Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
File: WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft (raw, json)
Hash identifier: AOrS/9KKhtARWLm/eBiT/yi2lJD0W2U5xbWWguWPat4=
Subject key identifier: B9:CF:35:42:69:DF:CE:17:6E:D5:36:B9:57:CA:E7:ED:84:E3:FF:DD
Authority key identifier: 58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
Certificate issuer: /CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Certificate serial: 019FA3A9A9F6E7E80398F862A78ACF0D3543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 13:00:32 +0000
Manifest this update: Mon 27 Jul 2026 13:00:32 +0000
Manifest next update: Tue 28 Jul 2026 13:00:32 +0000
Files and hashes: 1: FJ7VQcAMIvc3LwUGZdJ2_y4tX64.roa (hash: KoQb0RIcqGQvJlXxJR+BM6e+6A6w3hgDW+4kbTJ92pM=)
2: WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl (hash: uQMb5FcEAiCEd1WrmfU5xq3XkGyit4WgfOXMgqirOro=)
3: aPCbZqgtPV21c3ARjcz1UPj-qzE.roa (hash: QekkHkDa+9iEezFiFOvlr4BwgfAqsVczW7AoIwi4kRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:a9:a9:f6:e7:e8:03:98:f8:62:a7:8a:cf:0d:35:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Validity
Not Before: Jul 27 13:00:32 2026 GMT
Not After : Jul 28 13:00:32 2026 GMT
Subject: CN=b9cf354269dfce176ed536b957cae7ed84e3ffdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:47:ec:e5:24:dc:b0:34:eb:4a:88:1f:7d:4b:
d8:72:3c:56:14:1e:8d:e6:8e:6b:b7:9a:23:30:e1:
b2:4f:0a:46:8f:d5:38:21:48:af:23:2c:b3:e2:d2:
c7:7d:41:30:79:5d:19:66:c3:02:ec:09:39:97:38:
7b:32:72:d0:a1:1d:90:41:bf:32:63:ba:19:81:e6:
52:fe:b8:f9:4c:65:4c:9c:1e:0d:76:2a:2c:bb:c2:
aa:79:7c:40:99:06:43:92:05:2d:51:65:fa:ee:4f:
cd:e2:89:80:32:02:a2:ed:7a:67:1d:49:85:bd:ec:
83:47:4a:c4:24:9c:69:2f:39:8a:d6:6c:01:c4:ee:
fd:9c:b3:45:46:bf:e7:57:f5:5e:0d:d2:8d:76:51:
6c:9b:81:ee:50:19:97:f8:2a:09:76:75:d8:eb:2b:
4c:1f:a4:11:10:82:a2:11:da:b2:73:c6:16:0b:67:
d2:ce:40:92:5b:1b:2f:de:f8:14:0d:d4:48:19:ec:
61:f4:89:9c:d6:43:06:2c:ec:f0:7a:69:c7:30:0e:
f5:fa:fc:fb:20:f5:03:9e:f3:82:33:d0:6b:de:ce:
c5:53:89:cd:15:92:c4:9a:ff:25:9a:bc:f6:72:40:
1e:a3:12:e3:f3:b6:df:a4:a9:33:ed:7a:ff:ad:38:
64:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CF:35:42:69:DF:CE:17:6E:D5:36:B9:57:CA:E7:ED:84:E3:FF:DD
X509v3 Authority Key Identifier:
keyid:58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:68:9f:bd:3b:dc:2a:93:44:90:cf:56:b0:3e:e8:26:fb:73:
df:d7:5b:3e:12:7a:b9:a6:fb:09:e4:8a:af:d3:aa:7d:ea:c9:
92:7c:ef:08:84:6f:1d:92:d5:4f:2f:2c:dd:5b:dc:b0:40:0e:
17:50:9d:67:d3:f8:0c:2a:6a:f9:29:12:61:d4:96:4a:3e:b8:
b9:4a:9e:00:16:b6:6c:8c:d3:4d:05:5a:18:44:ba:2c:be:a4:
94:47:71:e9:e8:5a:16:d3:fa:fc:ff:e1:17:78:9d:fb:98:00:
17:11:50:bb:64:0e:d5:c9:04:f6:61:73:43:5b:17:85:79:d9:
f3:7f:0a:a7:10:f4:e2:44:9a:65:56:47:af:6d:fd:b3:17:78:
c1:9a:a6:30:65:81:f5:33:64:d1:12:35:5b:a7:69:6a:16:46:
3a:c0:3f:1d:c0:ac:bb:15:40:d4:19:62:d5:01:73:9b:90:8a:
7f:41:f4:6f:9f:2a:8b:09:b5:b6:2d:d1:c2:6b:56:dd:47:af:
27:2d:43:eb:52:3f:aa:ad:95:e0:af:59:8c:a8:8b:b6:50:b4:
a8:25:ab:a7:f4:de:9f:d3:64:3c:8b:24:19:f3:ec:31:b2:2c:
84:f9:d9:4a:98:88:51:e2:c3:29:8b:7b:77:47:2e:2f:5f:c0:
49:02:e5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:26:02 2026 by rpki-client