Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
File: WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json)
Hash identifier: 6FnXrvgPax+MhM7LBeF+INWW5hy80j2ipwDyPnsBhi0=
Subject key identifier: CD:86:F9:1D:29:EB:22:31:86:03:75:11:22:04:03:04:35:44:4F:78
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial: 019FA906B87883A2BA3A7832BCD2778BCE8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
Manifest number: 172F
Signing time: Tue 28 Jul 2026 14:00:17 +0000
Manifest this update: Tue 28 Jul 2026 14:00:17 +0000
Manifest next update: Wed 29 Jul 2026 14:00:17 +0000
Files and hashes: 1: 01R0I9DHDPHcmxrcTn54aUYrxU4.roa (hash: LZW1SFZial6vNqkBHwqDupXnYLh58eQuRcWzvrTL1pI=)
2: 1RuzsOoiPTgqsuSzzAU9YdpD_xE.roa (hash: Fsh9osUtIPyPkM6syYXVCCskaMH4p0nvyx/Ce7UJowo=)
3: URu6RbbpNeggkq99HoBQq0K-CGw.roa (hash: SglHd7je2yZY5MNS1/0/uqc+KTjzW8LFZ4Gz7SHINKQ=)
4: UkVdKWIJtxN1ZPO561wg1yvlmnU.roa (hash: T1UGvaY+sPgOyfHIoNQmJTNfshFbXNmoAxXGY7h2ENY=)
5: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: y0SOY/i1cs0xjsHSnfFzrpnMNhqNnQi7exFhzxoqgCg=)
6: bjhvb0BbgpYztttOjwclzlXFPK0.roa (hash: vvxA9AxL6k1mLc2qjx+t+3GOkd26vCFzAe2CCZNqNvw=)
7: jgH6u912rK5Xtxpxfif3Cfl9DZ4.roa (hash: t2SsP6gmWCBRP4SsEFRkLirUYBsfe7RvyzM3ohHxmzE=)
8: sj-ab-RcHql4I59TCTsyMkUD6vg.roa (hash: VE0oA0NLUA2NKVotc1jXBr68T3tf7XY/p7hOR23C2ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:b8:78:83:a2:ba:3a:78:32:bc:d2:77:8b:ce:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597a01de87e011803f890ae17749020f995f140c
Validity
Not Before: Jul 28 14:00:17 2026 GMT
Not After : Jul 29 14:00:17 2026 GMT
Subject: CN=cd86f91d29eb2231860375112204030435444f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cf:20:26:9e:d4:2d:71:7c:a0:3b:6b:6b:f4:
4a:e3:06:58:d6:03:fe:10:2a:18:d6:7a:21:16:84:
3f:55:6f:ea:11:1e:ab:da:40:70:1e:be:8e:88:e6:
f7:13:30:dc:9e:1b:d0:54:ff:7d:a1:38:fe:ae:91:
5b:b0:0b:68:ae:38:22:78:28:ed:c5:15:90:41:b6:
29:fd:5d:9a:a1:bc:8a:e7:0f:96:6f:2a:6c:ac:22:
89:1c:c6:53:c8:03:a4:43:c2:ca:5d:68:fa:c4:91:
a7:a9:7a:6a:08:f8:c5:7d:cc:67:5c:8f:5b:33:90:
0c:f6:1f:50:94:f4:ba:1c:6c:e9:88:15:8c:c7:a4:
31:b5:0a:e4:c1:5e:c9:9c:0f:3d:a1:97:db:b5:50:
60:08:ce:4e:b9:80:78:0a:89:3a:b3:fd:07:13:fe:
6a:e3:5b:43:4c:04:0f:c9:19:83:79:c3:6b:a8:99:
40:66:53:1f:76:53:6e:ee:4f:d8:b2:9f:95:f0:8d:
e5:2e:a9:c7:8d:0f:87:e2:44:6c:1d:02:33:bf:df:
e3:56:0c:e7:76:e5:6d:de:a4:a9:aa:66:f1:8e:7f:
77:ae:4c:25:e1:be:3c:38:75:da:76:4f:8f:0f:ef:
c2:f4:7a:43:b1:1a:0c:75:21:76:b8:b6:26:0d:1f:
9f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:86:F9:1D:29:EB:22:31:86:03:75:11:22:04:03:04:35:44:4F:78
X509v3 Authority Key Identifier:
keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:df:20:8a:b8:a5:fa:9e:68:5c:b1:21:8b:11:f9:c1:f2:29:
54:0d:23:aa:5a:a9:9a:1a:12:32:ae:bc:7d:9d:3a:34:4a:42:
29:ca:fe:a0:c7:60:1e:23:61:ac:5e:8f:42:0d:98:7b:7b:0d:
26:bb:62:63:ec:ff:a3:17:53:9d:cd:e4:ca:3f:b7:cf:9a:6f:
d3:d9:61:c1:f6:9f:43:27:50:09:d8:d7:f4:3f:1b:7c:b2:2e:
4d:7a:04:91:64:45:73:1e:07:fd:13:83:d2:e7:28:68:26:7d:
92:68:71:e4:ad:9c:f1:64:7d:68:a8:cd:64:78:0e:83:12:e3:
65:8a:12:35:ec:1f:69:f5:8b:52:0a:1a:52:80:dd:47:6e:f6:
ab:a5:8f:98:29:01:eb:bc:e8:94:a6:ca:0e:fe:f6:02:4c:ba:
1e:c4:b9:26:ab:e2:5f:36:bd:bb:24:e6:32:6b:e2:0b:2c:b7:
73:92:4e:19:7e:7f:7c:69:ca:e7:d7:fc:aa:2b:cb:7a:0c:ed:
44:57:52:06:e0:df:c1:3e:91:a5:5c:41:ca:cb:3f:5c:bb:b1:
4e:59:66:61:52:34:c7:76:90:33:dc:cb:00:f9:f5:49:a0:0a:
3c:f4:20:ed:0a:0e:f5:c1:44:af:16:c9:0d:f5:33:7f:66:42:
7c:14:da:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:32:10 2026 by rpki-client