Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
File: WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft (raw, json)
Hash identifier: 5fh58nmch1IKnjO2dJ10LDQZl9B+pOhR4fmAB3ztVFw=
Subject key identifier: 28:52:B2:B8:75:6B:B9:14:5C:29:29:A2:A2:D3:7B:E0:72:19:5F:B1
Authority key identifier: 58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
Certificate issuer: /CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Certificate serial: 01A0D4CB2619D12D06EF5BEB2E8E10EC185D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 19:01:18 +0000
Manifest this update: Thu 24 Sep 2026 19:01:18 +0000
Manifest next update: Fri 25 Sep 2026 19:01:18 +0000
Files and hashes: 1: FJ7VQcAMIvc3LwUGZdJ2_y4tX64.roa (hash: KoQb0RIcqGQvJlXxJR+BM6e+6A6w3hgDW+4kbTJ92pM=)
2: WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl (hash: Yys85ADCiyCSqB1UDXilJk9MpOpm7+XLonE7LESrhzM=)
3: aPCbZqgtPV21c3ARjcz1UPj-qzE.roa (hash: QekkHkDa+9iEezFiFOvlr4BwgfAqsVczW7AoIwi4kRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:26:19:d1:2d:06:ef:5b:eb:2e:8e:10:ec:18:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Validity
Not Before: Sep 24 19:01:18 2026 GMT
Not After : Sep 25 19:01:18 2026 GMT
Subject: CN=2852b2b8756bb9145c2929a2a2d37be072195fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a5:09:b0:77:ac:95:fc:04:0c:04:8d:44:37:
14:b1:1b:37:af:69:77:49:9f:a8:ab:b1:dd:f7:f0:
d7:92:ef:c1:bf:e3:08:cd:7d:90:57:bb:6a:7b:9f:
f7:17:16:1d:56:ed:cf:b6:55:a8:43:00:24:55:4a:
ea:06:de:64:10:b5:5e:8e:ce:45:41:96:cb:85:b9:
b2:59:4f:81:d8:49:28:17:99:57:b1:35:2d:fd:cd:
69:fb:6b:c7:25:24:f4:72:bd:21:b4:07:36:40:86:
e4:4f:15:7c:18:93:c1:c5:4c:e6:7e:0a:57:e5:41:
a3:77:e4:4b:02:f2:41:8b:61:4d:0e:86:18:05:5a:
12:3b:6f:6e:02:6c:fb:56:86:41:70:75:86:18:e8:
b4:2f:30:48:25:14:e2:9d:0a:0c:8d:93:44:45:20:
ed:a6:f1:17:ba:d4:ec:98:a8:3d:6d:3f:8d:17:05:
58:5a:fa:b8:fe:0e:55:32:2a:40:af:8b:22:d0:2e:
8a:3b:2e:00:47:b2:1c:f7:1b:58:ab:38:1a:8f:8f:
d9:76:6d:b0:82:34:cc:2e:ec:51:ff:72:b1:68:94:
56:9a:45:6f:79:ab:4a:dd:c4:a6:41:8e:4a:65:e2:
57:cc:a0:1d:7c:9c:84:64:7f:f9:eb:8a:b4:69:c1:
d1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:52:B2:B8:75:6B:B9:14:5C:29:29:A2:A2:D3:7B:E0:72:19:5F:B1
X509v3 Authority Key Identifier:
keyid:58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:8c:18:16:5e:4a:44:a9:b9:bb:5f:5e:02:c0:1a:0d:69:4c:
03:be:f8:37:b2:e1:2c:fe:0d:be:07:81:98:e9:0e:83:7f:a3:
19:79:b8:d3:24:c5:5a:5a:f7:71:63:1a:69:0d:86:21:84:66:
bc:36:4a:25:91:a5:ea:18:8c:c3:b5:9e:d3:fc:04:ad:9c:f6:
31:c7:8e:5e:36:e5:75:10:b6:4c:0d:74:fb:56:23:21:f4:36:
22:ec:e1:a3:44:fd:a7:39:a8:6f:0e:18:0d:6b:c8:9d:52:c7:
fb:1d:45:bb:1b:61:5d:e2:60:94:bb:82:f0:0e:a9:ee:4f:42:
8d:b0:68:2b:37:3a:e8:14:ff:24:d9:33:94:a2:3a:de:9a:aa:
e6:be:0a:f6:7c:11:ea:5a:80:5c:9b:02:85:6f:b8:47:38:8d:
27:46:d6:26:1b:61:a2:1b:de:b4:8e:24:50:90:08:5b:e1:e1:
74:0a:99:24:b3:2d:61:48:0c:69:63:11:73:96:80:82:15:c4:
ee:d2:a6:9f:96:4a:84:78:fc:87:f6:21:64:ff:6a:a0:c1:3d:
b7:c0:8f:88:c9:34:b7:d1:5f:52:12:82:92:46:4f:ce:72:79:
4f:9d:e5:0c:6e:cf:a6:72:d3:8b:69:c1:fc:4a:35:67:31:56:
8b:5f:28:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUyyYZ0S0G71vrLo4Q7BhdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZWU0N2QzMmE1OTkzNDFmNWZmMWE4OGJmMTQyZTE1Mzhk
YTQwZWEwHhcNMjYwOTI0MTkwMTE4WhcNMjYwOTI1MTkwMTE4WjAzMTEwLwYDVQQD
EygyODUyYjJiODc1NmJiOTE0NWMyOTI5YTJhMmQzN2JlMDcyMTk1ZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKUJsHeslfwEDASNRDcUsRs3r2l3
SZ+oq7Hd9/DXku/Bv+MIzX2QV7tqe5/3FxYdVu3PtlWoQwAkVUrqBt5kELVejs5F
QZbLhbmyWU+B2EkoF5lXsTUt/c1p+2vHJST0cr0htAc2QIbkTxV8GJPBxUzmfgpX
5UGjd+RLAvJBi2FNDoYYBVoSO29uAmz7VoZBcHWGGOi0LzBIJRTinQoMjZNERSDt
pvEXutTsmKg9bT+NFwVYWvq4/g5VMipAr4si0C6KOy4AR7Ic9xtYqzgaj4/Zdm2w
gjTMLuxR/3KxaJRWmkVveatK3cSmQY5KZeJXzKAdfJyEZH/564q0acHRnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChSsrh1a7kUXCkpoqLTe+ByGV+xMB8GA1UdIwQY
MBaAFFjuR9MqWZNB9f8aiL8ULhU42kDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hNDI2OTktMWQzZi00YTcwLTgzY2Ut
YzU2NGI0MGVjYTA1LzEvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9hNDI2OTktMWQzZi00YTcwLTgzY2UtYzU2NGI0MGVjYTA1
LzEvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgowYFl5K
RKm5u19eAsAaDWlMA774N7LhLP4NvgeBmOkOg3+jGXm40yTFWlr3cWMaaQ2GIYRm
vDZKJZGl6hiMw7We0/wErZz2MceOXjbldRC2TA10+1YjIfQ2Iuzho0T9pzmobw4Y
DWvInVLH+x1FuxthXeJglLuC8A6p7k9CjbBoKzc66BT/JNkzlKI63pqq5r4K9nwR
6lqAXJsChW+4RziNJ0bWJhthohvetI4kUJAIW+HhdAqZJLMtYUgMaWMRc5aAghXE
7tKmn5ZKhHj8h/YhZP9qoME9t8CPiMk0t9FfUhKCkkZPznJ5T53lDG7PpnLTi2nB
/Eo1ZzFWi18oPQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:19:35 2026 by rpki-client