Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
File: WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json)
Hash identifier: inb0kjOc5rBy8oRoCzIZ38R57q5nEYlH9Aj4qXgTzgY=
Subject key identifier: B0:54:24:8F:C0:98:BC:65:D8:13:18:42:2D:1B:64:41:13:52:94:AA
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 019CAC10470D886E3829C666444D0768BABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
Manifest number: 185C
Signing time: Mon 02 Mar 2026 01:01:13 +0000
Manifest this update: Mon 02 Mar 2026 01:01:13 +0000
Manifest next update: Tue 03 Mar 2026 01:01:13 +0000
Files and hashes: 1: 0xxG8NnQ1cHH2VuMnnW7a6ZFxBw.roa (hash: puojFO3qYRQJELluaLinsh5BQElMER1Xu8VsxXk+YDI=)
2: 5zxdjqmR3SsJvomZFwYc7Q3lUMg.roa (hash: l4rfQGKBI8UyN9DydN8xFr2Dz594CopVwc6Dn7Had1A=)
3: D-_lyCJV9Sz2bTIt9fGq5z3Su_8.roa (hash: +XSDkotkiwpFYKYiGdXlu1uwl2+rO95QfzY33Skq8BM=)
4: Iy3e1XIi2_TPudoAL1p13sZ86nk.roa (hash: ZD8BYSZqLIml0OJHAuNttBG7W2t2LH3qpbqsZj2++g0=)
5: PDKKcfMfB9Z0mxlt4jm0kcW0fg4.roa (hash: pmHMhVXHouebACUdAsdhssIPiD4oTuxtJJ4bNyh7xWs=)
6: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: qBVTHAKkOJk06mSlfsSdjdAibdzf9CziWQ/kiKTM+DE=)
7: glPJKLzyEtOQ3A0VJ1WR_oikUIA.roa (hash: BJBEqU9Ndqs4BRPdMDfiUT/sHTP2TSMpS+6KJivs8n8=)
8: nEYDmOUwm7vPJUZ93qzJbw-7Glc.roa (hash: htajFRk/mfg74Vz00/Fc7mrofNklSksIG9I2mp6YdcQ=)
9: vfAXikjKgCjq74heQ_lW0h7lKZM.roa (hash: y9mC9ZC9KsL88BTXfe+44waOrp0v1g4TnmU21Hw3eNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:47:0d:88:6e:38:29:c6:66:44:4d:07:68:ba:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Mar 2 01:01:13 2026 GMT
Not After : Mar 3 01:01:13 2026 GMT
Subject: CN=b054248fc098bc65d81318422d1b6441135294aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3c:4f:9f:d7:36:b3:56:b2:ca:c6:d5:38:75:
0c:f6:d7:a9:1a:c2:59:11:3b:ef:22:56:dc:e1:bd:
89:8c:a0:74:0e:ec:23:f3:47:46:db:66:71:22:b7:
b6:50:ec:b5:1d:43:43:50:37:53:1f:81:11:0b:20:
aa:e0:28:1f:8e:61:59:3c:f6:33:4b:fb:7a:30:4b:
a0:9d:75:3b:1d:25:ee:e5:07:fb:20:7b:0f:ee:55:
22:8f:57:11:1c:85:b0:f3:10:66:db:22:3c:5e:df:
24:5a:10:40:f0:69:83:ec:3f:9e:99:05:16:92:08:
18:cf:0e:86:bc:50:9c:3d:11:f3:a2:46:a4:05:6e:
ee:25:8d:5f:34:4e:9b:e8:79:40:9f:3d:4c:61:42:
90:fd:10:43:ae:ae:32:02:dc:00:a3:a2:19:25:0d:
1d:0b:86:05:0b:bc:38:0e:83:2e:c5:ec:c2:88:37:
16:1c:e6:d5:55:d9:1a:ac:85:8a:a8:16:98:17:65:
e1:57:03:a2:58:65:34:7c:43:5c:8e:ce:0f:45:c8:
7b:c4:e8:91:b2:4b:dd:f0:80:66:a3:00:83:38:11:
d3:cc:76:64:df:7e:b9:26:fd:dc:07:3a:b9:f8:b5:
c5:ce:a8:94:98:b5:0d:e8:40:21:80:3b:07:0c:8e:
c5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:54:24:8F:C0:98:BC:65:D8:13:18:42:2D:1B:64:41:13:52:94:AA
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:db:bb:77:6c:ee:2e:07:a1:f4:7c:24:a1:d2:08:a8:65:36:
e6:34:b3:15:ab:f1:4f:e9:b4:0b:70:66:e6:65:97:e1:4d:2d:
9c:12:35:71:fb:15:eb:d9:aa:d9:44:b3:9a:f7:71:ad:d8:bb:
b3:e2:c7:d5:59:17:55:e7:90:44:6a:8e:24:82:ed:f6:d9:30:
26:99:67:c2:fb:70:23:9b:4b:fe:79:e9:a7:42:e8:88:9d:66:
4d:a7:5c:95:42:bf:99:52:cf:70:a5:5a:a2:32:46:46:1b:18:
25:02:2d:fb:07:e9:97:c6:c4:28:e5:b1:e1:bb:e4:c3:07:12:
52:83:59:d6:66:07:42:f3:c0:17:b8:0d:12:92:66:47:66:c9:
92:a9:44:aa:57:c1:9c:9a:75:11:c8:4f:f5:c3:ef:05:d2:c9:
2b:65:63:ba:ae:4e:fa:52:7d:34:e3:67:32:bd:79:a1:a6:9f:
1c:ea:3b:83:5a:5d:9a:03:43:68:f8:e0:42:c1:15:81:5c:36:
dd:34:23:e1:43:8c:ca:e2:96:00:eb:86:8a:19:fc:10:84:b4:
ff:ac:e2:c6:ed:ae:c7:28:d4:6f:1c:fe:ad:0c:29:4b:f6:ef:
c9:db:9d:c6:10:2d:52:66:b5:bb:79:1a:01:4d:7c:9e:13:b1:
b4:19:40:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:30 2026 by rpki-client