Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
File: WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft (raw, json)
Hash identifier: l+zJO0y+vo7fI4dGoieDwGxXdRRru9t7BNv3zPTk0rs=
Subject key identifier: 63:A9:23:21:1D:80:06:51:A0:20:83:6A:B0:49:BD:34:1B:FC:02:3F
Authority key identifier: 58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
Certificate issuer: /CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Certificate serial: 019CE6A3BE356732B7629ACF4144D4A7BC49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
Manifest number: 1866
Signing time: Fri 13 Mar 2026 10:00:16 +0000
Manifest this update: Fri 13 Mar 2026 10:00:16 +0000
Manifest next update: Sat 14 Mar 2026 10:00:16 +0000
Files and hashes: 1: FJ7VQcAMIvc3LwUGZdJ2_y4tX64.roa (hash: KoQb0RIcqGQvJlXxJR+BM6e+6A6w3hgDW+4kbTJ92pM=)
2: WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl (hash: iNIschzBQEQLbmCFY5yU/OFwjj9RxgseEgct9XkX6PE=)
3: aPCbZqgtPV21c3ARjcz1UPj-qzE.roa (hash: QekkHkDa+9iEezFiFOvlr4BwgfAqsVczW7AoIwi4kRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a3:be:35:67:32:b7:62:9a:cf:41:44:d4:a7:bc:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Validity
Not Before: Mar 13 10:00:16 2026 GMT
Not After : Mar 14 10:00:16 2026 GMT
Subject: CN=63a923211d800651a020836ab049bd341bfc023f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:52:fc:b8:26:a5:99:fb:4b:f6:7f:3c:ea:
a2:d5:f6:ce:2c:cc:8d:f6:6c:18:c7:47:18:39:06:
ab:e8:c8:e6:25:5d:f3:7f:a4:86:fc:13:61:1d:ab:
ce:62:31:f7:74:d7:bd:fb:38:3a:b6:3b:3d:d2:05:
18:f5:0d:3a:67:ff:57:ef:fe:9f:b4:e1:49:c3:4a:
b5:45:3c:d6:ed:d2:bd:82:73:1a:8b:35:87:dc:10:
0f:1a:7b:57:cf:75:18:e5:b9:18:09:f4:65:a0:53:
46:74:41:cc:67:5d:5d:15:50:0a:b2:57:1f:74:1f:
59:b9:15:38:59:75:74:32:f9:10:67:38:fd:f4:c7:
19:9a:3b:c0:a9:6c:4d:c4:25:64:e4:86:25:99:ee:
d2:f2:96:3c:40:7a:21:f7:db:69:9f:c3:1f:9a:8f:
7d:0d:7f:51:8a:c9:c0:aa:6c:e8:df:31:3d:0f:77:
80:88:19:09:83:6f:6e:d5:af:9a:0e:a9:14:1a:82:
f8:a1:56:ee:5d:8c:51:99:2e:da:a8:9d:b8:43:7a:
ff:60:3a:97:3a:b3:58:d2:e9:d7:3b:19:c7:d2:c0:
63:81:ab:a3:4b:2a:17:64:9d:92:f9:32:1a:b1:ba:
26:5e:e0:76:46:a6:fa:17:b9:54:bb:13:b8:06:34:
46:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A9:23:21:1D:80:06:51:A0:20:83:6A:B0:49:BD:34:1B:FC:02:3F
X509v3 Authority Key Identifier:
keyid:58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d2:ef:62:cd:13:9d:3e:58:f6:66:2b:06:3f:41:c1:2b:27:
c2:fd:3d:5c:35:97:85:2d:b4:39:8c:06:85:b9:cb:bf:c6:8b:
79:82:32:b5:28:ce:9b:b5:56:41:3f:35:76:c5:e1:84:06:1a:
0d:d1:b9:16:85:a5:a6:b3:5d:ae:65:24:6f:d2:04:5e:7c:0e:
aa:59:25:e6:9a:54:11:89:c4:89:6e:54:98:68:dd:bb:e3:0b:
f6:b2:09:8b:35:68:99:59:b6:0f:2c:24:1e:59:f9:3f:4d:2c:
05:5d:78:7a:6e:67:2b:de:1e:d3:8b:d6:43:54:bc:c5:ca:d1:
47:bd:e7:35:bb:00:77:f4:3f:76:74:fc:70:b7:34:66:c1:81:
23:4c:79:56:3c:d8:59:6c:83:71:18:6a:33:c2:d5:e1:53:f7:
fa:de:c3:bb:7e:f3:7e:1c:de:7c:39:64:28:92:77:6d:68:ec:
4d:61:57:15:b9:08:c8:6e:05:72:04:13:0f:7b:93:82:c9:ba:
1a:7f:be:52:04:21:ec:23:84:b1:74:dc:1a:7d:14:30:c7:36:
43:39:d5:dc:d1:b8:f4:30:f8:bf:d4:8d:f0:d4:c4:b7:4d:83:
ff:8c:ca:e0:43:d1:3f:21:69:26:ce:6e:c9:53:6f:b2:27:33:
74:a3:97:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:58:32 2026 by rpki-client