:f7:51:
d2:e0:8a:b6:ff:e6:ec:6f:7c:c3:87:8a:ca:81:9e:07:59:ee:
56:14:30:7c:66:64:13:6c:41:d5:50:9b:4f:b5:d3:ff:ac:d0:
2a:7c:a5:08:1b:82:ea:53:1f:ed:24:25:96:11:af:1e:b9:9c:
c9:e1:0a:33:df:59:90:ba:48:02:b0:ae:f2:55:b2:5d:d0:69:
1d:12:23:0f:de:33:55:d9:01:cc:ff:ca:3c:9a:0f:68:0f:f0:
14:ea:48:73:9c:db:c3:63:27:5b:7a:56:96:8d:a7:dd:1f:c9:
1c:0a:28:39:a7:50:17:2d:55:84:5a:a2:02:4e:1c:b4:de:bb:
76:44:e0:5a:bb:73:df:83:94:3f:27:83:c6:7a:58:af:46:af:
18:a3:a6:16:56:e5:8c:ac:55:e6:25:96:86:e6:32:9c:7a:63:
2c:14:26:56:51:60:1e:b8:4c:d8:5e:98:7f:6b:a1:b4:14:ab:
51:f7:a7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:24 2026 by rpki-client