Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
File: WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json)
Hash identifier: OFI/KGEZziKtM96ajgaD85W2q1J5JN3OnImPYDH3QOY=
Subject key identifier: 46:A7:83:F4:F4:57:C4:E5:AB:2D:11:E9:90:53:39:3F:AA:13:A5:F5
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 019E1E34E360A94BDEEBDDC10B6ADD55E47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
Manifest number: 191C
Signing time: Tue 12 May 2026 22:00:42 +0000
Manifest this update: Tue 12 May 2026 22:00:42 +0000
Manifest next update: Wed 13 May 2026 22:00:42 +0000
Files and hashes: 1: 0xxG8NnQ1cHH2VuMnnW7a6ZFxBw.roa (hash: puojFO3qYRQJELluaLinsh5BQElMER1Xu8VsxXk+YDI=)
2: 5zxdjqmR3SsJvomZFwYc7Q3lUMg.roa (hash: l4rfQGKBI8UyN9DydN8xFr2Dz594CopVwc6Dn7Had1A=)
3: D-_lyCJV9Sz2bTIt9fGq5z3Su_8.roa (hash: +XSDkotkiwpFYKYiGdXlu1uwl2+rO95QfzY33Skq8BM=)
4: Iy3e1XIi2_TPudoAL1p13sZ86nk.roa (hash: ZD8BYSZqLIml0OJHAuNttBG7W2t2LH3qpbqsZj2++g0=)
5: PDKKcfMfB9Z0mxlt4jm0kcW0fg4.roa (hash: pmHMhVXHouebACUdAsdhssIPiD4oTuxtJJ4bNyh7xWs=)
6: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: TuQkLrSGpLw1CEmmDH7WjwNyKIM1QmhSgEgGe265NpA=)
7: mbEhJhu8tsAzWhHE4rl5peqQOF8.roa (hash: Nn+Cgu7LOR6nMODgKh9QXXY7i8XiOMkzfzJkJHtgkLg=)
8: nEYDmOUwm7vPJUZ93qzJbw-7Glc.roa (hash: htajFRk/mfg74Vz00/Fc7mrofNklSksIG9I2mp6YdcQ=)
9: vfAXikjKgCjq74heQ_lW0h7lKZM.roa (hash: y9mC9ZC9KsL88BTXfe+44waOrp0v1g4TnmU21Hw3eNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:e3:60:a9:4b:de:eb:dd:c1:0b:6a:dd:55:e4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: May 12 22:00:42 2026 GMT
Not After : May 13 22:00:42 2026 GMT
Subject: CN=46a783f4f457c4e5ab2d11e99053393faa13a5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c0:48:45:7d:e2:83:1e:a9:f7:ae:4f:45:9e:
f8:c5:1d:ae:3d:dd:e4:fc:57:a3:55:2b:e9:20:f5:
ca:54:c3:42:69:9b:30:22:f3:c6:6c:3b:89:f4:17:
23:c7:9b:38:01:8f:72:19:8b:e7:e0:2f:50:66:4b:
ca:83:0a:a2:e6:13:71:50:8d:d7:ea:5e:64:ef:83:
61:07:0a:21:af:c7:66:a9:80:e3:90:b3:16:76:89:
8c:33:79:99:f9:d5:8c:41:4f:39:98:0c:d8:93:5b:
15:84:f0:ac:2f:d5:c4:ab:bb:63:40:f9:30:56:4e:
56:a2:0a:b6:50:cb:f4:e1:84:96:01:56:dd:dc:ea:
db:ab:65:4d:45:ed:bd:31:9c:b9:ca:73:9c:9a:43:
34:29:e5:f7:7c:ae:44:de:0b:38:6a:de:20:13:26:
50:bf:b9:de:a2:9e:b1:1a:40:aa:5a:b8:b9:fc:6b:
16:ed:f1:1a:32:5b:99:0a:9d:73:4c:db:bd:23:ef:
4d:77:2e:d4:3f:cc:92:3f:42:40:36:b3:2c:52:72:
8a:df:cd:a0:d6:bd:93:80:c7:aa:b8:d2:25:47:db:
7a:b6:ef:a1:be:dd:bb:44:7a:73:24:80:e7:6a:0c:
b1:dc:cb:88:d1:32:0b:72:4f:bc:6f:48:c5:5a:d9:
cb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A7:83:F4:F4:57:C4:E5:AB:2D:11:E9:90:53:39:3F:AA:13:A5:F5
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d9:19:11:32:66:3f:1d:28:6e:93:f4:55:b9:dd:cd:91:59:
f6:24:4f:1a:16:b6:47:b1:1c:5d:a9:3c:9a:2f:de:24:51:35:
e4:63:1f:69:da:df:0a:c5:56:20:04:91:a3:b0:48:30:46:db:
72:cc:b7:68:98:fe:a8:6b:4e:ae:2a:0a:e7:58:91:54:ba:1d:
58:c7:70:2c:a0:0d:a7:fa:bf:97:78:02:a3:c3:e8:91:09:8a:
6e:75:37:f0:6d:52:f4:fa:a4:f9:cd:3c:ef:d1:14:26:33:67:
d4:7a:5c:9d:a0:44:5b:29:62:20:f0:9e:93:b1:12:49:20:c7:
46:95:a7:93:1a:87:65:4c:06:c9:38:83:41:e4:b9:1e:f8:2d:
15:2f:b7:93:70:8d:28:6f:9f:94:4b:fe:6b:64:66:ef:4c:1b:
ee:4b:10:84:bb:ad:21:7c:1d:ac:a9:b5:33:56:3e:71:f5:22:
56:19:ee:4d:c3:cc:7e:a2:2a:29:97:07:25:5f:f6:87:cf:1f:
d5:3f:d2:bd:fc:df:e7:6f:b7:ca:9e:0b:ed:1e:74:8c:9e:47:
a3:f9:e2:9f:19:30:30:64:c7:69:2b:96:17:2e:6c:33:76:c6:
48:28:5f:5e:f0:a1:64:79:c4:b0:a9:50:d4:fc:c9:a4:f4:42:
66:cc:28:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:26 2026 by rpki-client