Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
File: WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json)
Hash identifier: 81TYG68GUTMJWf8+mVnkY87NOvz8QRtgx79okx85ZjM=
Subject key identifier: 94:3A:74:32:48:2C:30:1B:89:59:6F:DC:19:5E:E0:E8:A9:72:D9:3E
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial: 019EBF5AC996E73418B3D7940A4BCA76CC77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
Manifest number: 16B6
Signing time: Sat 13 Jun 2026 05:00:58 +0000
Manifest this update: Sat 13 Jun 2026 05:00:58 +0000
Manifest next update: Sun 14 Jun 2026 05:00:58 +0000
Files and hashes: 1: 01R0I9DHDPHcmxrcTn54aUYrxU4.roa (hash: LZW1SFZial6vNqkBHwqDupXnYLh58eQuRcWzvrTL1pI=)
2: 1RuzsOoiPTgqsuSzzAU9YdpD_xE.roa (hash: Fsh9osUtIPyPkM6syYXVCCskaMH4p0nvyx/Ce7UJowo=)
3: URu6RbbpNeggkq99HoBQq0K-CGw.roa (hash: SglHd7je2yZY5MNS1/0/uqc+KTjzW8LFZ4Gz7SHINKQ=)
4: UkVdKWIJtxN1ZPO561wg1yvlmnU.roa (hash: T1UGvaY+sPgOyfHIoNQmJTNfshFbXNmoAxXGY7h2ENY=)
5: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: lk/f2uH8AZlq/DoaDF1np7TCBu1ESfQym3e+cXJRIxg=)
6: bjhvb0BbgpYztttOjwclzlXFPK0.roa (hash: vvxA9AxL6k1mLc2qjx+t+3GOkd26vCFzAe2CCZNqNvw=)
7: jgH6u912rK5Xtxpxfif3Cfl9DZ4.roa (hash: t2SsP6gmWCBRP4SsEFRkLirUYBsfe7RvyzM3ohHxmzE=)
8: sj-ab-RcHql4I59TCTsyMkUD6vg.roa (hash: VE0oA0NLUA2NKVotc1jXBr68T3tf7XY/p7hOR23C2ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:c9:96:e7:34:18:b3:d7:94:0a:4b:ca:76:cc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597a01de87e011803f890ae17749020f995f140c
Validity
Not Before: Jun 13 05:00:58 2026 GMT
Not After : Jun 14 05:00:58 2026 GMT
Subject: CN=943a7432482c301b89596fdc195ee0e8a972d93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:88:83:75:84:4f:ec:1f:f3:a9:4d:6b:67:
b8:b8:f6:71:22:d2:25:6c:40:22:4b:b9:52:bd:2e:
e7:84:19:82:af:04:8b:08:b3:8a:38:e7:aa:00:d3:
2f:7f:99:4d:a8:93:6f:19:a1:6d:a4:72:3b:98:89:
36:c3:a4:2f:49:2e:3f:77:82:bb:54:55:44:e7:de:
a2:51:f0:eb:03:57:f5:86:b0:a6:c6:98:58:c8:22:
f4:40:3f:c5:6a:49:6f:bc:39:ba:66:63:a0:cf:37:
74:ea:65:bd:6c:c0:4d:8c:c5:b3:82:56:17:8a:4f:
6e:a3:fe:a9:51:44:23:e2:7d:fa:33:e2:9b:cd:26:
23:86:0f:ab:9f:a8:19:4a:d3:e9:16:3c:a7:37:aa:
29:91:05:a6:92:53:a3:b1:89:ae:fb:ab:41:d0:0a:
ef:35:cb:39:d3:5f:13:8e:51:29:c9:0d:88:12:2a:
b7:aa:1e:6e:be:68:1a:18:cf:79:97:16:dd:7f:51:
a4:bf:c0:a4:a0:dc:b6:c9:fd:fa:d3:25:5b:18:49:
3e:4e:6c:38:9e:07:3c:e3:45:79:c7:79:02:b7:a0:
92:8a:84:b7:c2:8e:bb:1c:86:ca:fa:3e:01:95:cb:
95:46:ea:84:24:34:ed:68:de:68:be:25:c2:51:e9:
49:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3A:74:32:48:2C:30:1B:89:59:6F:DC:19:5E:E0:E8:A9:72:D9:3E
X509v3 Authority Key Identifier:
keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:98:5b:bf:ff:f6:10:f4:f6:f5:55:92:9d:cb:d5:57:1a:34:
10:08:ef:a1:f7:72:60:cd:a8:20:44:af:56:1b:ea:e4:7c:84:
a9:c2:e4:ac:e1:7f:1b:24:ec:b2:82:3c:1c:c0:7b:4a:9c:fb:
d1:c4:ce:90:8c:cd:a9:ef:31:dd:75:69:24:6e:d8:09:10:a2:
db:4f:87:40:37:b9:ca:f2:7a:07:55:74:4d:ee:2e:48:43:70:
85:35:6e:c8:a2:55:58:1f:0c:97:31:b7:86:eb:aa:5a:1a:4a:
8c:48:66:58:0b:ac:b2:a6:7d:80:90:d1:ce:ef:10:c0:cb:09:
e7:e5:8e:f9:ab:f5:e1:f5:88:f1:6d:d7:df:f7:9d:6a:6b:14:
d8:fb:b2:43:d4:4d:a2:73:b1:f0:d4:40:06:75:65:8a:3d:3a:
03:db:ad:04:cb:58:65:16:92:01:85:40:cf:ef:d8:e0:fe:1c:
d1:92:31:54:64:02:02:76:77:06:a9:59:e9:3c:4d:dd:2c:ed:
08:f1:9c:e5:94:f6:ee:32:80:d2:16:ac:1f:99:0a:84:55:df:
50:f9:11:2f:93:a9:4e:44:ee:fd:10:34:37:74:e8:9d:88:b3:
de:ee:ea:82:b4:05:b9:25:2e:b9:97:f3:d1:e0:7d:0a:87:d5:
1c:6a:36:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:49:11 2026 by rpki-client