Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
File: WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft (raw, json)
Hash identifier: jEzAbAVQQZRTLw0Zfv1NIQjME45OB3daEG63l8CzfOc=
Subject key identifier: 99:3F:36:92:99:AA:D3:0E:B6:B0:A8:E0:58:9F:D6:50:85:D5:66:9E
Authority key identifier: 58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
Certificate issuer: /CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Certificate serial: 01A188645C913A6AE68BD5B31F159AFE1766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
Manifest number: 1ACC
Signing time: Thu 29 Oct 2026 16:00:40 +0000
Manifest this update: Thu 29 Oct 2026 16:00:40 +0000
Manifest next update: Fri 30 Oct 2026 16:00:40 +0000
Files and hashes: 1: FJ7VQcAMIvc3LwUGZdJ2_y4tX64.roa (hash: KoQb0RIcqGQvJlXxJR+BM6e+6A6w3hgDW+4kbTJ92pM=)
2: WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl (hash: qLizp0McSOkU7JVyKI+hn/folOsNAVVKhutohBbxpXg=)
3: aPCbZqgtPV21c3ARjcz1UPj-qzE.roa (hash: QekkHkDa+9iEezFiFOvlr4BwgfAqsVczW7AoIwi4kRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:64:5c:91:3a:6a:e6:8b:d5:b3:1f:15:9a:fe:17:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Validity
Not Before: Oct 29 16:00:40 2026 GMT
Not After : Oct 30 16:00:40 2026 GMT
Subject: CN=993f369299aad30eb6b0a8e0589fd65085d5669e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:90:61:61:dc:64:9b:76:56:8f:85:84:03:
78:5c:89:9e:ec:a7:35:eb:87:43:3c:74:e4:09:90:
81:d0:58:11:f7:fb:97:42:28:42:80:22:29:a4:af:
60:b1:ce:9e:b4:c9:8c:3d:68:06:c1:cd:6b:b8:0d:
83:b3:b0:76:ed:2b:a4:69:78:8b:2e:27:41:4b:d3:
c7:df:0c:c8:67:c2:e9:7d:ba:16:54:0b:56:73:c3:
47:6a:60:00:bd:44:bb:af:99:34:31:2a:27:fd:4d:
a3:43:2b:34:15:2b:a5:95:d9:d7:f9:c3:44:d4:5d:
7f:c5:5a:c6:ce:73:d5:f5:c3:43:49:40:54:9e:a4:
8c:82:76:86:37:b3:fa:3f:66:e0:d7:2a:a4:0c:39:
91:ef:c2:a0:59:06:69:8c:c1:d1:f2:e8:5d:7b:8b:
48:21:dc:b5:5b:12:aa:75:f0:6a:f7:a5:5b:79:e0:
f3:58:63:2a:28:b2:cc:6a:de:38:52:9b:a7:1a:ea:
dc:5e:30:7a:7d:3e:0d:7b:04:1f:ad:fd:af:51:aa:
e7:92:c0:ad:b8:da:34:2d:be:8c:7c:18:c8:22:2c:
5f:27:b4:d7:26:e7:f5:a7:31:a3:c2:3d:50:df:64:
93:2c:01:bd:3a:d0:6e:64:1d:5f:24:f8:0a:7c:3b:
96:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3F:36:92:99:AA:D3:0E:B6:B0:A8:E0:58:9F:D6:50:85:D5:66:9E
X509v3 Authority Key Identifier:
keyid:58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0c:ed:48:a1:b7:bb:b9:b9:4e:cc:68:aa:40:66:b7:46:d8:
88:3e:f8:40:d3:b6:38:3d:dc:3c:8c:97:a1:10:78:e5:b6:c6:
26:66:4e:0b:79:79:bf:cd:62:79:62:4c:c0:8f:b4:20:82:ff:
83:43:4c:90:09:12:ae:55:79:74:ac:bb:7e:1f:06:4c:19:93:
f8:1f:0e:12:35:0e:47:4d:f4:53:0b:9b:97:a3:03:96:9e:39:
3e:83:12:7b:ce:17:c0:83:75:ab:7e:65:fe:97:bb:ee:66:fe:
13:5d:a4:e2:d5:ad:e7:9e:b3:64:78:dc:19:41:51:e2:5b:df:
64:ab:9a:3e:d2:46:02:7b:0d:d2:7b:05:a0:c6:b6:82:6e:a7:
b0:99:6e:3c:43:5c:c9:22:0a:08:74:2f:26:bc:e6:e5:66:35:
19:b3:c1:c6:a2:1f:13:2f:0c:b7:e0:72:f9:5c:ee:2c:f2:fc:
69:fb:25:36:fe:3b:9f:bb:37:20:22:02:68:b4:69:ab:39:26:
a4:b1:d6:dc:61:ae:ef:20:78:8d:f4:05:6f:6b:e3:fc:2c:08:
d6:3a:31:39:a0:74:7c:4b:46:92:37:c4:f1:86:d2:02:a4:f1:
b2:5a:52:0e:b6:63:1f:4c:e0:f2:af:d5:aa:78:47:12:fd:64:
07:0c:3a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 21:30:08 2026 by rpki-client