Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json)
Hash identifier: Zbcfjgl2B04trUoBOR+TF0ubAvHH4xropxtfwLOSouY=
Subject key identifier: 4D:7E:EB:AF:E7:F0:2A:43:17:3D:E2:80:41:B1:58:F6:24:E5:3E:75
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 01A06D5D92E2FC3FB1877A34D0B944F236A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
Manifest number: 1809
Signing time: Fri 04 Sep 2026 17:00:43 +0000
Manifest this update: Fri 04 Sep 2026 17:00:43 +0000
Manifest next update: Sat 05 Sep 2026 17:00:43 +0000
Files and hashes: 1: 0NoPiisJbpwmvBUWEe2px9KfACQ.roa (hash: fADYU9aKvqcndQu+aoL/npU6GSJIZV+Rd4qVL1uAf08=)
2: GCkGsS1uz9XBVQQhijBaSLbxwTE.roa (hash: 0L/zbSf1D/vPMlQYoADMvJgS8Ov/BldeGq2klZOZFUA=)
3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: zfWBgboWFgtJRa7rYxRmPeyD6XoIM5DwJnUPcXtuY20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5d:92:e2:fc:3f:b1:87:7a:34:d0:b9:44:f2:36:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Sep 4 17:00:43 2026 GMT
Not After : Sep 5 17:00:43 2026 GMT
Subject: CN=4d7eebafe7f02a43173de28041b158f624e53e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:04:ab:cd:1b:bf:5d:d6:99:a2:dd:01:5b:63:
76:c8:38:f6:a8:db:7d:fc:09:61:b0:65:77:e2:1d:
5c:7c:56:79:41:d4:0d:3d:5c:98:6f:53:ef:db:7d:
bc:aa:5b:55:f4:e3:2a:03:f1:e3:c9:cc:e6:7a:b0:
e3:05:dc:f1:c4:99:b5:9c:8d:60:23:de:a7:ff:cf:
77:0d:64:02:63:d0:5c:3f:f0:5d:f9:ac:28:ed:69:
e5:a9:4f:c3:68:60:7d:ea:e7:f2:98:7d:92:3e:eb:
50:0c:64:ae:0a:57:15:54:33:96:c7:a0:a4:11:28:
b3:37:e1:90:32:56:4f:2a:01:ae:07:6f:23:40:fb:
9c:bd:cb:65:ba:ff:b4:5a:4d:9c:ad:d3:63:93:b7:
54:70:db:db:73:35:42:ed:43:13:d7:91:f4:31:ba:
07:ac:4a:b6:89:ba:03:70:0d:6e:ad:48:22:2e:04:
d4:14:28:6e:97:cf:60:32:f3:aa:42:d6:fb:60:11:
2d:0d:7f:3b:e1:b4:08:d3:06:9e:69:f3:de:fb:17:
8f:61:a4:5f:7f:d5:74:4f:78:cc:6a:68:e4:df:1a:
f6:55:fc:7e:6c:2e:eb:f1:42:13:3f:98:40:97:33:
08:e6:43:5d:f3:f6:43:c0:5d:39:6c:73:01:7c:67:
6f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7E:EB:AF:E7:F0:2A:43:17:3D:E2:80:41:B1:58:F6:24:E5:3E:75
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c1:0b:c1:45:f4:ab:ee:69:9a:45:2f:24:7a:ad:af:f8:05:
66:d2:34:6b:d9:91:ad:9c:39:5d:1a:43:7e:3a:aa:e2:af:18:
39:df:bb:12:ce:47:d1:e8:dd:55:96:21:1e:b6:09:cc:c7:19:
41:61:8f:9b:48:d4:9f:34:48:a0:06:57:63:ee:08:17:ea:e9:
5d:8b:78:6c:22:ae:b7:ef:46:b2:bb:d3:f1:ae:d2:c8:be:02:
4d:fc:50:14:94:fb:fe:04:12:48:92:56:81:b6:cb:93:75:9f:
12:32:48:17:df:94:77:37:db:e1:99:0c:a1:97:63:e8:8e:8e:
03:a9:e5:6d:36:91:bd:98:49:fe:fa:13:93:79:ab:b0:3f:4c:
39:7a:07:3a:d5:c0:3b:6d:af:10:7d:c0:18:e3:cd:da:78:c8:
eb:1c:24:a7:d1:2f:c0:8a:3c:9f:bb:ca:bf:99:ae:00:c0:7e:
f1:81:cc:01:f4:86:50:f4:02:d4:a8:03:a2:2d:42:28:13:d3:
b2:1e:ef:d3:3b:6b:85:a9:02:a6:68:c9:a3:4d:e5:1b:5d:00:
98:e6:e3:69:f2:88:f1:bc:39:93:f6:73:37:7c:03:f8:f6:d8:
ae:fe:b6:93:00:64:e9:f9:c7:09:10:a1:59:48:3a:2c:da:09:
ca:fe:8e:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtXZLi/D+xh3o00LlE8jaiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NzQ4NzQ3MmQzN2NiZDcyNjE4MWY5ZjNhMjAzODZmMDM5
YjNiYTgwHhcNMjYwOTA0MTcwMDQzWhcNMjYwOTA1MTcwMDQzWjAzMTEwLwYDVQQD
Eyg0ZDdlZWJhZmU3ZjAyYTQzMTczZGUyODA0MWIxNThmNjI0ZTUzZTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wSrzRu/XdaZot0BW2N2yDj2qNt9
/AlhsGV34h1cfFZ5QdQNPVyYb1Pv2328qltV9OMqA/HjyczmerDjBdzxxJm1nI1g
I96n/893DWQCY9BcP/Bd+awo7WnlqU/DaGB96ufymH2SPutQDGSuClcVVDOWx6Ck
ESizN+GQMlZPKgGuB28jQPucvctluv+0Wk2crdNjk7dUcNvbczVC7UMT15H0MboH
rEq2iboDcA1urUgiLgTUFChul89gMvOqQtb7YBEtDX874bQI0waeafPe+xePYaRf
f9V0T3jMamjk3xr2Vfx+bC7r8UITP5hAlzMI5kNd8/ZDwF05bHMBfGdvuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1+66/n8CpDFz3igEGxWPYk5T51MB8GA1UdIwQY
MBaAFFl0h0ctN8vXJhgfnzogOG8DmzuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lYTI3ZjMtZGI3NC00OTYzLWExOGMt
MDM1MjgxMjg5YmIwLzEvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9lYTI3ZjMtZGI3NC00OTYzLWExOGMtMDM1MjgxMjg5YmIw
LzEvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8ELwUX0
q+5pmkUvJHqtr/gFZtI0a9mRrZw5XRpDfjqq4q8YOd+7Es5H0ejdVZYhHrYJzMcZ
QWGPm0jUnzRIoAZXY+4IF+rpXYt4bCKut+9GsrvT8a7SyL4CTfxQFJT7/gQSSJJW
gbbLk3WfEjJIF9+Udzfb4ZkMoZdj6I6OA6nlbTaRvZhJ/voTk3mrsD9MOXoHOtXA
O22vEH3AGOPN2njI6xwkp9EvwIo8n7vKv5muAMB+8YHMAfSGUPQC1KgDoi1CKBPT
sh7v0ztrhakCpmjJo03lG10AmObjafKI8bw5k/ZzN3wD+PbYrv62kwBk6fnHCRCh
WUg6LNoJyv6OBA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:16:25 2026 by rpki-client