Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
File: WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json)
Hash identifier: bLuAMAgDBrHz/uU2ss1Ol4oqUL1xwQE4/N2f9XSIyJM=
Subject key identifier: 9A:83:52:9E:C6:A5:19:4B:4B:45:6A:18:71:6B:9B:B3:A3:FD:0C:62
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial: 01A10D024F232537C637F166FBE5F8B6E337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
Manifest number: 17EB
Signing time: Mon 05 Oct 2026 17:00:17 +0000
Manifest this update: Mon 05 Oct 2026 17:00:17 +0000
Manifest next update: Tue 06 Oct 2026 17:00:17 +0000
Files and hashes: 1: 1RuzsOoiPTgqsuSzzAU9YdpD_xE.roa (hash: Fsh9osUtIPyPkM6syYXVCCskaMH4p0nvyx/Ce7UJowo=)
2: FuFk1abxIFK2Ejav-XvLTSDuMQw.roa (hash: 0xnqZLkHCC49vVlWKGLKg1BEJ0gcvfzLoWavQfMGkDg=)
3: URu6RbbpNeggkq99HoBQq0K-CGw.roa (hash: SglHd7je2yZY5MNS1/0/uqc+KTjzW8LFZ4Gz7SHINKQ=)
4: UkVdKWIJtxN1ZPO561wg1yvlmnU.roa (hash: T1UGvaY+sPgOyfHIoNQmJTNfshFbXNmoAxXGY7h2ENY=)
5: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: Yl5xE58xVGP22PrNwRxr2G3GufMa7RpXD8Dj1N16cXw=)
6: bjhvb0BbgpYztttOjwclzlXFPK0.roa (hash: vvxA9AxL6k1mLc2qjx+t+3GOkd26vCFzAe2CCZNqNvw=)
7: eoiSFeFECKtcnFf4YtHRnwCPW10.roa (hash: IbPy1Qz2w58diZKLRaNbFHOydlFSH5+9VYYyTRLP2cA=)
8: jgH6u912rK5Xtxpxfif3Cfl9DZ4.roa (hash: t2SsP6gmWCBRP4SsEFRkLirUYBsfe7RvyzM3ohHxmzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:02:4f:23:25:37:c6:37:f1:66:fb:e5:f8:b6:e3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597a01de87e011803f890ae17749020f995f140c
Validity
Not Before: Oct 5 17:00:17 2026 GMT
Not After : Oct 6 17:00:17 2026 GMT
Subject: CN=9a83529ec6a5194b4b456a18716b9bb3a3fd0c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:2b:82:52:d9:8d:65:2c:9a:2f:7c:8f:bc:
17:66:b2:20:aa:bb:d4:3b:48:86:98:aa:79:20:0f:
4d:7e:31:e3:30:51:d5:25:85:33:f7:d0:ae:36:c8:
17:10:13:4f:58:1f:27:00:01:0d:9a:66:b9:37:0d:
54:64:1f:06:0f:d8:f0:fd:1a:7d:cf:0f:09:99:7e:
65:5a:f5:97:5d:eb:e2:bc:28:c5:2d:42:06:18:e8:
6f:47:a9:42:37:19:9c:c9:e9:66:a9:e5:fc:09:91:
39:c5:e5:36:a8:a2:b4:2e:43:9d:e8:8b:6e:0e:e2:
3c:2e:19:a5:a6:1d:ee:8b:82:b9:10:65:de:89:65:
93:65:8d:b4:fd:5f:fe:fb:b4:8c:82:6f:c7:9c:bb:
fe:b9:8c:6a:a0:d5:6c:ed:51:60:e3:52:46:f9:55:
c0:d9:a7:92:98:0a:7b:36:d7:43:4c:8d:78:10:22:
93:ad:81:98:39:5c:59:73:96:30:d9:c8:8f:f7:23:
a5:c6:34:00:d5:aa:9c:0a:a0:bd:98:5e:5c:50:2c:
19:09:35:55:18:2e:66:2c:ff:f4:50:79:dc:de:9a:
b1:02:46:47:03:bd:b6:38:1a:af:19:26:e7:bb:c2:
b8:f4:d6:cd:e7:16:78:ac:a3:ba:a1:e3:f5:34:23:
65:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:83:52:9E:C6:A5:19:4B:4B:45:6A:18:71:6B:9B:B3:A3:FD:0C:62
X509v3 Authority Key Identifier:
keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:9a:87:67:46:d1:7f:59:bf:f3:83:43:6b:cc:56:2b:05:23:
60:5f:40:5a:47:0b:f9:b7:0d:93:19:9f:dc:32:e4:e8:56:9a:
6c:b4:31:5f:72:a7:b1:2d:67:67:4c:f8:87:ef:ac:f8:0d:66:
ff:5e:04:dc:7e:0c:de:1a:9b:33:ef:c4:19:5b:81:31:ea:58:
df:0f:93:32:cc:29:61:99:c9:df:6e:c9:31:a9:b0:a0:bd:80:
2a:02:e5:70:7a:72:6d:e3:6f:ca:0d:0d:96:fc:f0:3f:d7:dc:
80:78:16:32:96:6f:9f:f3:6d:26:8c:6f:91:37:53:c2:39:a3:
50:09:b5:89:0c:da:11:73:0c:6a:4a:16:46:8d:cd:fb:70:fe:
42:da:ed:89:65:db:53:45:73:b1:00:95:db:e7:ed:6b:b6:c3:
b8:73:6c:00:43:60:e2:a1:38:95:0f:40:d1:24:2f:77:e2:ee:
ee:b3:7b:8a:7d:35:9c:50:a0:51:7e:90:59:17:3e:68:cc:12:
aa:28:d3:1d:05:86:37:4e:42:e7:6a:9c:60:26:6d:74:76:28:
16:f3:81:c0:9b:cf:3d:ff:c0:84:da:f2:d7:36:8f:ce:5b:4d:
99:98:56:7c:af:52:e4:f0:be:2b:96:cd:4e:3f:45:53:21:6d:
a1:bf:eb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 23:11:15 2026 by rpki-client