
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
File: WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft (raw, json)
Hash identifier: AsMltWlUrjpFsDoL8zrmVfnPG4os7vYCVgQ5uxGlQ3E=
Subject key identifier: B0:3E:5B:CC:22:4C:97:E8:80:A6:1F:23:EE:1A:C3:26:B6:98:DD:D4
Authority key identifier: 58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
Certificate issuer: /CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Certificate serial: 019F9436D4FB40E91EEE65C3BDAFBB732517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 13:00:49 +0000
Manifest this update: Fri 24 Jul 2026 13:00:49 +0000
Manifest next update: Sat 25 Jul 2026 13:00:49 +0000
Files and hashes: 1: FJ7VQcAMIvc3LwUGZdJ2_y4tX64.roa (hash: KoQb0RIcqGQvJlXxJR+BM6e+6A6w3hgDW+4kbTJ92pM=)
2: WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl (hash: vbmbXX7b81SDuzLRdTFIPiDRI9vWdC51mHeFRL3pF68=)
3: aPCbZqgtPV21c3ARjcz1UPj-qzE.roa (hash: QekkHkDa+9iEezFiFOvlr4BwgfAqsVczW7AoIwi4kRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:d4:fb:40:e9:1e:ee:65:c3:bd:af:bb:73:25:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Validity
Not Before: Jul 24 13:00:49 2026 GMT
Not After : Jul 25 13:00:49 2026 GMT
Subject: CN=b03e5bcc224c97e880a61f23ee1ac326b698ddd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ab:72:c2:a1:ad:c8:f7:33:45:7c:d6:b0:1b:
c6:e3:60:9d:ef:bc:51:fd:5c:62:05:80:21:08:1b:
3e:63:08:b1:86:29:e6:20:d6:a0:b3:ed:52:5e:d3:
de:43:e9:1d:b2:f7:ae:55:83:6e:5d:59:83:93:2d:
a5:44:29:3c:46:b5:05:48:06:e5:69:09:b6:d7:37:
da:43:c9:39:76:16:5d:b8:fa:ec:4c:ac:e4:4d:d4:
28:7a:49:86:57:ff:ae:05:79:e4:5a:d0:45:64:8c:
7a:0c:c5:6d:05:4e:3b:62:42:71:39:f9:94:f4:8b:
21:12:6f:02:fa:21:ca:42:09:bf:0f:4b:ff:0c:ef:
9e:56:d6:4f:3e:28:5a:46:88:64:f3:90:29:ca:28:
6a:e9:bd:75:0d:8c:17:fb:13:b1:d3:a0:33:31:d6:
0e:d7:2b:7a:eb:a6:19:6f:94:67:7d:9d:69:d4:57:
89:7f:75:e7:eb:10:5e:b0:1e:4d:03:2f:d3:fa:d5:
8a:39:b5:35:fa:9d:e5:14:70:b5:dd:1c:26:12:de:
8d:b2:55:bf:09:2d:fd:0a:3e:05:62:29:8e:d3:da:
c5:d0:4c:be:25:18:2c:bc:43:b8:ea:44:5b:64:e1:
a0:ef:1f:81:81:72:db:31:92:61:1c:81:dd:c7:c8:
28:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3E:5B:CC:22:4C:97:E8:80:A6:1F:23:EE:1A:C3:26:B6:98:DD:D4
X509v3 Authority Key Identifier:
keyid:58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5e:8e:70:50:f3:ff:6e:a1:29:ad:6c:05:d7:ea:e6:ea:6f:
92:af:fa:3d:e1:1e:9e:63:94:85:43:26:ae:0b:e9:ba:79:1b:
40:cf:39:95:86:74:42:24:b2:39:ab:8c:62:3d:d6:b2:80:45:
81:00:a2:03:54:e5:5f:b6:c0:29:95:e2:b7:5b:e6:34:1a:b5:
fc:3b:db:f9:28:dc:07:a7:fc:65:6d:8a:a6:4c:99:42:f6:8b:
64:3f:f5:76:46:fe:a6:6e:e6:d2:f3:fa:30:ff:a1:98:0d:4d:
dd:f2:2b:58:da:5e:9e:e4:87:d7:27:84:cf:71:68:42:1f:60:
85:8f:2a:8d:97:57:fc:80:37:a2:a5:a3:90:a7:30:af:84:2d:
1d:6e:13:e8:7e:5b:6e:58:a4:06:84:ff:69:2b:55:cd:35:da:
7f:3c:64:ae:71:77:48:22:84:5a:41:71:55:79:cd:af:b1:9c:
0d:98:59:b3:81:58:d7:48:94:b2:36:6b:ef:9a:e2:66:8c:8a:
5b:ad:21:b0:b5:ba:b9:0e:1a:6a:bc:d6:e7:9c:2a:c9:c2:47:
dc:45:d2:d6:51:7d:11:9a:2c:0c:84:03:d8:9c:18:20:d6:55:
9c:13:9e:65:1b:ab:de:7f:37:0f:e4:94:b0:7a:02:1b:eb:67:
ce:3e:bd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:47 2026 by rpki-client