Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
File: WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json)
Hash identifier: PU7UJMvjgj5HoplHNNXv4JoV9f4/Bd5MxphrnIOYVkQ=
Subject key identifier: D5:A0:24:B4:7B:5C:9E:4C:7F:DC:26:58:1E:B9:97:59:E8:38:6B:33
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial: 019CAB34596ED1F832765EB20FC9043B0F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
Manifest number: 15A2
Signing time: Sun 01 Mar 2026 21:01:00 +0000
Manifest this update: Sun 01 Mar 2026 21:01:00 +0000
Manifest next update: Mon 02 Mar 2026 21:01:00 +0000
Files and hashes: 1: 01R0I9DHDPHcmxrcTn54aUYrxU4.roa (hash: LZW1SFZial6vNqkBHwqDupXnYLh58eQuRcWzvrTL1pI=)
2: 1RuzsOoiPTgqsuSzzAU9YdpD_xE.roa (hash: Fsh9osUtIPyPkM6syYXVCCskaMH4p0nvyx/Ce7UJowo=)
3: URu6RbbpNeggkq99HoBQq0K-CGw.roa (hash: SglHd7je2yZY5MNS1/0/uqc+KTjzW8LFZ4Gz7SHINKQ=)
4: UkVdKWIJtxN1ZPO561wg1yvlmnU.roa (hash: T1UGvaY+sPgOyfHIoNQmJTNfshFbXNmoAxXGY7h2ENY=)
5: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: Q71tBrRegnSyva/CP7pluJdvDF1pfsjcUePrEWxJF3o=)
6: bjhvb0BbgpYztttOjwclzlXFPK0.roa (hash: vvxA9AxL6k1mLc2qjx+t+3GOkd26vCFzAe2CCZNqNvw=)
7: sj-ab-RcHql4I59TCTsyMkUD6vg.roa (hash: VE0oA0NLUA2NKVotc1jXBr68T3tf7XY/p7hOR23C2ks=)
8: uNBCqgPm9OGK31TBmTo_MAC1yZU.roa (hash: QNpQXcsFAXHCdiWuXRp1NnyNLbpNgci4N8tXC8HHacM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:59:6e:d1:f8:32:76:5e:b2:0f:c9:04:3b:0f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597a01de87e011803f890ae17749020f995f140c
Validity
Not Before: Mar 1 21:01:00 2026 GMT
Not After : Mar 2 21:01:00 2026 GMT
Subject: CN=d5a024b47b5c9e4c7fdc26581eb99759e8386b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:e1:a1:dc:19:f6:58:e2:b1:b6:82:3c:f1:
5d:3a:38:44:19:b7:7b:89:c1:e9:08:51:31:ea:3b:
4a:13:07:32:a5:1e:d2:0a:0e:17:0d:ac:35:cf:04:
53:e4:85:01:6c:f8:be:80:c2:2e:16:7f:d1:0e:1d:
b6:72:92:52:85:e5:57:ae:02:8e:37:eb:2b:36:47:
87:96:be:45:82:e4:f3:96:eb:0f:4a:2e:47:cb:b6:
32:7a:5a:a2:89:72:9c:69:b0:87:ff:bb:5c:be:fd:
11:7f:7b:aa:08:a4:6e:64:75:99:6d:9c:8d:61:94:
aa:0c:56:1f:a7:34:3d:c8:e6:93:ab:e1:c1:89:b6:
ca:75:5f:57:09:cd:d5:28:d3:60:17:98:3d:9c:56:
63:16:f4:05:d0:25:68:1f:ae:fe:65:11:5b:5d:4e:
cd:07:1a:51:4c:25:54:39:57:93:33:a2:a1:a2:3b:
e7:91:37:43:3c:03:90:0c:5a:07:a2:6a:13:fa:05:
dd:f5:2e:67:91:45:6e:2d:e7:5d:4f:f5:c9:5f:4f:
90:c6:8a:0f:ec:65:82:14:c9:2e:ef:33:1c:42:a3:
f5:64:11:4d:46:5a:77:85:ae:db:ae:89:9f:a3:2c:
4c:38:1f:c3:92:a2:e0:be:bc:a9:b6:e5:2b:c4:01:
f9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A0:24:B4:7B:5C:9E:4C:7F:DC:26:58:1E:B9:97:59:E8:38:6B:33
X509v3 Authority Key Identifier:
keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:21:3e:d0:0c:09:04:d6:3f:59:2d:76:bb:ef:28:26:b2:79:
3b:d8:b2:5d:21:13:fc:75:88:15:b9:10:d0:3a:1b:c5:c6:28:
1a:cd:58:47:ca:a9:e2:6d:a2:57:26:46:9d:71:75:30:19:b8:
40:a4:d8:26:8a:c5:8a:30:df:26:c9:47:fa:ff:ec:8f:9a:f0:
e5:35:a1:2f:c3:da:f7:68:e4:46:cf:22:38:e2:8a:2b:f5:a3:
3c:44:79:5c:e1:e5:8b:46:1c:d0:2b:18:44:57:33:ea:6a:24:
56:35:d6:27:fa:67:99:3f:71:ea:ff:30:cb:e9:76:0f:eb:11:
24:7c:0c:ca:19:d9:d5:d0:ff:a6:82:ba:94:b8:38:0c:74:a0:
ac:0e:e3:9d:ba:70:b1:bb:63:27:c7:f2:94:6a:f7:0a:20:7a:
63:c8:89:46:3d:c0:c7:3a:d6:1b:00:de:6f:57:08:2a:c1:be:
d1:30:47:26:31:3f:26:ab:77:56:22:87:cc:0d:bb:10:9b:7f:
41:ab:c1:f6:f6:4c:e0:2c:cc:a4:92:60:f2:fd:09:cd:4b:5b:
e4:64:a0:84:a6:b5:81:88:4b:0d:82:15:6a:5c:4a:ea:02:47:
98:b1:37:2c:7b:fe:ea:f2:b9:5c:b1:a9:06:aa:5b:42:2a:56:
04:91:40:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:59 2026 by rpki-client