
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
File: WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft (raw, json)
Hash identifier: NizLWILb/29efD2xCKZEM8zsAYEQbVoylnZ9AAjjrw8=
Subject key identifier: F6:51:51:2E:95:B0:C7:65:FB:EA:D4:CB:F6:1D:AA:58:E7:33:00:89
Authority key identifier: 58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
Certificate issuer: /CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Certificate serial: 019EBBEB65ED2FF369EA8F0F4C4F52B0C6CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
Manifest number: 1959
Signing time: Fri 12 Jun 2026 13:00:26 +0000
Manifest this update: Fri 12 Jun 2026 13:00:26 +0000
Manifest next update: Sat 13 Jun 2026 13:00:26 +0000
Files and hashes: 1: FJ7VQcAMIvc3LwUGZdJ2_y4tX64.roa (hash: KoQb0RIcqGQvJlXxJR+BM6e+6A6w3hgDW+4kbTJ92pM=)
2: WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl (hash: bf99cFiSta7wEswbsRB4++Dbd5lusYQGs+HbgkT7oqY=)
3: aPCbZqgtPV21c3ARjcz1UPj-qzE.roa (hash: QekkHkDa+9iEezFiFOvlr4BwgfAqsVczW7AoIwi4kRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:eb:65:ed:2f:f3:69:ea:8f:0f:4c:4f:52:b0:c6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Validity
Not Before: Jun 12 13:00:26 2026 GMT
Not After : Jun 13 13:00:26 2026 GMT
Subject: CN=f651512e95b0c765fbead4cbf61daa58e7330089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5e:29:0e:49:e6:d7:42:45:a1:60:fe:0b:1b:
68:fe:6f:30:9f:15:44:66:3a:5d:b3:5b:85:d7:4f:
16:ce:e3:9a:64:35:8a:a7:3b:a2:6a:e1:c5:ba:06:
89:3a:a0:87:cb:e1:36:da:3d:58:93:f2:91:2f:c3:
77:ff:45:34:9e:42:ba:45:0a:05:81:c1:a7:1e:17:
dc:5a:a4:cc:8a:b3:20:31:82:d7:26:28:39:69:9c:
89:27:9a:a1:cd:92:6a:60:8e:91:2c:cf:f9:af:f9:
88:aa:90:40:04:c9:a0:23:39:4f:c3:57:37:c2:6b:
a2:5b:25:fd:4f:15:81:e5:d4:f6:95:e3:f9:b6:f0:
e8:9b:ec:e8:64:09:44:b2:ed:82:34:b0:ca:2b:37:
58:eb:cc:8a:05:c0:1e:e5:36:f0:54:22:95:57:d5:
b8:c0:2e:e3:b0:21:43:d6:e7:13:d8:33:c9:a5:5e:
68:7a:f6:94:ec:0c:2f:59:22:c6:8e:1f:9b:4d:b2:
2f:75:1b:15:e8:2d:57:79:af:2c:c9:32:6f:50:41:
1a:a1:3f:dc:30:13:e4:0f:c5:74:fc:e5:43:61:98:
8b:b0:e0:9f:ad:fe:0e:a4:01:8f:63:7f:ac:df:f8:
eb:12:b0:ab:e7:9d:35:70:3c:d2:8c:0b:22:c1:96:
0e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:51:51:2E:95:B0:C7:65:FB:EA:D4:CB:F6:1D:AA:58:E7:33:00:89
X509v3 Authority Key Identifier:
keyid:58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b2:6b:a9:17:f1:69:61:b9:00:65:ba:aa:f6:8e:b1:06:db:
2e:a7:85:fd:63:c9:a4:b9:d9:ac:bc:87:da:0b:69:97:1b:5b:
20:55:54:b7:10:ec:3c:b6:5a:5d:3b:27:a4:37:56:20:ed:51:
17:d8:19:4d:21:87:78:6f:3d:32:94:2f:67:a8:57:94:fd:b9:
b0:7c:dd:04:94:bf:54:26:68:af:ed:4b:88:69:4a:23:f3:80:
02:60:40:85:9b:dc:6b:1e:f0:3f:7d:e5:2f:c9:1a:e5:90:45:
08:e6:cf:93:a4:75:41:6f:ea:55:f5:bd:af:c5:10:03:ca:20:
ce:cf:0c:c1:dc:2e:15:a1:f3:7e:7d:7d:d1:99:91:c5:ae:46:
24:73:1b:f7:00:f8:b8:e1:f2:d9:0f:3b:4b:8a:0c:6d:12:10:
ea:ec:f5:b3:81:35:97:63:fd:79:ea:98:16:32:a5:21:a0:c0:
bf:df:2a:0c:d0:56:2e:1c:6d:5c:94:a9:23:1c:e7:6e:b0:ff:
f3:28:ab:af:9b:30:ed:83:a4:c5:ed:9d:e0:2c:0b:a5:97:78:
4d:30:19:28:e4:98:c7:47:5b:93:3d:15:df:61:71:f9:d1:2d:
3c:91:aa:96:49:55:30:69:01:4c:73:29:42:ee:5d:07:52:78:
7d:4d:03:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6762XtL/Np6o8PTE9SsMbNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZWU0N2QzMmE1OTkzNDFmNWZmMWE4OGJmMTQyZTE1Mzhk
YTQwZWEwHhcNMjYwNjEyMTMwMDI2WhcNMjYwNjEzMTMwMDI2WjAzMTEwLwYDVQQD
EyhmNjUxNTEyZTk1YjBjNzY1ZmJlYWQ0Y2JmNjFkYWE1OGU3MzMwMDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml4pDknm10JFoWD+Cxto/m8wnxVE
Zjpds1uF108WzuOaZDWKpzuiauHFugaJOqCHy+E22j1Yk/KRL8N3/0U0nkK6RQoF
gcGnHhfcWqTMirMgMYLXJig5aZyJJ5qhzZJqYI6RLM/5r/mIqpBABMmgIzlPw1c3
wmuiWyX9TxWB5dT2leP5tvDom+zoZAlEsu2CNLDKKzdY68yKBcAe5TbwVCKVV9W4
wC7jsCFD1ucT2DPJpV5oevaU7AwvWSLGjh+bTbIvdRsV6C1Xea8syTJvUEEaoT/c
MBPkD8V0/OVDYZiLsOCfrf4OpAGPY3+s3/jrErCr5501cDzSjAsiwZYO5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZRUS6VsMdl++rUy/YdqljnMwCJMB8GA1UdIwQY
MBaAFFjuR9MqWZNB9f8aiL8ULhU42kDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hNDI2OTktMWQzZi00YTcwLTgzY2Ut
YzU2NGI0MGVjYTA1LzEvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9hNDI2OTktMWQzZi00YTcwLTgzY2UtYzU2NGI0MGVjYTA1
LzEvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLJrqRfx
aWG5AGW6qvaOsQbbLqeF/WPJpLnZrLyH2gtplxtbIFVUtxDsPLZaXTsnpDdWIO1R
F9gZTSGHeG89MpQvZ6hXlP25sHzdBJS/VCZor+1LiGlKI/OAAmBAhZvcax7wP33l
L8ka5ZBFCObPk6R1QW/qVfW9r8UQA8ogzs8MwdwuFaHzfn190ZmRxa5GJHMb9wD4
uOHy2Q87S4oMbRIQ6uz1s4E1l2P9eeqYFjKlIaDAv98qDNBWLhxtXJSpIxznbrD/
8yirr5sw7YOkxe2d4CwLpZd4TTAZKOSYx0dbkz0V32Fx+dEtPJGqlklVMGkBTHMp
Qu5dB1J4fU0DPw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 18:29:34 2026 by rpki-client