Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
File: WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json)
Hash identifier: GlN2X6zc9bLps7X2EMm62wSvB3WprNCyWZzmuPs9qZI=
Subject key identifier: E7:D2:20:B2:16:45:B2:22:EF:60:BC:7E:57:10:04:98:DF:8E:A7:92
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 019D25BAD6D9D128E714E74A349B875422F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
Manifest number: 189B
Signing time: Wed 25 Mar 2026 16:01:34 +0000
Manifest this update: Wed 25 Mar 2026 16:01:34 +0000
Manifest next update: Thu 26 Mar 2026 16:01:34 +0000
Files and hashes: 1: 0xxG8NnQ1cHH2VuMnnW7a6ZFxBw.roa (hash: puojFO3qYRQJELluaLinsh5BQElMER1Xu8VsxXk+YDI=)
2: 5zxdjqmR3SsJvomZFwYc7Q3lUMg.roa (hash: l4rfQGKBI8UyN9DydN8xFr2Dz594CopVwc6Dn7Had1A=)
3: D-_lyCJV9Sz2bTIt9fGq5z3Su_8.roa (hash: +XSDkotkiwpFYKYiGdXlu1uwl2+rO95QfzY33Skq8BM=)
4: Iy3e1XIi2_TPudoAL1p13sZ86nk.roa (hash: ZD8BYSZqLIml0OJHAuNttBG7W2t2LH3qpbqsZj2++g0=)
5: PDKKcfMfB9Z0mxlt4jm0kcW0fg4.roa (hash: pmHMhVXHouebACUdAsdhssIPiD4oTuxtJJ4bNyh7xWs=)
6: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: YpL9kH53YIsdOR3GkE3ehb8ZHmHIukoUumqRXqkt1wA=)
7: glPJKLzyEtOQ3A0VJ1WR_oikUIA.roa (hash: BJBEqU9Ndqs4BRPdMDfiUT/sHTP2TSMpS+6KJivs8n8=)
8: nEYDmOUwm7vPJUZ93qzJbw-7Glc.roa (hash: htajFRk/mfg74Vz00/Fc7mrofNklSksIG9I2mp6YdcQ=)
9: vfAXikjKgCjq74heQ_lW0h7lKZM.roa (hash: y9mC9ZC9KsL88BTXfe+44waOrp0v1g4TnmU21Hw3eNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:d6:d9:d1:28:e7:14:e7:4a:34:9b:87:54:22:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Mar 25 16:01:34 2026 GMT
Not After : Mar 26 16:01:34 2026 GMT
Subject: CN=e7d220b21645b222ef60bc7e57100498df8ea792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:fa:2d:77:a2:4a:4f:6c:85:5c:66:98:67:4b:
87:6e:6c:97:b9:e8:99:21:1b:c1:9a:17:3e:b8:bd:
cc:b4:37:83:07:00:ac:38:17:44:7a:9b:0a:9b:4d:
d3:eb:20:85:96:20:24:e6:52:cb:e6:64:c7:29:5b:
0f:eb:60:ae:0e:7c:c7:9a:2a:94:74:da:d5:f8:55:
d5:bd:38:e2:04:62:44:c6:f2:01:24:dd:47:64:66:
d1:e9:3b:a6:62:d4:be:bc:c4:50:0c:a8:4d:e0:79:
6e:8e:bb:a0:b2:73:7e:8e:43:8e:b4:fc:96:58:f1:
f9:6b:90:c7:a0:55:e8:7f:93:ca:99:3a:a5:e0:35:
1c:9c:9f:d0:bb:a3:5b:eb:0e:22:9a:f2:3e:b9:8f:
71:e3:cc:20:ab:1d:e3:7c:bd:59:69:90:f1:12:ed:
15:70:a4:8f:73:73:d5:88:91:48:1b:c3:57:74:b5:
33:6d:78:10:2a:60:e5:00:9c:40:67:34:ac:7a:99:
0d:41:e2:05:41:72:73:21:bf:cf:41:c7:50:d6:70:
47:d3:df:65:a3:4d:44:e9:43:2f:96:8b:b7:b7:0d:
27:ed:82:67:3b:9f:dc:88:80:bf:03:fa:41:cd:57:
0b:27:d1:8b:5b:a8:f9:b8:7d:50:d0:52:c6:be:21:
c0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D2:20:B2:16:45:B2:22:EF:60:BC:7E:57:10:04:98:DF:8E:A7:92
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:09:30:45:8b:42:35:27:c3:01:06:d3:c9:9a:ee:87:92:af:
d0:a3:b7:c5:95:ea:0b:11:92:10:77:1c:a9:82:85:1f:62:da:
81:f9:3f:92:38:28:1a:64:36:87:9f:a2:24:6f:a6:73:fa:71:
dd:e6:9e:29:13:68:97:76:7f:5c:90:6d:fd:2d:46:cf:31:f8:
ae:83:6e:8f:d6:da:42:06:33:b1:75:aa:41:d9:c6:fb:1e:a6:
f0:01:2f:a6:2a:04:66:b0:fe:75:c4:13:c8:b5:7c:d6:97:9a:
0f:24:81:33:e0:7c:21:05:ed:71:8b:ed:01:61:66:6c:bd:c8:
f4:82:65:5a:36:af:40:e8:7d:c2:32:48:d6:d6:d1:b4:1d:b9:
3f:60:af:fd:5c:ec:de:80:29:99:97:b2:82:fb:0d:74:c5:cf:
a5:e4:70:5b:1c:d1:43:f2:d3:9d:74:bf:59:64:6f:91:84:a3:
be:83:cd:75:08:7b:7a:0c:58:8c:4f:ed:4e:dd:0a:84:6c:f8:
f3:3a:26:ae:8b:d7:53:68:c7:ca:14:46:cf:3b:fc:9c:6b:94:
cd:0f:3f:2a:fa:aa:71:7f:9e:5c:f4:58:57:9c:33:72:04:1a:
13:b0:74:6f:b3:11:16:bf:bd:f3:16:1e:b5:2a:be:9f:54:54:
ff:2a:87:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:18 2026 by rpki-client