Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
File: WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json)
Hash identifier: 4W857KsiTp8q6wMDhEl+dwqzeMHHfoJ8hRL3tfoX3LU=
Subject key identifier: 96:1F:9E:0B:60:F6:78:C3:6B:FB:47:5B:85:DE:DA:40:3D:18:6C:D4
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 019FAAF52AD67C47B771D214FEA5A3F77D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
Manifest number: 19ED
Signing time: Tue 28 Jul 2026 23:00:21 +0000
Manifest this update: Tue 28 Jul 2026 23:00:21 +0000
Manifest next update: Wed 29 Jul 2026 23:00:21 +0000
Files and hashes: 1: 0xxG8NnQ1cHH2VuMnnW7a6ZFxBw.roa (hash: puojFO3qYRQJELluaLinsh5BQElMER1Xu8VsxXk+YDI=)
2: 33oWgdjK_YQ5RE1HBLu9w5DuUys.roa (hash: YFfSyIkQ8r5EeIE2nKtHSYGUbZnDPhnEtmdTQuVMLZA=)
3: 5zxdjqmR3SsJvomZFwYc7Q3lUMg.roa (hash: l4rfQGKBI8UyN9DydN8xFr2Dz594CopVwc6Dn7Had1A=)
4: D-_lyCJV9Sz2bTIt9fGq5z3Su_8.roa (hash: +XSDkotkiwpFYKYiGdXlu1uwl2+rO95QfzY33Skq8BM=)
5: Iy3e1XIi2_TPudoAL1p13sZ86nk.roa (hash: ZD8BYSZqLIml0OJHAuNttBG7W2t2LH3qpbqsZj2++g0=)
6: WC3FelzMT51Jd0FzDfTcBvQbz0c.roa (hash: vMkqwwuueWTkKVbMn75esnOuu/9njTR5uN3u1wI+lvs=)
7: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: Q/HQUH1o9u2l4Cx5zwetESnOj11o9AbtlRv5qpq4FMw=)
8: mbEhJhu8tsAzWhHE4rl5peqQOF8.roa (hash: Nn+Cgu7LOR6nMODgKh9QXXY7i8XiOMkzfzJkJHtgkLg=)
9: nEYDmOUwm7vPJUZ93qzJbw-7Glc.roa (hash: htajFRk/mfg74Vz00/Fc7mrofNklSksIG9I2mp6YdcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:2a:d6:7c:47:b7:71:d2:14:fe:a5:a3:f7:7d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Jul 28 23:00:21 2026 GMT
Not After : Jul 29 23:00:21 2026 GMT
Subject: CN=961f9e0b60f678c36bfb475b85deda403d186cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:be:c3:f0:8a:f9:f1:7b:80:eb:3c:1f:c0:e3:
b0:0b:65:aa:1f:d6:89:5b:94:d8:49:68:5b:ba:a7:
c6:85:c9:c0:a9:1f:12:90:45:89:89:ae:04:f5:91:
a8:0d:f1:03:55:cb:7a:05:df:80:27:a9:d8:f5:4e:
fe:87:a9:ff:4f:1a:05:8b:de:8c:c5:ce:04:d0:87:
24:46:44:6b:3e:4c:f2:68:ee:64:ee:db:cc:0f:ac:
f6:cf:a2:6e:18:87:e1:72:11:86:80:13:79:ea:da:
4f:f6:dd:0f:5b:6c:f2:82:83:ef:62:31:65:6f:ad:
3f:5e:b5:57:08:1c:07:ff:88:a7:ce:bb:70:1c:80:
52:1d:ae:de:3f:9f:08:ca:24:9a:95:f9:cd:84:83:
9e:db:af:a6:a5:6b:42:01:07:d4:03:0a:22:a1:8f:
11:63:8c:fe:3f:27:ef:3f:8f:da:6e:ba:7c:9b:5b:
2b:cb:6e:3c:a6:3c:69:f1:c2:70:f8:52:dd:20:79:
96:f4:99:2f:94:b8:c8:f1:ab:c3:4f:3f:7a:55:1b:
c1:9e:99:4f:12:4b:4d:15:07:4d:1c:75:fe:d3:94:
cc:a4:3d:0e:3b:c9:50:d3:34:1b:23:f5:a2:7c:b6:
85:0f:24:fb:40:91:bb:b9:37:54:6b:18:fe:03:bd:
58:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1F:9E:0B:60:F6:78:C3:6B:FB:47:5B:85:DE:DA:40:3D:18:6C:D4
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ce:26:35:bc:ce:e9:27:ff:db:17:26:ae:08:01:b4:d2:e5:
26:f5:3a:d6:b8:89:7f:03:32:ab:45:18:46:e4:d7:bf:39:a3:
ad:0b:ea:aa:4f:51:0d:73:82:c6:ae:c2:60:e6:28:8c:70:18:
24:5c:28:86:a9:f7:e2:c6:e5:8b:f5:2e:bf:e1:14:98:f6:74:
a6:3e:0d:f1:f6:5a:ed:11:df:10:a3:2c:9b:1d:9a:f4:3c:3e:
01:e4:4f:1b:74:b1:dc:8a:55:20:3a:e6:bc:cd:85:c2:16:2e:
2e:0f:da:9d:7d:ae:63:06:ca:71:d9:a5:3d:61:83:53:9b:8d:
d7:db:65:52:e5:dc:b2:a1:3f:6f:ac:c3:90:a9:86:88:c0:00:
05:06:ad:19:b6:69:2b:d8:5d:6f:16:5a:a9:13:45:f9:4e:b1:
6d:a9:3d:48:89:cc:94:9e:64:26:e4:f8:60:5c:52:2d:a8:a7:
01:11:a4:6b:cc:c5:78:39:50:79:8e:e7:46:ee:e5:24:41:45:
79:8c:1b:c4:6d:ba:c2:70:06:6a:a0:13:66:11:19:23:f1:ba:
6e:27:3d:e1:5c:64:e0:19:26:7c:92:b6:ad:74:49:07:27:b2:
18:a9:c2:0f:cb:f6:05:30:dd:0b:16:b1:ca:f4:12:50:c8:6a:
13:7c:9f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:44:14 2026 by rpki-client