Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
File: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft (raw, json)
Hash identifier: SX9cfVwcwJRoJ2BJM7MQbd7ldzuAtp9f9CasTPAcClo=
Subject key identifier: 44:6D:C3:74:C7:34:0F:1C:7A:0A:2C:2E:A3:D8:C4:69:50:E6:CD:5A
Authority key identifier: 5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
Certificate issuer: /CN=5a1a31909780e81734af6607272d18525db7657d
Certificate serial: 019D2B4EC73537ED50F2CFEB4759C016A69B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
Manifest number: 0D5B
Signing time: Thu 26 Mar 2026 18:01:16 +0000
Manifest this update: Thu 26 Mar 2026 18:01:16 +0000
Manifest next update: Fri 27 Mar 2026 18:01:16 +0000
Files and hashes: 1: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl (hash: OPzgJhycX59VZg1m90p/PN1mos1/14oPge1e+Uafqyc=)
2: a3Lzw_FUmbYwiAPLTEPryzUOYTE.roa (hash: UT3xazFEWgxD4QE0HTQ3reWyQqUTm3ksXZVs3NOwPPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:c7:35:37:ed:50:f2:cf:eb:47:59:c0:16:a6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1a31909780e81734af6607272d18525db7657d
Validity
Not Before: Mar 26 18:01:16 2026 GMT
Not After : Mar 27 18:01:16 2026 GMT
Subject: CN=446dc374c7340f1c7a0a2c2ea3d8c46950e6cd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:39:23:73:0a:a5:ab:0e:3d:dc:51:85:94:
53:1a:b5:f7:af:dd:df:77:5f:86:25:70:0d:02:f3:
76:07:bd:29:92:81:59:17:a5:5e:d1:ae:47:9c:5a:
de:52:62:92:d4:87:55:8c:8a:65:6e:36:ae:4e:9b:
49:0e:82:14:25:06:ba:9d:55:55:fa:b2:18:4f:73:
14:a4:5a:9d:6a:82:12:1a:42:b0:fb:42:1f:f5:d6:
6c:fa:22:61:4e:d8:f6:84:c0:cb:5c:a2:85:bd:c5:
7e:ad:63:f5:16:c9:4d:93:a3:72:ab:1d:e6:ea:f1:
54:94:5a:9e:0c:6e:4a:82:8e:9a:73:0a:17:a9:90:
cb:27:b5:f0:67:15:7d:ac:90:1d:56:d6:e9:56:3d:
ff:c2:de:72:64:3b:05:d0:5d:46:a9:c6:de:20:3b:
f8:3d:86:2e:2b:2a:ac:3f:6c:63:c8:c7:7c:2f:e0:
08:f6:79:76:86:12:c4:df:ae:71:40:b9:cc:c2:48:
1a:9e:4d:28:be:3d:cb:12:33:42:09:17:7a:ba:b4:
8b:35:5e:a6:05:f9:23:cc:21:ca:7f:be:bf:f5:c3:
ff:0d:93:67:2d:98:03:73:b5:02:6f:e9:2a:f0:bd:
ce:d5:af:0f:c4:b4:16:f5:cd:99:cf:af:24:3d:7e:
66:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6D:C3:74:C7:34:0F:1C:7A:0A:2C:2E:A3:D8:C4:69:50:E6:CD:5A
X509v3 Authority Key Identifier:
keyid:5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f5:e2:58:71:74:0d:21:49:ba:69:48:ef:3a:e7:dd:2c:64:
16:71:00:43:bf:31:2b:cf:3f:d2:ea:70:bd:2a:d2:4c:02:9b:
23:91:b4:d4:a9:fc:fd:ca:2e:8b:65:c9:91:e2:a3:86:bf:d9:
be:55:a3:14:9d:1d:7e:68:ea:6f:68:f0:af:bf:6e:76:89:0f:
3f:fe:0b:a4:28:1f:a7:03:87:7d:38:3f:9a:32:ce:08:7e:29:
6b:85:21:c7:77:24:fb:b9:d3:60:b2:eb:95:76:52:3a:f2:77:
57:cb:65:f7:29:c8:56:b4:db:32:08:d2:f2:63:02:4c:ac:e0:
dd:32:52:9e:76:92:f6:d8:74:e9:5d:f8:14:03:4a:f9:b1:27:
1c:4d:9b:87:1b:73:53:d8:83:27:b4:73:10:cb:3c:9e:20:90:
af:52:f2:d3:51:67:c0:5e:0b:d7:9e:2e:88:25:2d:8b:e7:57:
48:02:f9:9b:0a:51:1b:bf:48:aa:4a:e4:d4:f9:a8:af:4f:15:
4c:a0:d1:85:84:46:29:4d:04:60:e8:a2:7d:3a:98:c0:ec:2b:
05:53:00:23:ef:2b:8d:1a:ab:8b:af:87:8a:24:0c:65:a7:16:
24:61:0b:5c:ba:ea:47:15:98:5b:fc:87:f6:96:b9:2f:d8:0b:
1a:1d:95:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:37:31 2026 by rpki-client