Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
File: WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json)
Hash identifier: UQeKqcCnsPSNy3PKQYJRoxv9tvGiL8RWcIpxcP4gHRI=
Subject key identifier: 4D:D8:D5:56:3E:02:06:3E:20:83:6F:7B:46:56:C7:5D:DC:9C:29:CF
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 019EDC5302906E829D52977490C94F6FDFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
Manifest number: 1982
Signing time: Thu 18 Jun 2026 20:01:28 +0000
Manifest this update: Thu 18 Jun 2026 20:01:28 +0000
Manifest next update: Fri 19 Jun 2026 20:01:28 +0000
Files and hashes: 1: 0xxG8NnQ1cHH2VuMnnW7a6ZFxBw.roa (hash: puojFO3qYRQJELluaLinsh5BQElMER1Xu8VsxXk+YDI=)
2: 33oWgdjK_YQ5RE1HBLu9w5DuUys.roa (hash: YFfSyIkQ8r5EeIE2nKtHSYGUbZnDPhnEtmdTQuVMLZA=)
3: 5zxdjqmR3SsJvomZFwYc7Q3lUMg.roa (hash: l4rfQGKBI8UyN9DydN8xFr2Dz594CopVwc6Dn7Had1A=)
4: D-_lyCJV9Sz2bTIt9fGq5z3Su_8.roa (hash: +XSDkotkiwpFYKYiGdXlu1uwl2+rO95QfzY33Skq8BM=)
5: Iy3e1XIi2_TPudoAL1p13sZ86nk.roa (hash: ZD8BYSZqLIml0OJHAuNttBG7W2t2LH3qpbqsZj2++g0=)
6: WC3FelzMT51Jd0FzDfTcBvQbz0c.roa (hash: vMkqwwuueWTkKVbMn75esnOuu/9njTR5uN3u1wI+lvs=)
7: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: OWbhJ7dtdABI/Tc9bYkTWX840iO0eBGUCFzNloEdkKQ=)
8: mbEhJhu8tsAzWhHE4rl5peqQOF8.roa (hash: Nn+Cgu7LOR6nMODgKh9QXXY7i8XiOMkzfzJkJHtgkLg=)
9: nEYDmOUwm7vPJUZ93qzJbw-7Glc.roa (hash: htajFRk/mfg74Vz00/Fc7mrofNklSksIG9I2mp6YdcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 15:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dc:53:02:90:6e:82:9d:52:97:74:90:c9:4f:6f:df:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Jun 18 20:01:28 2026 GMT
Not After : Jun 19 20:01:28 2026 GMT
Subject: CN=4dd8d5563e02063e20836f7b4656c75ddc9c29cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0a:cb:e8:5d:d6:39:b6:19:c0:3c:00:3d:b9:
82:b4:04:bb:75:60:8e:f2:ee:61:62:b2:cd:54:77:
a4:38:ba:ce:f7:dc:d1:cf:1d:2f:3f:c4:04:bc:f0:
a3:57:b5:0d:ba:96:bc:a6:2f:41:b6:64:a4:97:3d:
e2:b7:9a:04:cd:ff:39:6c:b1:c1:f4:1a:01:a1:9b:
68:17:2a:74:be:a8:81:a0:e8:65:5b:da:0f:8e:63:
7f:80:79:62:a6:79:59:ad:64:e2:ef:be:cd:8f:a2:
a7:e7:5f:1e:4a:1d:30:25:b6:d5:16:97:02:de:9b:
ae:29:f8:12:4e:a5:9e:8d:7e:0b:88:65:eb:d3:8f:
b0:f5:4f:8f:2c:cf:94:28:ed:67:4c:7a:37:45:69:
f6:30:d0:5e:a7:ab:aa:b4:2c:7a:42:ef:d5:5b:e7:
7f:e7:9a:33:b1:3c:2e:c4:d2:df:8c:dc:b0:5e:2c:
24:88:cc:62:ed:5d:ca:ce:73:77:5b:34:86:1d:a6:
62:8b:21:ee:56:62:b7:ff:75:9c:d4:f0:4b:d8:88:
b8:0e:b4:c2:b9:06:cb:53:0e:7d:4f:44:20:a0:21:
3b:86:5f:fb:6e:41:8c:43:99:bc:38:d4:d5:70:99:
4a:76:40:9b:cc:90:a8:e8:3d:f7:2b:04:37:dd:ea:
63:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D8:D5:56:3E:02:06:3E:20:83:6F:7B:46:56:C7:5D:DC:9C:29:CF
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:64:3d:c6:f0:45:d6:2c:12:e1:d4:d6:e7:de:6c:02:a2:27:
82:32:e1:cd:f5:91:c4:03:6b:bc:03:41:89:37:2b:b8:52:b5:
81:fa:12:42:35:73:5f:b4:06:f9:58:6f:c3:82:1b:4c:66:16:
3f:d8:62:bc:63:66:15:0e:48:4f:34:c1:a9:de:09:54:8c:f5:
53:38:c4:bf:3d:e7:ab:2d:a3:ab:41:c9:6a:ae:77:66:9b:2e:
d4:db:b7:77:c8:0a:b8:ee:5d:52:11:79:bf:26:05:08:fd:58:
2b:97:ad:d8:9d:eb:bf:2f:32:97:52:c7:de:6a:a8:3d:8e:1d:
a7:50:57:d2:ce:76:73:d1:f9:4c:dd:4e:1f:04:32:06:09:50:
8e:36:73:fe:c1:93:2d:70:2a:43:3f:2b:4b:f9:f5:9b:f5:2c:
0e:68:00:5a:3f:d8:53:cc:9b:94:14:0e:dd:03:6f:8b:d3:08:
98:f6:64:17:07:04:c5:22:24:02:44:7b:ad:2c:9d:ce:0f:7f:
a1:22:69:71:3f:64:23:4c:a8:ad:9e:32:69:54:a0:f8:43:ad:
77:8b:fa:1c:55:08:64:ee:30:9c:98:ac:10:66:20:30:85:5f:
8f:b7:6a:da:dc:4f:83:2b:c6:3a:2a:53:7e:f5:4d:1a:10:73:
8b:71:8f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 23:21:13 2026 by rpki-client