Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
File: WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json)
Hash identifier: sZ/BhAtQO0JwmAoywGgCxEY2tyIVegvm9CusEsMmqEY=
Subject key identifier: C6:5B:0A:F9:0E:AB:23:67:D8:AB:3B:4B:3A:3F:48:36:11:21:00:56
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 019F91DA78FD9ACE4CB0CED4B39EC3E8DA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
Manifest number: 19E0
Signing time: Fri 24 Jul 2026 02:00:41 +0000
Manifest this update: Fri 24 Jul 2026 02:00:41 +0000
Manifest next update: Sat 25 Jul 2026 02:00:41 +0000
Files and hashes: 1: 0xxG8NnQ1cHH2VuMnnW7a6ZFxBw.roa (hash: puojFO3qYRQJELluaLinsh5BQElMER1Xu8VsxXk+YDI=)
2: 33oWgdjK_YQ5RE1HBLu9w5DuUys.roa (hash: YFfSyIkQ8r5EeIE2nKtHSYGUbZnDPhnEtmdTQuVMLZA=)
3: 5zxdjqmR3SsJvomZFwYc7Q3lUMg.roa (hash: l4rfQGKBI8UyN9DydN8xFr2Dz594CopVwc6Dn7Had1A=)
4: D-_lyCJV9Sz2bTIt9fGq5z3Su_8.roa (hash: +XSDkotkiwpFYKYiGdXlu1uwl2+rO95QfzY33Skq8BM=)
5: Iy3e1XIi2_TPudoAL1p13sZ86nk.roa (hash: ZD8BYSZqLIml0OJHAuNttBG7W2t2LH3qpbqsZj2++g0=)
6: WC3FelzMT51Jd0FzDfTcBvQbz0c.roa (hash: vMkqwwuueWTkKVbMn75esnOuu/9njTR5uN3u1wI+lvs=)
7: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: bQ9rHOmVcKHG1icVSp9bm4pXEbpi22e53uokTG6So3c=)
8: mbEhJhu8tsAzWhHE4rl5peqQOF8.roa (hash: Nn+Cgu7LOR6nMODgKh9QXXY7i8XiOMkzfzJkJHtgkLg=)
9: nEYDmOUwm7vPJUZ93qzJbw-7Glc.roa (hash: htajFRk/mfg74Vz00/Fc7mrofNklSksIG9I2mp6YdcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:78:fd:9a:ce:4c:b0:ce:d4:b3:9e:c3:e8:da:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Jul 24 02:00:41 2026 GMT
Not After : Jul 25 02:00:41 2026 GMT
Subject: CN=c65b0af90eab2367d8ab3b4b3a3f483611210056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:20:29:8d:6e:cd:29:de:cd:17:e3:15:df:61:
78:21:d1:9c:e7:b9:8b:99:2b:4c:e7:0d:4c:c5:fd:
37:69:2f:2e:43:3c:f2:e3:e2:cc:32:7b:3b:a8:62:
76:3e:a2:e8:9f:d2:a4:89:c0:26:db:f3:14:8b:13:
7b:d4:54:12:c6:34:96:cf:46:05:aa:ec:46:46:6e:
2c:3f:6c:18:02:48:b7:0c:25:ae:03:6f:c4:dc:5f:
e6:f6:6c:09:63:e5:c8:ed:98:3e:03:27:2d:08:2b:
21:06:30:32:a9:2c:3d:8c:be:e6:41:94:ca:40:21:
44:10:54:50:a3:fc:96:b6:9a:3d:6e:a3:07:d8:7a:
40:61:e7:cf:e3:3b:71:b0:21:a8:ca:a6:a3:82:36:
6b:8e:84:19:69:ce:f6:ab:d0:29:3e:15:6f:7a:dd:
e2:52:03:17:56:a2:a8:d6:d6:b1:06:d9:db:95:c9:
2c:37:f4:e6:64:a1:8a:7a:23:fe:39:cf:2c:7b:97:
7b:80:0c:49:22:6a:a9:55:88:ca:33:40:81:22:9c:
b3:7f:09:78:c2:b4:d0:de:72:c3:91:03:ea:b4:ed:
44:4c:12:e6:f5:b6:aa:6b:ab:3f:fc:52:91:a4:a9:
70:8f:b3:a0:5b:da:11:fc:16:5f:b0:0b:d9:1e:e5:
ee:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5B:0A:F9:0E:AB:23:67:D8:AB:3B:4B:3A:3F:48:36:11:21:00:56
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b9:95:9e:a7:09:7a:bc:1c:17:86:c4:2b:57:1d:3b:75:89:
29:b2:26:3e:19:30:55:6b:54:59:56:4b:10:c7:9d:ad:74:01:
c1:a9:62:18:6c:dd:b2:de:37:38:ef:ff:39:b8:9b:39:40:df:
f9:81:e4:d9:bc:9e:ff:59:78:4a:54:16:93:eb:0b:85:15:70:
be:dd:c5:47:a3:b7:61:24:ce:50:a4:01:49:e6:eb:b9:e6:a7:
06:75:63:84:77:40:59:74:f4:e9:1d:d4:63:a2:93:3d:9b:8d:
13:0c:91:c2:7f:d6:c9:f9:22:4f:20:74:fe:5d:7c:40:5d:69:
79:b6:fa:c3:56:60:55:71:69:82:18:31:fb:d4:f5:b0:fe:0f:
65:a4:f7:65:7d:4b:83:71:cf:2c:05:6a:85:4e:41:fc:ed:8a:
64:21:63:db:7a:01:01:f4:ee:bf:e1:a8:b6:13:12:24:6e:c9:
94:1b:56:d6:15:ed:a6:0d:00:c6:12:a2:50:3d:2e:ee:a1:6f:
7a:46:92:37:ce:1f:bb:2f:7f:d6:58:2b:37:d2:70:8e:47:51:
3f:d5:2b:78:cd:f1:48:1e:00:6d:95:5c:b4:92:cc:31:8a:5f:
54:33:03:fa:d6:30:f8:22:c2:34:c4:90:95:86:13:7c:0d:36:
41:f7:8c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:48 2026 by rpki-client