
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
File: WHiPOEJuA2KzTdVnND_oRhpYur4.mft (raw, json)
Hash identifier: 8BN4KktFahtvHQ/IObnvIeZIxagiFlKmXF3oP95RW4E=
Subject key identifier: 4D:04:D2:B4:2C:7F:80:57:C5:E9:6A:20:F4:BA:0D:85:37:0E:36:94
Authority key identifier: 58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE
Certificate issuer: /CN=58788f38426e0362b34dd567343fe8461a58babe
Certificate serial: 019D2996EDCA7CA6BF0470E5C76BBED52AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
Manifest number: 15CD
Signing time: Thu 26 Mar 2026 10:00:50 +0000
Manifest this update: Thu 26 Mar 2026 10:00:50 +0000
Manifest next update: Fri 27 Mar 2026 10:00:50 +0000
Files and hashes: 1: UQttblox4YqbtmcdrnTNUlIXUrA.roa (hash: Kp4mizWB09vMj96WX2Mw1hMJlxG7gErBxSdQDtVOWsI=)
2: WHiPOEJuA2KzTdVnND_oRhpYur4.crl (hash: hVKVw2wHr8AkS+bf34WJTluzzzo3FvrVIQwZ9qF2xlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:ed:ca:7c:a6:bf:04:70:e5:c7:6b:be:d5:2a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58788f38426e0362b34dd567343fe8461a58babe
Validity
Not Before: Mar 26 10:00:50 2026 GMT
Not After : Mar 27 10:00:50 2026 GMT
Subject: CN=4d04d2b42c7f8057c5e96a20f4ba0d85370e3694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d6:af:2c:48:6a:15:e9:3a:4e:dd:89:0f:17:
1d:26:ad:1d:2d:88:42:c6:84:04:8c:c2:38:a4:37:
d7:9a:3d:0e:91:eb:8d:e8:6c:0d:3b:35:84:a6:72:
3d:22:a5:78:f4:55:32:68:a1:43:01:f0:62:00:11:
0f:7b:fe:7d:e4:01:1d:02:6a:7a:9a:5b:c8:25:25:
4f:bb:09:a6:ce:3e:8d:6d:c3:f8:32:89:d9:7f:19:
23:48:5a:34:60:6f:35:ae:5a:92:9d:ec:6a:bc:7e:
4b:c4:9b:a5:17:f8:75:e1:f4:ab:15:c3:f4:56:f4:
17:2d:0d:86:32:3d:3e:3d:3f:c7:0d:35:2a:c6:87:
00:aa:05:1d:1d:df:db:f1:90:8c:99:46:be:e1:36:
c7:c6:70:23:14:17:a8:d8:cf:3f:d1:41:76:45:e8:
2f:61:a0:e9:91:9d:fe:8f:fe:ca:b3:9b:23:1b:76:
51:a7:c5:5c:ca:4f:a4:bd:58:31:1d:e4:c6:b9:ca:
53:f3:b6:ba:8c:e2:c7:72:f9:d2:b0:f5:8d:75:1b:
19:bc:55:6b:50:7c:ba:73:71:79:fa:41:57:d2:92:
b0:c7:75:16:37:48:17:b8:08:15:82:18:62:0b:49:
35:53:69:a9:a1:24:59:97:b9:cf:ea:3b:3e:21:43:
69:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:04:D2:B4:2C:7F:80:57:C5:E9:6A:20:F4:BA:0D:85:37:0E:36:94
X509v3 Authority Key Identifier:
keyid:58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:30:ae:b9:e5:17:06:09:f1:fa:aa:28:36:79:28:5d:ab:6b:
8b:38:a1:22:0c:53:82:b8:99:d5:2a:ed:4f:19:b2:d6:34:1a:
3d:64:43:08:f3:b7:27:54:cb:31:e9:51:fe:2a:4b:5f:8a:ce:
0c:ef:f2:d3:ec:70:56:ef:63:65:3e:f8:7c:c3:86:46:6e:05:
51:d2:d1:dc:83:0c:60:2e:b0:fc:1b:7e:b9:59:eb:1f:f3:7d:
51:4e:e9:d1:c8:70:63:d2:cb:6e:19:37:8d:22:96:e6:8e:70:
fe:b0:df:6c:e9:f8:d4:c6:15:6a:3c:09:0c:0f:94:d8:bf:6f:
62:c9:dd:c1:13:5c:4f:34:41:b0:81:94:32:de:aa:2a:c8:86:
8a:b9:cd:64:a6:46:ed:02:67:67:b5:03:30:80:c2:e6:f9:78:
01:8b:5d:84:15:e0:02:50:c0:77:17:51:65:72:10:3f:38:7d:
60:9d:63:7e:75:73:32:c1:40:bd:ab:20:4c:8f:af:5c:ca:5f:
a9:1b:6e:84:50:db:a3:f7:79:7d:89:6c:fe:b3:69:47:64:84:
74:ab:29:7d:93:7f:51:7a:37:26:d5:1b:a2:ff:cd:ea:56:a9:
d6:81:ff:17:d5:ba:07:f8:55:ab:4f:2e:a4:0e:eb:58:75:4e:
20:58:95:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:00 2026 by rpki-client