Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
File: WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json)
Hash identifier: HjvbQAXYFIcJt+iudTIGB9ElePczpyclLzx0ddhs2G4=
Subject key identifier: 75:DA:F7:DC:A6:16:DD:3C:AC:83:93:93:3A:D5:F8:37:76:33:69:FC
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial: 01A0BCF97BBC66DEDB75A6466FD59CDB8633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
Manifest number: 17C1
Signing time: Sun 20 Sep 2026 04:01:01 +0000
Manifest this update: Sun 20 Sep 2026 04:01:01 +0000
Manifest next update: Mon 21 Sep 2026 04:01:01 +0000
Files and hashes: 1: 1RuzsOoiPTgqsuSzzAU9YdpD_xE.roa (hash: Fsh9osUtIPyPkM6syYXVCCskaMH4p0nvyx/Ce7UJowo=)
2: FuFk1abxIFK2Ejav-XvLTSDuMQw.roa (hash: 0xnqZLkHCC49vVlWKGLKg1BEJ0gcvfzLoWavQfMGkDg=)
3: URu6RbbpNeggkq99HoBQq0K-CGw.roa (hash: SglHd7je2yZY5MNS1/0/uqc+KTjzW8LFZ4Gz7SHINKQ=)
4: UkVdKWIJtxN1ZPO561wg1yvlmnU.roa (hash: T1UGvaY+sPgOyfHIoNQmJTNfshFbXNmoAxXGY7h2ENY=)
5: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: WUIGP1+pwAR7tynNUqH3ksSIKyo0lN2G4CDS4NP82dw=)
6: bjhvb0BbgpYztttOjwclzlXFPK0.roa (hash: vvxA9AxL6k1mLc2qjx+t+3GOkd26vCFzAe2CCZNqNvw=)
7: jgH6u912rK5Xtxpxfif3Cfl9DZ4.roa (hash: t2SsP6gmWCBRP4SsEFRkLirUYBsfe7RvyzM3ohHxmzE=)
8: sj-ab-RcHql4I59TCTsyMkUD6vg.roa (hash: VE0oA0NLUA2NKVotc1jXBr68T3tf7XY/p7hOR23C2ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:f9:7b:bc:66:de:db:75:a6:46:6f:d5:9c:db:86:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597a01de87e011803f890ae17749020f995f140c
Validity
Not Before: Sep 20 04:01:01 2026 GMT
Not After : Sep 21 04:01:01 2026 GMT
Subject: CN=75daf7dca616dd3cac8393933ad5f837763369fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:81:78:b1:b5:41:68:d8:8f:8c:91:f1:ac:c3:
2a:44:05:9d:fb:0d:22:ed:9a:fc:a0:47:48:c3:d4:
86:d1:bc:f9:10:41:43:95:a7:d5:55:3b:0c:c7:b1:
a0:ec:51:cb:73:9e:72:de:de:cc:40:ff:6a:eb:88:
c5:3f:a5:5f:30:a6:e7:f1:29:2f:a5:a0:04:45:b9:
e5:98:57:35:bf:91:a1:c7:ea:ef:65:ca:57:34:8f:
0f:a8:78:27:9f:2a:ce:f2:4b:ca:a3:a2:12:b9:21:
f0:f2:9c:bc:18:c6:83:49:56:a8:50:38:5a:23:2e:
ae:30:9e:b2:dd:26:28:73:dc:ad:54:0c:15:20:6d:
da:ca:24:e8:76:05:31:9c:a2:11:f2:ef:5a:ee:78:
61:e5:04:4d:32:24:78:9c:d0:92:c2:47:b1:7f:0e:
19:10:2e:7a:11:ac:22:c1:8a:6c:81:94:77:19:0f:
eb:11:45:00:72:bc:80:13:b5:d6:6f:76:94:b4:65:
3b:29:7b:30:20:fd:9f:78:23:6e:7c:43:fd:53:ec:
ab:2a:ac:a2:eb:42:3e:b8:c6:56:53:d2:42:48:f3:
cb:9a:4b:ab:9a:b1:43:1f:17:ef:ec:4a:a5:4f:13:
1f:c8:f5:dc:5c:6d:bd:95:c7:95:fd:fc:f6:da:41:
c3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DA:F7:DC:A6:16:DD:3C:AC:83:93:93:3A:D5:F8:37:76:33:69:FC
X509v3 Authority Key Identifier:
keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:be:d6:c5:34:f8:f4:0c:f2:1a:b8:d2:f0:83:12:5e:08:3c:
34:f2:a6:8a:9b:f0:d8:3d:cd:1f:a4:69:98:d2:98:7f:81:c3:
6e:34:cd:e3:80:6e:61:6a:81:ab:5c:1f:5a:ec:81:10:bb:30:
03:08:44:d3:d7:28:c4:9d:86:6a:40:70:69:9e:69:29:49:88:
0e:02:03:50:15:b5:eb:e3:8d:2d:6a:96:a1:be:02:31:79:65:
86:d0:ca:d5:37:89:f8:e1:3f:dc:e0:4d:ca:52:86:f6:5d:5e:
22:e1:6e:11:4c:bd:04:82:cf:23:7f:4d:de:67:d8:64:8e:f4:
d6:a7:dd:4e:17:00:d9:6f:87:d2:4f:97:22:76:cb:56:9d:01:
9e:50:b2:fc:0d:5b:ee:aa:e3:b0:fe:21:87:0d:15:d1:65:11:
81:84:59:02:d8:d0:0c:7e:16:e8:20:22:28:d9:1f:e6:5e:9c:
98:be:5a:3f:74:c7:e8:55:d1:aa:c6:a0:01:22:e9:9a:7e:72:
3e:67:5e:0b:70:00:3b:84:3f:05:18:16:5c:fb:f3:11:b0:c0:
be:7c:f8:df:79:5c:cd:79:4c:a5:79:82:a7:8c:4d:21:ab:72:
2e:7d:bb:77:60:59:d8:4e:72:74:07:8c:ad:44:a3:bc:c2:12:
2f:2e:14:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC8+Xu8Zt7bdaZGb9Wc24YzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5N2EwMWRlODdlMDExODAzZjg5MGFlMTc3NDkwMjBmOTk1
ZjE0MGMwHhcNMjYwOTIwMDQwMTAxWhcNMjYwOTIxMDQwMTAxWjAzMTEwLwYDVQQD
Eyg3NWRhZjdkY2E2MTZkZDNjYWM4MzkzOTMzYWQ1ZjgzNzc2MzM2OWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YF4sbVBaNiPjJHxrMMqRAWd+w0i
7Zr8oEdIw9SG0bz5EEFDlafVVTsMx7Gg7FHLc55y3t7MQP9q64jFP6VfMKbn8Skv
paAERbnlmFc1v5Ghx+rvZcpXNI8PqHgnnyrO8kvKo6ISuSHw8py8GMaDSVaoUDha
Iy6uMJ6y3SYoc9ytVAwVIG3ayiTodgUxnKIR8u9a7nhh5QRNMiR4nNCSwkexfw4Z
EC56EawiwYpsgZR3GQ/rEUUAcryAE7XWb3aUtGU7KXswIP2feCNufEP9U+yrKqyi
60I+uMZWU9JCSPPLmkurmrFDHxfv7EqlTxMfyPXcXG29lceV/fz22kHDWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXa99ymFt08rIOTkzrV+Dd2M2n8MB8GA1UdIwQY
MBaAFFl6Ad6H4BGAP4kK4XdJAg+ZXxQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yM2VkOWEtMWNhNS00NWVhLTliOGMt
NzM1MzNkZTA5OWMzLzEvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8yM2VkOWEtMWNhNS00NWVhLTliOGMtNzM1MzNkZTA5OWMz
LzEvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0r7WxTT4
9AzyGrjS8IMSXgg8NPKmipvw2D3NH6RpmNKYf4HDbjTN44BuYWqBq1wfWuyBELsw
AwhE09coxJ2GakBwaZ5pKUmIDgIDUBW16+ONLWqWob4CMXllhtDK1TeJ+OE/3OBN
ylKG9l1eIuFuEUy9BILPI39N3mfYZI701qfdThcA2W+H0k+XInbLVp0BnlCy/A1b
7qrjsP4hhw0V0WURgYRZAtjQDH4W6CAiKNkf5l6cmL5aP3TH6FXRqsagASLpmn5y
PmdeC3AAO4Q/BRgWXPvzEbDAvnz433lczXlMpXmCp4xNIatyLn27d2BZ2E5ydAeM
rUSjvMISLy4UqQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:36:39 2026 by rpki-client