Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
File: WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json)
Hash identifier: x5r+aj93Oi1IXjUYcLfJA/xCwfBczMR8Mbk8AGHGLo0=
Subject key identifier: 09:AA:C7:4F:1B:AA:A3:31:1C:8E:8A:69:A6:03:CD:41:A5:0C:54:38
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial: 019D382E282F169319C17E2D2843E4D5F088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
Manifest number: 15EB
Signing time: Sun 29 Mar 2026 06:00:41 +0000
Manifest this update: Sun 29 Mar 2026 06:00:41 +0000
Manifest next update: Mon 30 Mar 2026 06:00:41 +0000
Files and hashes: 1: 01R0I9DHDPHcmxrcTn54aUYrxU4.roa (hash: LZW1SFZial6vNqkBHwqDupXnYLh58eQuRcWzvrTL1pI=)
2: 1RuzsOoiPTgqsuSzzAU9YdpD_xE.roa (hash: Fsh9osUtIPyPkM6syYXVCCskaMH4p0nvyx/Ce7UJowo=)
3: URu6RbbpNeggkq99HoBQq0K-CGw.roa (hash: SglHd7je2yZY5MNS1/0/uqc+KTjzW8LFZ4Gz7SHINKQ=)
4: UkVdKWIJtxN1ZPO561wg1yvlmnU.roa (hash: T1UGvaY+sPgOyfHIoNQmJTNfshFbXNmoAxXGY7h2ENY=)
5: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: gzm8iHH/A7sbD6mJBZdppRazHvPk9haKptPC8JW9Nj0=)
6: bjhvb0BbgpYztttOjwclzlXFPK0.roa (hash: vvxA9AxL6k1mLc2qjx+t+3GOkd26vCFzAe2CCZNqNvw=)
7: sj-ab-RcHql4I59TCTsyMkUD6vg.roa (hash: VE0oA0NLUA2NKVotc1jXBr68T3tf7XY/p7hOR23C2ks=)
8: uNBCqgPm9OGK31TBmTo_MAC1yZU.roa (hash: QNpQXcsFAXHCdiWuXRp1NnyNLbpNgci4N8tXC8HHacM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:28:2f:16:93:19:c1:7e:2d:28:43:e4:d5:f0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597a01de87e011803f890ae17749020f995f140c
Validity
Not Before: Mar 29 06:00:41 2026 GMT
Not After : Mar 30 06:00:41 2026 GMT
Subject: CN=09aac74f1baaa3311c8e8a69a603cd41a50c5438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:74:13:4b:6d:b4:6a:31:58:40:61:2f:1d:77:
f9:4b:45:cb:b3:0d:83:3f:e8:5f:3c:78:8a:80:5a:
06:0c:ae:04:cc:a7:22:8e:21:64:8e:fb:06:92:c4:
74:65:49:fc:7d:04:7f:4b:c2:f0:5a:eb:7f:42:eb:
45:80:e1:59:f4:02:da:67:6e:56:80:1e:5e:99:bf:
cc:c8:bb:2b:f9:c4:0e:64:db:3b:c2:3f:85:24:2f:
e3:ba:b0:8e:8d:28:ad:f3:00:3d:02:ef:3f:f3:a1:
c1:06:82:15:b2:cc:ce:05:23:af:25:df:e2:92:98:
1a:a3:b6:9c:b5:71:df:f7:b4:0b:46:a5:b3:4c:3f:
aa:e2:8a:68:c3:11:23:af:b2:a5:64:7e:0f:7c:c6:
4f:28:0e:27:66:63:a9:3d:a7:bc:cb:22:05:83:a6:
f2:14:88:45:ac:66:a2:d8:e5:f6:4e:3d:41:f3:a7:
22:f3:42:1c:3f:29:e5:99:ff:3c:63:6d:2e:71:99:
ce:f0:e9:e0:38:1e:4e:7a:53:e4:33:f3:1f:e2:88:
50:31:33:41:2a:57:3e:11:19:f7:3a:cc:e9:f3:d5:
76:79:0a:8f:20:e8:67:10:44:d6:e1:b0:67:eb:39:
1b:6d:b0:ca:f9:1f:36:a6:1f:8d:57:57:0a:97:88:
0e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AA:C7:4F:1B:AA:A3:31:1C:8E:8A:69:A6:03:CD:41:A5:0C:54:38
X509v3 Authority Key Identifier:
keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ee:5d:df:50:1a:99:b0:7a:f5:10:e6:d8:68:8c:86:18:cc:
b9:29:e9:01:0a:ec:84:85:fe:de:30:4a:fc:a9:5d:70:dc:b6:
38:88:4d:d6:b0:88:78:5b:3a:16:df:c3:e1:11:ed:fa:ae:37:
56:f6:20:50:e0:a4:74:78:2a:00:f7:6f:bc:2d:90:aa:d7:2c:
ac:a5:b9:27:a3:6f:37:b7:23:8b:59:dd:b0:76:ac:eb:94:cd:
41:da:bc:63:a3:2b:3e:6a:ea:51:52:07:91:6d:c5:7b:62:f2:
a2:9c:f9:2c:59:57:48:2c:e9:0c:15:e6:81:d4:67:13:76:ce:
19:0e:72:40:b8:97:d6:b1:5a:12:b4:97:bf:1e:cf:fe:af:41:
1e:e3:c6:ff:ff:8c:52:ee:0e:c5:2b:05:65:e0:a6:33:15:0c:
56:62:4b:b0:90:57:cd:69:c9:42:0e:b3:d7:8f:54:87:ca:01:
9c:7a:94:fc:3e:3a:c2:74:78:91:56:52:e5:a1:08:a3:4e:21:
37:d7:23:15:fd:b0:88:e1:c1:6e:09:4b:ed:05:ea:0a:4a:d0:
a9:bf:c7:27:c9:30:9d:24:c4:9c:d3:2f:ed:69:6e:30:e5:a1:
0b:fd:9d:17:2f:ae:66:a2:b9:6b:d6:cf:77:00:8b:06:bf:4d:
ef:bf:e4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:23 2026 by rpki-client