Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
File: WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json)
Hash identifier: 1YvNq83qoCs8IQEP/mhoSQx1+5wuyMf9JM4h8MY4YbE=
Subject key identifier: 7A:3B:AC:37:54:F8:C8:A8:57:25:7C:09:F8:73:D1:6C:C0:DE:2C:CB
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial: 01A1AB5EA8755F6EF1568DF02EA07D56F689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
Manifest number: 183D
Signing time: Thu 05 Nov 2026 11:01:09 +0000
Manifest this update: Thu 05 Nov 2026 11:01:09 +0000
Manifest next update: Fri 06 Nov 2026 11:01:09 +0000
Files and hashes: 1: 1RuzsOoiPTgqsuSzzAU9YdpD_xE.roa (hash: Fsh9osUtIPyPkM6syYXVCCskaMH4p0nvyx/Ce7UJowo=)
2: FuFk1abxIFK2Ejav-XvLTSDuMQw.roa (hash: 0xnqZLkHCC49vVlWKGLKg1BEJ0gcvfzLoWavQfMGkDg=)
3: URu6RbbpNeggkq99HoBQq0K-CGw.roa (hash: SglHd7je2yZY5MNS1/0/uqc+KTjzW8LFZ4Gz7SHINKQ=)
4: UkVdKWIJtxN1ZPO561wg1yvlmnU.roa (hash: T1UGvaY+sPgOyfHIoNQmJTNfshFbXNmoAxXGY7h2ENY=)
5: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: ToMNMmAjn6p5cA4CcaAIWmzfF30pCwZY6Acvra0bHYk=)
6: bjhvb0BbgpYztttOjwclzlXFPK0.roa (hash: vvxA9AxL6k1mLc2qjx+t+3GOkd26vCFzAe2CCZNqNvw=)
7: eoiSFeFECKtcnFf4YtHRnwCPW10.roa (hash: IbPy1Qz2w58diZKLRaNbFHOydlFSH5+9VYYyTRLP2cA=)
8: jgH6u912rK5Xtxpxfif3Cfl9DZ4.roa (hash: t2SsP6gmWCBRP4SsEFRkLirUYBsfe7RvyzM3ohHxmzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:5e:a8:75:5f:6e:f1:56:8d:f0:2e:a0:7d:56:f6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597a01de87e011803f890ae17749020f995f140c
Validity
Not Before: Nov 5 11:01:09 2026 GMT
Not After : Nov 6 11:01:09 2026 GMT
Subject: CN=7a3bac3754f8c8a857257c09f873d16cc0de2ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:09:fe:27:3d:4d:3e:e2:21:48:c8:b3:4d:ec:
b0:44:27:e8:bb:1f:01:10:65:a5:fc:eb:03:3f:d9:
8a:1b:68:0f:ab:d8:3a:bb:8e:be:7f:ff:2d:1e:ba:
16:05:b7:9d:d9:e8:9d:09:81:65:51:74:a9:90:82:
3c:5d:14:78:d1:86:eb:e4:2e:e0:af:50:20:7a:c6:
74:8d:87:0f:9f:ee:13:d7:7c:f3:76:19:1a:0f:11:
84:0c:a7:db:20:36:0b:28:5b:2b:1e:38:d3:94:68:
04:1d:ac:63:b3:52:25:3e:f8:f7:e8:7b:71:f5:b9:
89:fe:a0:43:df:ed:30:ca:3b:a0:91:49:e4:bc:84:
cf:2c:f9:4d:3c:b1:b9:02:01:45:5e:d9:a8:79:6f:
22:8f:40:68:eb:9b:e6:ec:73:4e:0d:e6:e6:2c:b4:
be:64:53:87:b1:e2:9b:4f:4a:0c:63:a6:e6:e1:93:
67:71:6b:33:b6:53:16:51:f8:c2:8c:dd:84:06:b4:
36:d7:c9:14:74:99:24:d0:ee:da:ec:29:b4:b1:08:
3c:bb:27:c0:bd:75:78:6b:ab:29:5e:96:d8:9f:57:
f2:f3:bb:e9:66:c1:3f:90:19:1d:da:38:9c:15:ad:
39:e4:ae:0c:07:e5:ef:3b:4c:81:f7:cd:42:80:0e:
8c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3B:AC:37:54:F8:C8:A8:57:25:7C:09:F8:73:D1:6C:C0:DE:2C:CB
X509v3 Authority Key Identifier:
keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d6:f6:a6:ad:1c:18:0e:9c:12:ef:f1:07:f7:2c:b4:79:d5:
d7:14:fa:ea:60:13:e7:76:f3:46:1a:7d:b2:9f:ec:d0:5a:30:
88:f0:5f:33:de:16:94:a0:cb:c3:da:6f:18:f9:04:df:70:a9:
1f:07:5e:ad:90:ee:68:b5:17:64:2f:48:85:fd:96:39:fd:94:
89:a5:4e:52:e0:e2:6b:67:11:36:f3:52:58:4e:8e:bf:53:41:
c9:06:ba:5f:4a:bb:6a:c5:be:70:55:e4:54:16:49:70:4b:c5:
a5:83:b1:41:14:5d:29:ad:de:15:87:2f:68:56:dc:9f:2d:89:
13:9b:58:4c:ee:3b:aa:20:0c:ae:da:29:15:89:f0:2e:d4:56:
76:cb:bd:4d:5b:75:4c:f7:dd:ab:48:e1:de:bc:2f:92:3c:4a:
9d:39:7a:a1:68:fa:35:b1:cf:3c:6e:bc:6a:6f:1f:e5:b0:c3:
1c:67:01:f0:8e:4b:9e:f7:de:62:41:a0:8c:72:2b:b4:7e:17:
2b:9c:61:9e:57:7e:49:e2:29:47:cb:da:f9:ec:e8:ec:c2:33:
e6:b2:d6:ee:c5:84:5b:ee:a9:7b:c5:ce:07:50:3d:87:1b:77:
68:5d:d7:08:74:2f:b0:b0:b7:d7:df:0e:22:5c:d8:81:63:f7:
33:93:6a:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGrXqh1X27xVo3wLqB9VvaJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5N2EwMWRlODdlMDExODAzZjg5MGFlMTc3NDkwMjBmOTk1
ZjE0MGMwHhcNMjYxMTA1MTEwMTA5WhcNMjYxMTA2MTEwMTA5WjAzMTEwLwYDVQQD
Eyg3YTNiYWMzNzU0ZjhjOGE4NTcyNTdjMDlmODczZDE2Y2MwZGUyY2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQn+Jz1NPuIhSMizTeywRCfoux8B
EGWl/OsDP9mKG2gPq9g6u46+f/8tHroWBbed2eidCYFlUXSpkII8XRR40Ybr5C7g
r1AgesZ0jYcPn+4T13zzdhkaDxGEDKfbIDYLKFsrHjjTlGgEHaxjs1IlPvj36Htx
9bmJ/qBD3+0wyjugkUnkvITPLPlNPLG5AgFFXtmoeW8ij0Bo65vm7HNODebmLLS+
ZFOHseKbT0oMY6bm4ZNncWsztlMWUfjCjN2EBrQ218kUdJkk0O7a7Cm0sQg8uyfA
vXV4a6spXpbYn1fy87vpZsE/kBkd2jicFa055K4MB+XvO0yB981CgA6MMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHo7rDdU+MioVyV8Cfhz0WzA3izLMB8GA1UdIwQY
MBaAFFl6Ad6H4BGAP4kK4XdJAg+ZXxQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yM2VkOWEtMWNhNS00NWVhLTliOGMt
NzM1MzNkZTA5OWMzLzEvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8yM2VkOWEtMWNhNS00NWVhLTliOGMtNzM1MzNkZTA5OWMz
LzEvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntb2pq0c
GA6cEu/xB/cstHnV1xT66mAT53bzRhp9sp/s0FowiPBfM94WlKDLw9pvGPkE33Cp
HwderZDuaLUXZC9Ihf2WOf2UiaVOUuDia2cRNvNSWE6Ov1NByQa6X0q7asW+cFXk
VBZJcEvFpYOxQRRdKa3eFYcvaFbcny2JE5tYTO47qiAMrtopFYnwLtRWdsu9TVt1
TPfdq0jh3rwvkjxKnTl6oWj6NbHPPG68am8f5bDDHGcB8I5LnvfeYkGgjHIrtH4X
K5xhnld+SeIpR8va+ezo7MIz5rLW7sWEW+6pe8XOB1A9hxt3aF3XCHQvsLC3198O
IlzYgWP3M5NqZw==
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:50:54 2026 by rpki-client