
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
File: WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json)
Hash identifier: HFlHRoiNbPnTrTqiuANRcQS6gOTjqH1hbVaRwCg5IEg=
Subject key identifier: 96:1E:D2:FB:BC:B9:CB:34:48:B2:2C:B0:C1:1B:D5:C9:D0:15:F0:23
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 01A0C58E0E55FA34D8E82C25C2E1D6D38699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
Manifest number: 1A83
Signing time: Mon 21 Sep 2026 20:00:16 +0000
Manifest this update: Mon 21 Sep 2026 20:00:16 +0000
Manifest next update: Tue 22 Sep 2026 20:00:16 +0000
Files and hashes: 1: 0xxG8NnQ1cHH2VuMnnW7a6ZFxBw.roa (hash: puojFO3qYRQJELluaLinsh5BQElMER1Xu8VsxXk+YDI=)
2: D-_lyCJV9Sz2bTIt9fGq5z3Su_8.roa (hash: +XSDkotkiwpFYKYiGdXlu1uwl2+rO95QfzY33Skq8BM=)
3: Iy3e1XIi2_TPudoAL1p13sZ86nk.roa (hash: ZD8BYSZqLIml0OJHAuNttBG7W2t2LH3qpbqsZj2++g0=)
4: WC3FelzMT51Jd0FzDfTcBvQbz0c.roa (hash: vMkqwwuueWTkKVbMn75esnOuu/9njTR5uN3u1wI+lvs=)
5: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: h5nMSATnQa98BeiYsLlut7v/8qjz6MhiyOpdLuV2cLs=)
6: mbEhJhu8tsAzWhHE4rl5peqQOF8.roa (hash: Nn+Cgu7LOR6nMODgKh9QXXY7i8XiOMkzfzJkJHtgkLg=)
7: sMBZ3vjGEUtM40NjdvzPcZTnf50.roa (hash: crm+/1m+9HQAnmFgGaM7ygbKfdqnJUcmlOnOnrROKus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:0e:55:fa:34:d8:e8:2c:25:c2:e1:d6:d3:86:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Sep 21 20:00:16 2026 GMT
Not After : Sep 22 20:00:16 2026 GMT
Subject: CN=961ed2fbbcb9cb3448b22cb0c11bd5c9d015f023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8f:a7:0b:2f:83:2a:01:81:46:bf:3c:a7:82:
41:55:95:f7:90:fc:23:56:fa:35:e8:91:f2:da:f8:
41:f4:33:78:0a:02:d4:1c:90:da:2c:00:97:65:ca:
2d:65:e7:2c:13:a8:b5:bf:ab:ab:3e:8d:f8:dd:bf:
a3:84:ca:82:51:37:9c:27:1b:7e:76:a8:09:2e:b2:
85:1b:53:fa:2c:37:8b:f2:8d:a9:db:96:dc:92:8d:
a7:38:91:3f:64:21:eb:3f:2c:af:97:d3:3e:79:8d:
8f:9a:ac:4c:b8:90:e9:cf:24:7c:3c:c4:02:7c:d3:
03:5a:69:e5:1f:1f:49:2a:7c:26:05:c9:77:47:de:
03:b7:b1:e7:26:10:45:66:b6:87:c2:10:c4:96:85:
bc:46:39:db:6f:59:df:84:02:38:60:69:d0:f1:e6:
57:03:6d:21:9d:f3:07:da:5b:01:f1:9c:ba:2d:9f:
ca:7b:fa:67:01:48:b0:ab:a6:70:0f:23:60:87:c2:
f9:df:c5:0b:25:25:ff:b8:b4:2a:5e:16:cd:80:e7:
b8:98:21:e9:58:df:ed:a0:88:6b:1a:58:13:76:07:
7a:6b:1a:61:83:64:51:13:94:6f:76:a8:9f:dd:eb:
cb:e9:22:e7:2b:c0:3c:c7:b5:71:1b:63:22:2a:61:
20:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1E:D2:FB:BC:B9:CB:34:48:B2:2C:B0:C1:1B:D5:C9:D0:15:F0:23
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8c:e4:b8:92:16:72:7e:f5:bd:c3:1d:97:cd:41:a8:82:60:
ef:71:71:1a:b1:2d:ec:4a:2f:3c:26:74:41:f9:ce:c4:6d:61:
23:76:7c:7f:2a:16:83:41:70:9e:97:7f:94:ce:13:24:12:68:
b3:42:d4:c8:58:bb:d1:5c:c0:67:c2:cf:ef:56:1b:04:1b:04:
75:82:8b:ca:5a:7a:97:bb:25:fa:0e:71:a0:80:a8:ee:83:91:
6f:c0:3a:22:2d:8e:74:ca:43:ca:82:79:c1:90:06:f8:74:dc:
d8:8e:c9:c7:12:a5:16:69:d3:39:2f:6a:7b:ea:61:95:e8:5f:
a3:62:0c:00:2a:04:0a:de:54:0a:7b:66:79:d2:3a:d3:16:44:
76:e1:66:b7:ce:b1:68:68:ce:08:28:58:57:40:f1:3c:72:4b:
48:bd:cd:01:a3:ed:fc:21:2e:ba:d7:e5:30:5e:59:bb:2a:d8:
89:37:a5:5e:61:b1:02:cd:2c:75:4f:4a:aa:4c:1c:6a:a4:50:
82:96:c8:5a:0e:b6:53:e3:e9:89:d1:72:b0:dc:d1:7d:d7:7f:
dd:81:90:a4:b5:30:d8:3b:63:64:4a:89:70:6f:7b:dd:54:b0:
8d:85:2d:dc:5d:20:de:6b:07:2d:06:84:b4:95:cf:33:97:ca:
04:d0:db:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFjg5V+jTY6CwlwuHW04aZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MmU3YzFmMjM5NGMzZTNhYWE4Y2NiNjQ3ZmQ4MzY3MWQ2
MDk4YjcwHhcNMjYwOTIxMjAwMDE2WhcNMjYwOTIyMjAwMDE2WjAzMTEwLwYDVQQD
Eyg5NjFlZDJmYmJjYjljYjM0NDhiMjJjYjBjMTFiZDVjOWQwMTVmMDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7I+nCy+DKgGBRr88p4JBVZX3kPwj
Vvo16JHy2vhB9DN4CgLUHJDaLACXZcotZecsE6i1v6urPo343b+jhMqCUTecJxt+
dqgJLrKFG1P6LDeL8o2p25bcko2nOJE/ZCHrPyyvl9M+eY2PmqxMuJDpzyR8PMQC
fNMDWmnlHx9JKnwmBcl3R94Dt7HnJhBFZraHwhDEloW8Rjnbb1nfhAI4YGnQ8eZX
A20hnfMH2lsB8Zy6LZ/Ke/pnAUiwq6ZwDyNgh8L538ULJSX/uLQqXhbNgOe4mCHp
WN/toIhrGlgTdgd6axphg2RRE5Rvdqif3evL6SLnK8A8x7VxG2MiKmEg3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYe0vu8ucs0SLIssMEb1cnQFfAjMB8GA1UdIwQY
MBaAFFkufB8jlMPjqqjMtkf9g2cdYJi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAt
NDQzYmU2M2ZjMTIzLzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAtNDQzYmU2M2ZjMTIz
LzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPozkuJIW
cn71vcMdl81BqIJg73FxGrEt7EovPCZ0QfnOxG1hI3Z8fyoWg0Fwnpd/lM4TJBJo
s0LUyFi70VzAZ8LP71YbBBsEdYKLylp6l7sl+g5xoICo7oORb8A6Ii2OdMpDyoJ5
wZAG+HTc2I7JxxKlFmnTOS9qe+phlehfo2IMACoECt5UCntmedI60xZEduFmt86x
aGjOCChYV0DxPHJLSL3NAaPt/CEuutflMF5ZuyrYiTelXmGxAs0sdU9KqkwcaqRQ
gpbIWg62U+PpidFysNzRfdd/3YGQpLUw2DtjZEqJcG973VSwjYUt3F0g3msHLQaE
tJXPM5fKBNDbAQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:08:19 2026 by rpki-client