Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
File: WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json)
Hash identifier: jkCv0g5RvN8Lzpaxl9Dhx0R/mj7+pThVBZToY4kETts=
Subject key identifier: 80:10:E4:79:53:4D:D4:39:09:BB:80:4D:9E:F5:94:C0:85:D5:69:4A
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial: 019E3072B89EEB1494C848C5C9ABEC2351A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
Manifest number: 166C
Signing time: Sat 16 May 2026 11:01:24 +0000
Manifest this update: Sat 16 May 2026 11:01:24 +0000
Manifest next update: Sun 17 May 2026 11:01:24 +0000
Files and hashes: 1: 01R0I9DHDPHcmxrcTn54aUYrxU4.roa (hash: LZW1SFZial6vNqkBHwqDupXnYLh58eQuRcWzvrTL1pI=)
2: 1RuzsOoiPTgqsuSzzAU9YdpD_xE.roa (hash: Fsh9osUtIPyPkM6syYXVCCskaMH4p0nvyx/Ce7UJowo=)
3: URu6RbbpNeggkq99HoBQq0K-CGw.roa (hash: SglHd7je2yZY5MNS1/0/uqc+KTjzW8LFZ4Gz7SHINKQ=)
4: UkVdKWIJtxN1ZPO561wg1yvlmnU.roa (hash: T1UGvaY+sPgOyfHIoNQmJTNfshFbXNmoAxXGY7h2ENY=)
5: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: jQPghLkcq4f+KSkMG+SiqOgw6+3gnxVBRkHleeEtHXc=)
6: bjhvb0BbgpYztttOjwclzlXFPK0.roa (hash: vvxA9AxL6k1mLc2qjx+t+3GOkd26vCFzAe2CCZNqNvw=)
7: jgH6u912rK5Xtxpxfif3Cfl9DZ4.roa (hash: t2SsP6gmWCBRP4SsEFRkLirUYBsfe7RvyzM3ohHxmzE=)
8: sj-ab-RcHql4I59TCTsyMkUD6vg.roa (hash: VE0oA0NLUA2NKVotc1jXBr68T3tf7XY/p7hOR23C2ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:b8:9e:eb:14:94:c8:48:c5:c9:ab:ec:23:51:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597a01de87e011803f890ae17749020f995f140c
Validity
Not Before: May 16 11:01:24 2026 GMT
Not After : May 17 11:01:24 2026 GMT
Subject: CN=8010e479534dd43909bb804d9ef594c085d5694a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:21:07:25:b7:90:93:f5:cb:59:47:07:56:e9:
3a:ce:de:06:de:00:34:cd:f0:64:7d:5d:87:18:23:
92:87:0c:97:1f:30:90:d8:f5:7a:ba:6e:12:82:53:
b4:d4:22:46:5f:66:e8:83:ee:21:64:55:3a:48:af:
72:47:84:7b:b5:eb:68:b6:01:3d:db:6d:0c:11:9a:
60:ef:a0:93:7c:52:4e:9e:ec:f1:13:10:bf:28:b4:
23:56:cb:b5:cd:9c:b1:3f:d1:de:03:c4:b7:74:21:
27:6d:a7:3b:d5:33:54:11:57:14:c7:86:1e:d7:58:
71:25:55:ea:fe:04:d8:41:5e:6c:69:6b:e8:a5:78:
01:0e:06:da:0b:b2:ef:6d:05:65:b1:33:74:f9:19:
e6:f4:ea:a4:90:09:6d:38:5f:84:92:98:ec:03:04:
78:67:c7:9f:33:41:cb:9e:26:12:fd:7d:db:81:97:
b1:a3:d2:d0:8f:5d:bd:41:4b:39:d2:ea:0f:60:71:
e1:1f:77:9d:69:1d:9f:24:5e:8c:9c:6e:e1:76:0e:
86:fc:9f:ea:2a:d9:93:80:dc:34:f7:e9:1c:bc:bb:
0f:eb:32:0d:83:69:49:34:6f:d9:6f:45:db:5d:c6:
28:bc:df:5b:62:84:bc:96:69:9b:3a:68:72:85:9c:
b9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:10:E4:79:53:4D:D4:39:09:BB:80:4D:9E:F5:94:C0:85:D5:69:4A
X509v3 Authority Key Identifier:
keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:dc:64:50:42:cd:09:d3:a5:5a:70:43:3e:12:12:53:e6:9a:
86:c3:65:ed:e8:96:e0:a5:ff:d1:71:a3:2d:a9:a5:53:fb:b1:
27:d8:88:f4:e0:13:90:ab:69:1f:c7:ed:38:bc:45:6d:1e:1b:
a5:fc:dc:57:b2:f2:e9:82:e6:f9:d0:50:04:55:c2:47:6b:79:
5e:fb:f5:4a:92:9d:23:31:3a:37:e5:89:78:f9:3c:37:f6:b1:
8b:ab:3c:6a:15:a5:f0:df:38:25:76:86:b0:c6:34:28:9c:ae:
6e:85:df:90:0f:5c:0c:9b:da:79:5a:db:bf:a0:3a:5b:2e:40:
52:fa:aa:dd:ea:14:1b:ac:c9:ba:9d:72:88:d7:ae:26:2b:1f:
3f:48:27:10:19:6d:8d:68:3b:6e:bb:47:3d:8c:02:ce:f5:19:
f5:11:50:67:b9:32:3c:0a:7d:57:44:f5:3c:2f:de:ee:57:a3:
9c:30:32:5a:c7:41:3e:b3:ab:fc:df:8a:46:b6:5b:6f:8f:a7:
4d:17:fe:c6:32:0e:d7:f2:a4:9d:c7:50:5c:da:cd:97:70:7a:
12:dc:a9:1c:09:a5:26:3d:9e:be:90:e9:f1:6f:81:d3:be:5c:
dc:e8:00:7c:51:05:37:93:82:cf:99:56:43:1b:93:95:b6:d3:
48:2c:c3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:31:13 2026 by rpki-client