Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
File: WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json)
Hash identifier: Khs1M9SUitoyD8GPuCaSBxxvgXTg/EDR/rdAmXtG9GU=
Subject key identifier: EE:FD:DC:A3:43:8B:F3:40:2A:7B:58:9C:83:DE:C9:2C:F5:70:AE:F7
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 019CFB3E0021B4102238D76C89BB679D3DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
Manifest number: 1885
Signing time: Tue 17 Mar 2026 10:01:10 +0000
Manifest this update: Tue 17 Mar 2026 10:01:10 +0000
Manifest next update: Wed 18 Mar 2026 10:01:10 +0000
Files and hashes: 1: 0xxG8NnQ1cHH2VuMnnW7a6ZFxBw.roa (hash: puojFO3qYRQJELluaLinsh5BQElMER1Xu8VsxXk+YDI=)
2: 5zxdjqmR3SsJvomZFwYc7Q3lUMg.roa (hash: l4rfQGKBI8UyN9DydN8xFr2Dz594CopVwc6Dn7Had1A=)
3: D-_lyCJV9Sz2bTIt9fGq5z3Su_8.roa (hash: +XSDkotkiwpFYKYiGdXlu1uwl2+rO95QfzY33Skq8BM=)
4: Iy3e1XIi2_TPudoAL1p13sZ86nk.roa (hash: ZD8BYSZqLIml0OJHAuNttBG7W2t2LH3qpbqsZj2++g0=)
5: PDKKcfMfB9Z0mxlt4jm0kcW0fg4.roa (hash: pmHMhVXHouebACUdAsdhssIPiD4oTuxtJJ4bNyh7xWs=)
6: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: 824Wsf50bJKjBs7zJbcDi6ed1k0eY63q0QJDkYgu+pY=)
7: glPJKLzyEtOQ3A0VJ1WR_oikUIA.roa (hash: BJBEqU9Ndqs4BRPdMDfiUT/sHTP2TSMpS+6KJivs8n8=)
8: nEYDmOUwm7vPJUZ93qzJbw-7Glc.roa (hash: htajFRk/mfg74Vz00/Fc7mrofNklSksIG9I2mp6YdcQ=)
9: vfAXikjKgCjq74heQ_lW0h7lKZM.roa (hash: y9mC9ZC9KsL88BTXfe+44waOrp0v1g4TnmU21Hw3eNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:3e:00:21:b4:10:22:38:d7:6c:89:bb:67:9d:3d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Mar 17 10:01:10 2026 GMT
Not After : Mar 18 10:01:10 2026 GMT
Subject: CN=eefddca3438bf3402a7b589c83dec92cf570aef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e6:57:09:11:5a:e6:86:af:98:1c:82:cc:da:
f0:e8:e2:b0:34:bf:32:fc:bb:81:34:ae:b9:9d:85:
b6:99:88:3b:d1:bc:9d:bb:3e:96:92:40:b0:4a:2a:
ae:49:92:d9:ac:68:72:68:30:b6:d4:c8:eb:53:9c:
45:a1:29:9a:5e:6d:af:c4:bb:4b:94:58:1d:ad:c8:
57:4b:33:a8:a1:93:f8:45:95:b2:b8:bf:34:3b:7e:
ee:a9:78:92:f3:56:a3:bb:0e:3f:87:cd:a1:4e:1e:
51:68:64:90:88:d2:5f:a2:ab:0f:d0:b9:de:78:2a:
29:eb:46:3f:cf:65:a2:2e:74:cf:d4:d1:8c:e3:8e:
2e:e9:45:33:c8:da:16:0c:82:21:a3:9c:87:ca:03:
00:30:77:a9:1f:16:f7:18:75:92:b3:dd:b8:49:69:
e5:8d:98:81:5e:df:fe:36:02:c0:49:05:af:4b:52:
c3:44:71:86:3e:77:60:8d:c0:cd:0c:b6:a7:3e:f4:
d4:66:aa:40:8a:20:3f:ba:f1:36:aa:8f:c6:a0:fe:
fe:56:a0:b6:c7:54:cc:ef:53:60:52:32:c6:48:04:
b6:1b:b7:50:e0:0b:89:83:9f:61:5a:0c:c4:9a:94:
f9:c6:56:1a:fa:4d:78:56:48:38:b6:df:9f:89:ed:
ce:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FD:DC:A3:43:8B:F3:40:2A:7B:58:9C:83:DE:C9:2C:F5:70:AE:F7
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2a:d3:73:f3:ab:1d:65:c9:65:ab:97:4b:05:ee:a9:8c:81:
98:df:19:ba:5e:47:72:48:bc:d4:e8:5c:86:4e:a4:ca:58:c6:
b3:bb:db:93:b2:17:bb:8f:85:81:3e:72:fd:4d:ee:bf:6b:ee:
8e:42:32:94:ee:42:22:42:56:5e:ac:73:21:15:29:7b:64:91:
9a:2c:b0:d9:b2:97:0f:74:f0:70:c0:f0:0b:4b:bc:3f:e3:3d:
89:2d:03:bb:9a:8b:87:86:9d:33:05:28:51:18:28:7d:e2:73:
43:38:7b:5a:c7:a3:fa:b4:90:09:e8:8b:3e:b6:c3:ed:0a:d6:
fe:d4:02:f7:d4:06:19:3a:5e:6e:e6:89:56:b5:5d:94:8c:78:
cd:c3:11:59:11:c0:d6:1c:91:0a:c1:d1:e7:4a:e5:90:fa:34:
1b:1a:5f:67:0e:c1:f2:4b:d8:bc:49:dc:b4:02:6c:86:80:9d:
fe:9b:25:bf:b2:40:eb:69:46:b4:d6:08:33:ca:0e:d7:99:7e:
76:24:a8:e0:a7:11:af:d8:ae:31:13:6e:71:76:47:42:24:d8:
8a:73:29:fa:73:38:a6:cc:9b:d4:37:d7:f4:99:ed:33:e5:97:
85:8f:ab:b3:bd:2a:38:e6:0f:40:ec:6c:99:c4:15:62:20:e7:
9d:cb:d2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 12:36:35 2026 by rpki-client