Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
File: WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json)
Hash identifier: VN7zW7qNtETT0249gsW/YCjcta/awtkpm/7RA9blMq4=
Subject key identifier: 3B:05:C7:CB:CA:44:F1:09:9F:02:24:66:F1:45:A3:67:4A:AA:7E:F9
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial: 019F8FECA8073BBFBD8C53D5F7F95CB75041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
Manifest number: 1722
Signing time: Thu 23 Jul 2026 17:01:19 +0000
Manifest this update: Thu 23 Jul 2026 17:01:19 +0000
Manifest next update: Fri 24 Jul 2026 17:01:19 +0000
Files and hashes: 1: 01R0I9DHDPHcmxrcTn54aUYrxU4.roa (hash: LZW1SFZial6vNqkBHwqDupXnYLh58eQuRcWzvrTL1pI=)
2: 1RuzsOoiPTgqsuSzzAU9YdpD_xE.roa (hash: Fsh9osUtIPyPkM6syYXVCCskaMH4p0nvyx/Ce7UJowo=)
3: URu6RbbpNeggkq99HoBQq0K-CGw.roa (hash: SglHd7je2yZY5MNS1/0/uqc+KTjzW8LFZ4Gz7SHINKQ=)
4: UkVdKWIJtxN1ZPO561wg1yvlmnU.roa (hash: T1UGvaY+sPgOyfHIoNQmJTNfshFbXNmoAxXGY7h2ENY=)
5: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: okHfaPecHLsK3M5xDs9cZAReUYHiohcA+zk4kbmNjsE=)
6: bjhvb0BbgpYztttOjwclzlXFPK0.roa (hash: vvxA9AxL6k1mLc2qjx+t+3GOkd26vCFzAe2CCZNqNvw=)
7: jgH6u912rK5Xtxpxfif3Cfl9DZ4.roa (hash: t2SsP6gmWCBRP4SsEFRkLirUYBsfe7RvyzM3ohHxmzE=)
8: sj-ab-RcHql4I59TCTsyMkUD6vg.roa (hash: VE0oA0NLUA2NKVotc1jXBr68T3tf7XY/p7hOR23C2ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:a8:07:3b:bf:bd:8c:53:d5:f7:f9:5c:b7:50:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597a01de87e011803f890ae17749020f995f140c
Validity
Not Before: Jul 23 17:01:19 2026 GMT
Not After : Jul 24 17:01:19 2026 GMT
Subject: CN=3b05c7cbca44f1099f022466f145a3674aaa7ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:0a:e2:cf:85:1e:92:e0:3a:25:b9:e9:72:
fc:48:33:a6:4c:31:d4:11:23:37:3d:02:0c:2a:db:
d1:b0:bf:ac:d0:e4:1d:0c:15:0c:53:ce:fd:bd:2f:
9d:76:67:e6:9c:32:30:af:db:17:3b:ba:16:05:35:
d7:e8:7f:be:92:b1:c1:b8:e1:7c:63:b2:75:f7:f8:
74:76:77:30:16:53:79:6e:a5:f0:1e:8e:71:5d:15:
33:32:49:27:e8:17:83:d0:4d:be:73:cc:14:83:ca:
22:2e:ff:cb:d7:38:b9:5d:ce:8c:ac:e5:e6:69:42:
5c:59:d4:78:51:ce:b3:a0:31:ac:89:d7:4b:bf:59:
39:6f:80:74:a9:29:23:39:e8:49:34:38:68:88:ca:
d9:b9:14:89:ff:c9:67:32:33:b4:d5:bf:b4:f7:9d:
c9:06:1d:2c:19:ad:40:41:2c:f8:df:98:a2:3c:41:
1f:fa:93:92:19:3e:27:02:2e:c8:4b:78:1d:6d:46:
98:e0:e0:e2:cb:d0:d1:32:ef:01:f3:d6:39:88:94:
7b:a8:18:2c:ce:9f:c2:6e:0d:4e:56:fb:ff:9d:8c:
13:3a:22:55:f1:9f:42:b4:87:c2:31:95:e6:a1:6c:
ef:fc:fe:28:db:fa:2f:9f:f0:93:31:c1:1b:d6:4b:
77:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:05:C7:CB:CA:44:F1:09:9F:02:24:66:F1:45:A3:67:4A:AA:7E:F9
X509v3 Authority Key Identifier:
keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:0b:d4:71:0f:d3:33:82:66:8d:3f:a2:34:be:32:2f:0e:19:
2d:60:c6:69:b7:7b:32:83:0b:f4:23:38:48:1b:94:34:6e:28:
aa:b4:ff:28:ba:09:f9:0a:07:80:be:ca:f4:7c:d8:e8:a3:8d:
f0:78:25:80:4a:06:52:0a:c2:27:19:a7:75:7f:ef:8e:80:aa:
ac:9d:ac:07:f1:ce:32:a2:78:f9:6c:03:0c:02:2f:d8:d6:2e:
5f:45:fc:08:96:2d:c8:73:c2:64:ad:37:dc:c3:e1:96:7b:48:
64:75:c0:c4:59:2a:1b:5a:cf:ca:e3:df:aa:13:d9:11:be:a7:
de:65:b4:14:ac:e3:75:24:d6:12:37:8d:c0:dd:1d:85:ba:23:
b9:79:33:f1:8a:8c:0d:87:2e:25:63:a2:7b:fa:97:ef:ca:7b:
f9:54:b6:c5:6b:48:ab:9c:6b:3f:b4:4e:c2:4c:2d:e0:96:79:
86:7b:3c:45:b7:f1:5e:70:e4:8b:29:d8:87:74:53:f1:44:3b:
69:8e:da:e1:8f:d2:96:5f:98:75:9d:b0:7f:bc:a6:b6:69:69:
1b:e8:d7:09:f6:34:3d:fc:87:18:6c:14:7e:57:b7:68:43:9f:
bc:30:b6:a5:35:c4:00:30:1a:78:fc:39:bd:1c:5c:d9:9a:96:
d3:39:b1:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7KgHO7+9jFPV9/lct1BBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5N2EwMWRlODdlMDExODAzZjg5MGFlMTc3NDkwMjBmOTk1
ZjE0MGMwHhcNMjYwNzIzMTcwMTE5WhcNMjYwNzI0MTcwMTE5WjAzMTEwLwYDVQQD
EygzYjA1YzdjYmNhNDRmMTA5OWYwMjI0NjZmMTQ1YTM2NzRhYWE3ZWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4sK4s+FHpLgOiW56XL8SDOmTDHU
ESM3PQIMKtvRsL+s0OQdDBUMU879vS+ddmfmnDIwr9sXO7oWBTXX6H++krHBuOF8
Y7J19/h0dncwFlN5bqXwHo5xXRUzMkkn6BeD0E2+c8wUg8oiLv/L1zi5Xc6MrOXm
aUJcWdR4Uc6zoDGsiddLv1k5b4B0qSkjOehJNDhoiMrZuRSJ/8lnMjO01b+0953J
Bh0sGa1AQSz435iiPEEf+pOSGT4nAi7IS3gdbUaY4ODiy9DRMu8B89Y5iJR7qBgs
zp/Cbg1OVvv/nYwTOiJV8Z9CtIfCMZXmoWzv/P4o2/ovn/CTMcEb1kt3OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsFx8vKRPEJnwIkZvFFo2dKqn75MB8GA1UdIwQY
MBaAFFl6Ad6H4BGAP4kK4XdJAg+ZXxQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yM2VkOWEtMWNhNS00NWVhLTliOGMt
NzM1MzNkZTA5OWMzLzEvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8yM2VkOWEtMWNhNS00NWVhLTliOGMtNzM1MzNkZTA5OWMz
LzEvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsAvUcQ/T
M4JmjT+iNL4yLw4ZLWDGabd7MoML9CM4SBuUNG4oqrT/KLoJ+QoHgL7K9HzY6KON
8HglgEoGUgrCJxmndX/vjoCqrJ2sB/HOMqJ4+WwDDAIv2NYuX0X8CJYtyHPCZK03
3MPhlntIZHXAxFkqG1rPyuPfqhPZEb6n3mW0FKzjdSTWEjeNwN0dhbojuXkz8YqM
DYcuJWOie/qX78p7+VS2xWtIq5xrP7ROwkwt4JZ5hns8RbfxXnDkiynYh3RT8UQ7
aY7a4Y/Sll+YdZ2wf7ymtmlpG+jXCfY0PfyHGGwUfle3aEOfvDC2pTXEADAaePw5
vRxc2ZqW0zmxSQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:44:09 2026 by rpki-client