Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
File: WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft (raw, json)
Hash identifier: s4zmsIuFZuzbsQq9VCtFSCZ//IGNGBRpF/oDs17UmQ8=
Subject key identifier: 76:11:A8:F6:A9:1C:93:EE:10:68:83:80:42:C5:1A:9F:43:0C:F4:1B
Authority key identifier: 58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
Certificate issuer: /CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Certificate serial: 019D284DF01E4BF2F0A97B587A3DBE35A72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 04:01:29 +0000
Manifest this update: Thu 26 Mar 2026 04:01:29 +0000
Manifest next update: Fri 27 Mar 2026 04:01:29 +0000
Files and hashes: 1: FJ7VQcAMIvc3LwUGZdJ2_y4tX64.roa (hash: KoQb0RIcqGQvJlXxJR+BM6e+6A6w3hgDW+4kbTJ92pM=)
2: WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl (hash: sM2QVk9h3ZYDo5SNeqRMtaKRKZFAfSsosQ+//VJM4QU=)
3: aPCbZqgtPV21c3ARjcz1UPj-qzE.roa (hash: QekkHkDa+9iEezFiFOvlr4BwgfAqsVczW7AoIwi4kRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:f0:1e:4b:f2:f0:a9:7b:58:7a:3d:be:35:a7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Validity
Not Before: Mar 26 04:01:29 2026 GMT
Not After : Mar 27 04:01:29 2026 GMT
Subject: CN=7611a8f6a91c93ee1068838042c51a9f430cf41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:de:02:b4:3d:39:35:04:b1:e7:05:db:e3:c9:
33:5c:86:59:c5:19:ac:eb:8a:b7:6b:b4:6c:71:71:
32:3b:89:a2:ec:13:18:f8:5f:8e:b1:62:f2:52:67:
da:46:15:01:00:6e:4b:96:7c:99:5c:99:02:7b:30:
62:42:c6:e4:b5:13:10:0f:d2:f7:21:86:d0:7b:2b:
2c:fc:3b:89:0d:6e:13:bd:47:4d:52:d6:5c:50:55:
ca:0f:dc:6f:52:13:6a:35:81:f6:41:de:52:03:eb:
26:c5:0c:d6:31:70:d8:8d:ef:6f:b3:ef:6c:1a:18:
82:b6:99:e5:b8:66:a9:0e:ed:71:68:9f:b1:69:98:
db:ed:0d:05:49:2a:9b:02:e5:59:55:18:88:89:20:
8b:6d:d2:08:5c:65:d1:b2:62:f9:26:96:0a:af:3b:
6a:f7:2f:9b:af:6a:6c:8f:93:a6:1d:ce:b7:b1:eb:
8e:7e:9b:cf:e2:28:74:71:09:a8:ea:63:90:54:90:
3d:42:1a:0e:17:72:37:dd:24:fc:45:25:c1:46:eb:
d0:5c:5c:7e:69:cf:fc:b5:ad:3e:c2:20:4c:73:4b:
c6:62:4c:6d:07:74:a0:f1:ee:65:c4:0a:9b:81:c4:
ed:36:6c:33:47:09:73:c2:09:20:b4:ef:de:b2:14:
4e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:11:A8:F6:A9:1C:93:EE:10:68:83:80:42:C5:1A:9F:43:0C:F4:1B
X509v3 Authority Key Identifier:
keyid:58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:af:f7:84:21:c0:7a:85:07:c1:9a:4e:c9:74:28:8d:c0:4d:
b1:03:ce:6d:43:50:36:0d:c5:03:be:e9:c9:4a:ce:f1:f2:58:
9b:c1:8f:c2:2a:e5:31:ce:af:2c:ec:bc:56:d0:f1:db:80:fe:
18:45:9e:d3:30:82:b8:65:19:71:77:35:b8:76:eb:1b:6c:f5:
50:95:f4:1a:28:58:b5:56:5f:f9:0a:92:31:eb:0f:d6:54:5a:
f8:4c:b3:e0:de:01:d4:6b:f8:d2:ff:7e:43:18:73:9e:06:52:
a6:b1:64:54:32:a2:fe:9e:bc:10:01:4b:d2:23:c1:bf:3e:3e:
97:d4:ed:4a:e3:cb:eb:0a:fc:3a:13:84:06:76:24:4c:30:f6:
71:be:3a:ec:c9:33:4d:78:13:0e:98:0f:a6:74:b3:2e:9d:e9:
db:9d:ab:ac:64:1a:49:e8:3b:d3:81:ee:b5:10:bd:ba:97:bb:
3c:fe:dc:85:49:20:16:97:55:18:8f:12:98:83:7c:21:4f:f5:
3f:8e:aa:0b:3e:55:4a:26:6d:2c:55:4d:9d:b5:f7:37:e8:ca:
ea:44:2d:38:b4:31:61:0a:b6:6d:fc:31:0c:3a:fc:c5:cb:de:
41:b5:f6:41:f9:b4:43:23:61:c0:40:2c:dd:d2:14:d9:50:67:
1b:9b:cb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:36:32 2026 by rpki-client