Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
File: WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json)
Hash identifier: v+cSXD3M0TX/o/N/P3FexeosYGE7ZuxU5h5j0Ot0nJ8=
Subject key identifier: 47:41:58:C1:35:64:A8:DB:19:C7:9F:8C:41:66:BB:76:A0:BB:81:B0
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 019DEA10FF3136FDA4FC8BA641A9BD288BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
Manifest number: 1901
Signing time: Sat 02 May 2026 19:01:15 +0000
Manifest this update: Sat 02 May 2026 19:01:15 +0000
Manifest next update: Sun 03 May 2026 19:01:15 +0000
Files and hashes: 1: 0xxG8NnQ1cHH2VuMnnW7a6ZFxBw.roa (hash: puojFO3qYRQJELluaLinsh5BQElMER1Xu8VsxXk+YDI=)
2: 5zxdjqmR3SsJvomZFwYc7Q3lUMg.roa (hash: l4rfQGKBI8UyN9DydN8xFr2Dz594CopVwc6Dn7Had1A=)
3: D-_lyCJV9Sz2bTIt9fGq5z3Su_8.roa (hash: +XSDkotkiwpFYKYiGdXlu1uwl2+rO95QfzY33Skq8BM=)
4: Iy3e1XIi2_TPudoAL1p13sZ86nk.roa (hash: ZD8BYSZqLIml0OJHAuNttBG7W2t2LH3qpbqsZj2++g0=)
5: PDKKcfMfB9Z0mxlt4jm0kcW0fg4.roa (hash: pmHMhVXHouebACUdAsdhssIPiD4oTuxtJJ4bNyh7xWs=)
6: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: i6E4ubMbKr0ASbB4CurWdJENd4Ea24BRE9DJSfLxRIk=)
7: mbEhJhu8tsAzWhHE4rl5peqQOF8.roa (hash: Nn+Cgu7LOR6nMODgKh9QXXY7i8XiOMkzfzJkJHtgkLg=)
8: nEYDmOUwm7vPJUZ93qzJbw-7Glc.roa (hash: htajFRk/mfg74Vz00/Fc7mrofNklSksIG9I2mp6YdcQ=)
9: vfAXikjKgCjq74heQ_lW0h7lKZM.roa (hash: y9mC9ZC9KsL88BTXfe+44waOrp0v1g4TnmU21Hw3eNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 03 May 2026 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ea:10:ff:31:36:fd:a4:fc:8b:a6:41:a9:bd:28:8b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: May 2 19:01:15 2026 GMT
Not After : May 3 19:01:15 2026 GMT
Subject: CN=474158c13564a8db19c79f8c4166bb76a0bb81b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:51:af:ca:fd:67:87:5d:07:61:f8:b9:01:8c:
b9:60:4d:70:a0:14:a2:16:0e:87:2f:26:c5:40:3f:
b6:33:52:60:9b:1f:e5:04:7a:1e:b1:8c:04:f1:31:
e4:cc:8a:f8:76:12:95:7b:90:17:69:47:2a:6f:92:
62:f0:85:0b:b9:bc:dd:0d:96:8d:8e:22:15:08:68:
15:43:f0:b2:6e:11:e3:f2:fb:f8:0c:63:f7:0f:5f:
bd:cc:47:95:eb:65:05:e7:3d:e2:15:b0:27:da:b0:
40:8d:d1:37:29:b8:10:55:82:f5:4c:58:f5:b7:c0:
d1:d3:eb:31:bc:67:e8:11:41:cf:94:15:66:cd:66:
1c:08:65:87:b0:05:62:ce:11:b3:b4:a2:4b:f1:8a:
fb:45:f1:6c:ff:a9:e0:70:e4:df:28:9e:35:30:b0:
38:2e:6d:0f:96:3e:2b:8d:01:c1:e0:b9:d6:08:b2:
c7:d7:ed:47:27:bf:87:ce:c4:10:41:f6:b7:0b:05:
8e:0b:db:fe:2c:90:7c:50:67:b6:07:1d:9e:31:b1:
df:16:02:05:9a:9d:63:95:38:70:00:10:9b:6b:89:
cd:55:0e:cf:18:ec:05:cd:13:26:76:4f:78:26:4e:
3a:fa:d8:19:44:6f:83:fa:c2:16:09:89:f0:b3:c9:
d7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:41:58:C1:35:64:A8:DB:19:C7:9F:8C:41:66:BB:76:A0:BB:81:B0
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3f:ef:a5:e4:33:9c:2c:6c:3a:96:40:af:6a:12:e3:c1:e4:
dc:d4:6c:67:3f:f8:c7:25:b6:74:b8:88:e5:ac:59:39:09:85:
ef:36:72:6d:a7:b1:be:80:33:fd:2a:4b:ba:e7:b2:9f:61:e1:
ae:d6:29:d0:03:4f:39:b7:63:1c:af:b8:3e:dd:c6:25:f9:2a:
a6:68:d7:9c:49:fa:33:62:bc:db:f0:45:47:d0:cb:d9:67:79:
fe:a9:21:12:45:1e:af:ef:35:86:e0:0a:61:ad:76:e3:a5:d1:
54:b6:69:c6:52:1e:9b:b2:ce:b1:09:b7:db:c3:2d:2d:39:6c:
17:7a:a6:ff:d7:39:30:f9:83:6e:50:47:ab:3c:d4:ae:63:fc:
c1:bd:3d:5d:29:7b:2c:ac:61:70:08:a8:ea:5a:c4:85:4c:d5:
75:ec:61:10:e8:0c:bb:bf:eb:57:65:7c:3e:2b:59:79:52:58:
29:3f:63:fa:78:ce:c3:e4:cc:02:ef:ec:ec:df:d1:73:9b:7a:
f0:83:d4:0b:4e:11:f8:60:ff:b6:10:72:d8:d0:3a:4a:ce:00:
b9:61:f9:7b:29:5f:e7:c4:ae:d9:54:00:c6:67:ef:f7:e7:3f:
42:0b:b1:e3:cd:cf:4c:68:b7:40:27:38:b4:9f:f8:03:bf:b2:
45:12:02:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 23:52:12 2026 by rpki-client