Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json)
Hash identifier: w7p2rVdsBsiC5fUi+R5iEYLgRhGof+kShdnTVeQduVE=
Subject key identifier: 08:57:9A:91:A1:FA:E6:17:E1:5D:68:CB:33:18:08:47:75:F3:28:BB
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 019F859F3A5460D0D0F3481CD40055BA2283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
Manifest number: 1791
Signing time: Tue 21 Jul 2026 17:00:32 +0000
Manifest this update: Tue 21 Jul 2026 17:00:32 +0000
Manifest next update: Wed 22 Jul 2026 17:00:32 +0000
Files and hashes: 1: 0NoPiisJbpwmvBUWEe2px9KfACQ.roa (hash: fADYU9aKvqcndQu+aoL/npU6GSJIZV+Rd4qVL1uAf08=)
2: GCkGsS1uz9XBVQQhijBaSLbxwTE.roa (hash: 0L/zbSf1D/vPMlQYoADMvJgS8Ov/BldeGq2klZOZFUA=)
3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: +8gyu5FoRiQS0EjSRXW51plY4gyEFN0U4NYgm5umeZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:3a:54:60:d0:d0:f3:48:1c:d4:00:55:ba:22:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Jul 21 17:00:32 2026 GMT
Not After : Jul 22 17:00:32 2026 GMT
Subject: CN=08579a91a1fae617e15d68cb3318084775f328bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ef:ea:28:ea:be:49:30:fa:38:22:b2:46:4d:
d7:44:60:89:81:2b:cc:29:2c:7a:00:9d:de:4d:d2:
c5:25:92:4b:ea:d1:83:62:ba:19:f7:8a:d0:81:ab:
2c:19:a7:29:37:5a:34:44:53:81:c5:7b:4e:e6:27:
18:7c:60:dc:27:c4:97:99:30:cb:96:d3:39:83:04:
7a:48:12:32:3a:f9:e1:3c:75:d3:a8:27:3e:8f:6f:
67:7e:07:ae:6f:b0:08:f5:8c:4c:78:fe:3c:d7:d4:
20:b3:9d:01:ab:ee:a3:40:15:f5:28:fb:38:9b:95:
2b:88:fa:d3:ce:db:43:08:66:f9:e2:42:2f:d7:94:
96:13:11:ad:bd:3f:23:f0:b4:2e:61:60:e3:0c:ef:
29:41:be:da:52:8e:d5:c4:88:5b:c5:8f:18:33:3a:
9f:cf:c0:29:5a:73:33:a0:3d:09:55:1d:29:b1:40:
aa:19:4c:24:8b:7f:ac:fc:37:80:ae:83:31:9c:12:
e7:22:1a:0e:51:f3:57:d2:26:45:a0:3a:f1:08:44:
00:de:c8:2c:73:29:dd:ae:fd:41:ec:46:8f:d2:12:
7a:ec:78:9e:3f:54:af:ec:fc:63:6a:f6:0b:df:57:
28:88:fc:af:9b:d5:80:4a:89:8e:3f:e8:5b:83:50:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:57:9A:91:A1:FA:E6:17:E1:5D:68:CB:33:18:08:47:75:F3:28:BB
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3d:73:f1:fc:5c:8b:ac:11:1c:b9:b0:44:cd:55:30:04:ed:
40:99:6b:c8:ae:46:34:57:c8:c1:f8:3a:36:d7:58:f7:d8:c0:
64:e3:56:21:36:46:7e:c1:cb:63:e8:55:ce:8d:e7:7a:7f:66:
53:89:c2:d1:c4:16:8a:06:63:77:95:17:15:8c:ec:b7:18:88:
35:e3:3c:73:ac:71:ad:8c:66:ae:6f:02:e3:99:59:f3:ff:f0:
cc:d0:82:05:8e:1d:77:31:51:f8:01:29:1d:1f:ac:ce:24:ab:
b5:8c:3d:52:e6:49:0c:c3:10:09:73:4a:4e:a7:6a:bf:af:72:
11:77:6f:69:f8:2d:2d:46:cb:87:f2:f2:ee:18:e9:a6:52:70:
ef:11:b6:8e:e5:b4:c1:27:55:2f:6f:c5:24:39:8e:71:79:6d:
ba:fa:0d:fb:59:eb:dc:fc:8e:47:08:6a:32:87:a5:da:7a:f1:
c4:50:81:b4:15:57:40:2f:c6:3c:79:ce:72:d4:45:c6:17:7c:
f8:b5:38:bc:6b:14:32:79:db:a9:ab:11:d5:d5:78:be:cf:1c:
ab:69:4d:6c:d3:63:e9:a1:38:d3:83:3d:f5:f5:e1:ca:8f:d8:
26:a1:94:cb:d1:c7:e4:c6:49:e8:88:69:a8:f0:36:1d:f3:dd:
78:b2:70:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+FnzpUYNDQ80gc1ABVuiKDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NzQ4NzQ3MmQzN2NiZDcyNjE4MWY5ZjNhMjAzODZmMDM5
YjNiYTgwHhcNMjYwNzIxMTcwMDMyWhcNMjYwNzIyMTcwMDMyWjAzMTEwLwYDVQQD
EygwODU3OWE5MWExZmFlNjE3ZTE1ZDY4Y2IzMzE4MDg0Nzc1ZjMyOGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+/qKOq+STD6OCKyRk3XRGCJgSvM
KSx6AJ3eTdLFJZJL6tGDYroZ94rQgassGacpN1o0RFOBxXtO5icYfGDcJ8SXmTDL
ltM5gwR6SBIyOvnhPHXTqCc+j29nfgeub7AI9YxMeP4819Qgs50Bq+6jQBX1KPs4
m5UriPrTzttDCGb54kIv15SWExGtvT8j8LQuYWDjDO8pQb7aUo7VxIhbxY8YMzqf
z8ApWnMzoD0JVR0psUCqGUwki3+s/DeAroMxnBLnIhoOUfNX0iZFoDrxCEQA3sgs
cyndrv1B7EaP0hJ67HieP1Sv7PxjavYL31coiPyvm9WASomOP+hbg1C6TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhXmpGh+uYX4V1oyzMYCEd18yi7MB8GA1UdIwQY
MBaAFFl0h0ctN8vXJhgfnzogOG8DmzuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lYTI3ZjMtZGI3NC00OTYzLWExOGMt
MDM1MjgxMjg5YmIwLzEvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9lYTI3ZjMtZGI3NC00OTYzLWExOGMtMDM1MjgxMjg5YmIw
LzEvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnj1z8fxc
i6wRHLmwRM1VMATtQJlryK5GNFfIwfg6NtdY99jAZONWITZGfsHLY+hVzo3nen9m
U4nC0cQWigZjd5UXFYzstxiINeM8c6xxrYxmrm8C45lZ8//wzNCCBY4ddzFR+AEp
HR+sziSrtYw9UuZJDMMQCXNKTqdqv69yEXdvafgtLUbLh/Ly7hjpplJw7xG2juW0
wSdVL2/FJDmOcXltuvoN+1nr3PyORwhqMoel2nrxxFCBtBVXQC/GPHnOctRFxhd8
+LU4vGsUMnnbqasR1dV4vs8cq2lNbNNj6aE404M99fXhyo/YJqGUy9HH5MZJ6Ihp
qPA2HfPdeLJw0Q==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:50:56 2026 by rpki-client