Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json)
Hash identifier: YwNAc7Xv+wJgqbd4GySmvCKwLPnG1XXNAKwZslW+LBg=
Subject key identifier: CA:CB:20:EF:6A:F4:6E:C0:9C:4E:0D:49:60:2B:21:9F:DB:02:58:91
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 01A18F0BB99E048C4168B7ACF212F29243F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
Manifest number: 189F
Signing time: Fri 30 Oct 2026 23:01:12 +0000
Manifest this update: Fri 30 Oct 2026 23:01:12 +0000
Manifest next update: Sat 31 Oct 2026 23:01:12 +0000
Files and hashes: 1: 0NoPiisJbpwmvBUWEe2px9KfACQ.roa (hash: fADYU9aKvqcndQu+aoL/npU6GSJIZV+Rd4qVL1uAf08=)
2: GCkGsS1uz9XBVQQhijBaSLbxwTE.roa (hash: 0L/zbSf1D/vPMlQYoADMvJgS8Ov/BldeGq2klZOZFUA=)
3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: LsP6FW6WHvChn1qFXKR1oss2nln6Ln9oEjqAXgLpxcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:0b:b9:9e:04:8c:41:68:b7:ac:f2:12:f2:92:43:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Oct 30 23:01:12 2026 GMT
Not After : Oct 31 23:01:12 2026 GMT
Subject: CN=cacb20ef6af46ec09c4e0d49602b219fdb025891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:de:dc:d0:3b:5b:e4:51:aa:ff:2c:f2:23:
35:94:2b:56:9f:56:51:76:2c:0a:4e:0a:e0:17:aa:
ba:90:79:c7:0d:d0:ca:e6:74:fd:9d:7c:86:08:8d:
ca:22:68:44:a9:77:2f:79:ba:70:5e:b9:d3:92:b0:
31:3e:2e:eb:80:a4:04:21:f3:13:75:89:f9:2a:3b:
d7:f4:7c:30:c1:77:62:93:ee:26:d4:78:3c:81:21:
1c:63:bd:e0:95:76:f5:4d:4e:c3:f5:1e:ce:aa:f4:
97:e0:07:2c:67:70:66:93:d8:fc:e6:bc:3b:b8:c2:
5a:36:f5:6f:d6:12:b7:59:08:ca:9b:80:04:bb:26:
7c:a4:5b:80:b1:5d:d9:5a:22:f1:dc:3e:de:56:1c:
14:a0:c1:f7:f0:dc:1f:bb:72:0d:b8:73:58:e3:d8:
82:7b:cd:dd:f7:92:e1:d2:18:30:d9:84:9a:b8:53:
bc:45:96:0a:14:ad:90:01:25:62:b7:17:0c:ef:c9:
96:96:89:2e:79:46:51:d7:14:67:e1:01:ed:6a:05:
4b:e0:da:db:44:d9:19:13:f6:ea:f5:ee:9a:95:bc:
70:d8:e8:37:0c:cf:79:d6:03:9e:74:2f:13:d1:7d:
9b:50:32:a0:5b:ec:c0:28:04:3e:b6:fe:b6:cf:55:
83:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CB:20:EF:6A:F4:6E:C0:9C:4E:0D:49:60:2B:21:9F:DB:02:58:91
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:4b:f9:48:5d:e5:d5:2f:66:66:c7:b3:9d:14:e9:be:df:ee:
8d:e0:81:03:d1:74:40:41:51:b4:9e:52:f3:c5:ee:b0:95:9a:
92:e9:b1:4b:86:b7:cf:ae:60:6a:50:fc:06:b9:bd:b2:86:f9:
8a:50:c8:f2:0a:e9:b3:5a:e5:11:bc:25:71:0a:90:be:87:d9:
11:a9:ec:e4:d5:3d:0e:7f:a7:25:cf:6b:e9:93:98:e8:ea:a8:
68:32:ce:d5:97:6e:2a:ec:ad:95:c6:7a:9d:54:90:3a:19:c5:
5b:7e:71:b9:59:4e:b2:56:3f:9b:a7:70:78:6b:8a:53:de:3f:
1f:eb:ee:19:5f:54:f9:d8:2b:c1:43:67:24:74:47:51:be:26:
66:0f:33:d9:da:c1:0a:22:f3:9c:d3:c1:a3:34:ce:ee:86:2c:
f9:75:db:5d:5d:a4:d5:8f:b5:80:7b:87:5a:5a:fe:30:6d:b8:
db:18:5f:ac:49:76:b2:79:d8:86:21:0a:a9:e3:0f:5d:99:ce:
72:f3:2d:5f:87:ee:79:1c:e4:b0:d6:c1:b4:93:37:e8:c4:5a:
db:2e:d7:fe:b3:3d:bc:06:20:3f:f4:0e:16:02:ad:4b:e7:02:
34:e2:82:eb:4a:5b:5c:40:2e:54:be:27:d1:14:00:f8:2a:07:
73:b2:3e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:30:36 2026 by rpki-client