Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
File: WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft (raw, json)
Hash identifier: tFqjy7K6+5l+mYQZ8W8WmfL2RLe1ZzjNie/Bm506NDc=
Subject key identifier: 62:12:3E:74:3C:EF:D5:F6:04:70:E1:4A:9F:BE:A2:D8:49:81:57:3A
Authority key identifier: 58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
Certificate issuer: /CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Certificate serial: 019DCE628C5F9EC4B84324190C4C8D4CBDA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 10:00:58 +0000
Manifest this update: Mon 27 Apr 2026 10:00:58 +0000
Manifest next update: Tue 28 Apr 2026 10:00:58 +0000
Files and hashes: 1: FJ7VQcAMIvc3LwUGZdJ2_y4tX64.roa (hash: KoQb0RIcqGQvJlXxJR+BM6e+6A6w3hgDW+4kbTJ92pM=)
2: WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl (hash: AWShSYXoSwHEw/eVYqHgPQU6uzHoB1tW0UB/P0YLeWc=)
3: aPCbZqgtPV21c3ARjcz1UPj-qzE.roa (hash: QekkHkDa+9iEezFiFOvlr4BwgfAqsVczW7AoIwi4kRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:8c:5f:9e:c4:b8:43:24:19:0c:4c:8d:4c:bd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Validity
Not Before: Apr 27 10:00:58 2026 GMT
Not After : Apr 28 10:00:58 2026 GMT
Subject: CN=62123e743cefd5f60470e14a9fbea2d84981573a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:2c:9f:ac:ac:78:77:20:06:9b:24:14:b8:
df:d3:72:39:65:78:52:22:67:d6:a4:18:8b:46:92:
9d:32:52:29:94:a4:3d:64:9d:27:5b:d8:f1:4d:88:
6d:45:c0:08:d1:d8:2e:f3:d9:17:49:fa:a8:a8:59:
9a:09:01:19:11:e9:84:23:31:e2:55:1b:1a:e7:82:
31:00:f6:10:c1:58:6b:c1:93:be:f9:79:c4:3f:0e:
be:9a:17:23:70:83:87:90:0c:e0:ff:dc:b5:a0:9b:
90:45:f8:a9:ee:9d:fd:20:cf:dc:18:ce:5c:0e:3e:
83:b0:18:fd:2a:45:2d:7a:79:cd:76:d4:29:29:1d:
54:60:ee:6c:bc:3a:b3:71:e0:3b:6f:ac:10:23:c0:
bf:9f:79:c4:d6:59:83:f5:ef:e3:18:27:b8:0a:79:
35:f5:58:47:01:f5:15:b6:c8:3a:b2:83:f3:08:82:
f2:d5:f6:31:21:f4:15:7c:01:d3:ef:b5:a0:ae:a7:
6c:54:04:9d:94:0e:9d:03:d7:44:80:cf:a9:ad:a4:
39:95:5e:d9:a3:76:9f:c6:7e:ee:47:a3:31:ed:9c:
cd:b1:18:ae:2f:44:c5:50:35:c3:66:37:9f:85:dc:
b3:be:5a:0d:e3:04:67:25:04:2a:c7:46:2c:c9:4a:
ab:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:12:3E:74:3C:EF:D5:F6:04:70:E1:4A:9F:BE:A2:D8:49:81:57:3A
X509v3 Authority Key Identifier:
keyid:58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:38:c6:bb:30:4c:75:62:f0:ff:8c:7d:ac:d6:bc:66:86:db:
40:87:56:8c:0a:40:be:88:aa:14:b4:84:51:18:8a:96:09:43:
04:50:bb:23:b7:44:50:9e:66:79:a3:25:a1:77:17:ad:8e:66:
9f:66:fc:0e:ed:31:f1:6d:66:76:99:ab:b8:4d:ef:3b:94:6a:
5c:fa:84:1d:cc:04:0c:24:6c:34:57:88:ba:2d:45:91:a4:e4:
5c:cd:b1:c4:d7:a0:f4:fc:ae:e2:51:e0:5e:d8:83:45:ca:4f:
d5:4c:32:59:cc:92:8d:73:6d:ab:ef:90:c2:09:4b:6f:6b:ce:
0e:91:0c:01:63:54:da:48:3d:40:19:9f:25:e4:d7:9f:c3:b8:
5e:32:1b:6b:01:37:d9:e3:7a:3e:8c:a2:ef:9c:86:c1:c9:48:
db:42:91:71:16:53:d7:0a:5f:81:5c:db:60:98:80:02:20:2c:
70:38:f4:d8:d8:26:44:e7:90:a0:9b:6c:d1:b7:49:55:2b:d5:
d5:91:f8:2d:ef:03:4d:d4:f3:5d:28:67:4b:98:45:e3:fd:ef:
0f:57:49:46:6a:95:79:aa:1f:e7:d2:d8:71:11:29:73:66:96:
86:68:a4:49:19:8c:cc:84:5e:bb:47:8b:9e:76:18:3f:89:2a:
48:54:90:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OYoxfnsS4QyQZDEyNTL2hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZWU0N2QzMmE1OTkzNDFmNWZmMWE4OGJmMTQyZTE1Mzhk
YTQwZWEwHhcNMjYwNDI3MTAwMDU4WhcNMjYwNDI4MTAwMDU4WjAzMTEwLwYDVQQD
Eyg2MjEyM2U3NDNjZWZkNWY2MDQ3MGUxNGE5ZmJlYTJkODQ5ODE1NzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9Usn6yseHcgBpskFLjf03I5ZXhS
ImfWpBiLRpKdMlIplKQ9ZJ0nW9jxTYhtRcAI0dgu89kXSfqoqFmaCQEZEemEIzHi
VRsa54IxAPYQwVhrwZO++XnEPw6+mhcjcIOHkAzg/9y1oJuQRfip7p39IM/cGM5c
Dj6DsBj9KkUtennNdtQpKR1UYO5svDqzceA7b6wQI8C/n3nE1lmD9e/jGCe4Cnk1
9VhHAfUVtsg6soPzCILy1fYxIfQVfAHT77WgrqdsVASdlA6dA9dEgM+praQ5lV7Z
o3afxn7uR6Mx7ZzNsRiuL0TFUDXDZjefhdyzvloN4wRnJQQqx0YsyUqr6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGISPnQ879X2BHDhSp++othJgVc6MB8GA1UdIwQY
MBaAFFjuR9MqWZNB9f8aiL8ULhU42kDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hNDI2OTktMWQzZi00YTcwLTgzY2Ut
YzU2NGI0MGVjYTA1LzEvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9hNDI2OTktMWQzZi00YTcwLTgzY2UtYzU2NGI0MGVjYTA1
LzEvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDjGuzBM
dWLw/4x9rNa8ZobbQIdWjApAvoiqFLSEURiKlglDBFC7I7dEUJ5meaMloXcXrY5m
n2b8Du0x8W1mdpmruE3vO5RqXPqEHcwEDCRsNFeIui1FkaTkXM2xxNeg9Pyu4lHg
XtiDRcpP1UwyWcySjXNtq++QwglLb2vODpEMAWNU2kg9QBmfJeTXn8O4XjIbawE3
2eN6Poyi75yGwclI20KRcRZT1wpfgVzbYJiAAiAscDj02NgmROeQoJts0bdJVSvV
1ZH4Le8DTdTzXShnS5hF4/3vD1dJRmqVeaof59LYcREpc2aWhmikSRmMzIReu0eL
nnYYP4kqSFSQRg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 17:20:51 2026 by rpki-client