Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
File: Wh1F7dft3pqLhipzmtqOeLfcgrk.mft (raw, json)
Hash identifier: A2FQSHm8P3ankBEWXpu6TlzDTFxYruUisl8US7OOEiM=
Subject key identifier: CB:FA:66:68:22:CC:E3:AC:91:B2:CB:1D:0A:AD:6D:AD:1D:1A:0E:19
Authority key identifier: 5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
Certificate issuer: /CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Certificate serial: 019D254CBEF20198F997E60DFE8C5BD65239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
Manifest number: 08ED
Signing time: Wed 25 Mar 2026 14:01:19 +0000
Manifest this update: Wed 25 Mar 2026 14:01:19 +0000
Manifest next update: Thu 26 Mar 2026 14:01:19 +0000
Files and hashes: 1: ECgQqL27E95oDO2UnT5GtnD2MOo.asa (hash: FyGPkpvNHxEr+w+xHCpx+LmSayXKpypdP8RYo7kPHxE=)
2: Wh1F7dft3pqLhipzmtqOeLfcgrk.crl (hash: Ylk9cS26CuLWcbUHfjFHaSl6S/oC9yqTWEnnSMx+hTU=)
3: s8m3AyH2NlTDR3fTgsQPhcOlx7E.roa (hash: Kh2PCRdzGOujvxuGu8QsoDuJDZuroFKBTb7iTvPyMic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:be:f2:01:98:f9:97:e6:0d:fe:8c:5b:d6:52:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Validity
Not Before: Mar 25 14:01:19 2026 GMT
Not After : Mar 26 14:01:19 2026 GMT
Subject: CN=cbfa666822cce3ac91b2cb1d0aad6dad1d1a0e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0b:33:bd:70:e6:55:8f:a3:b0:b2:2b:eb:5e:
c4:ca:5c:79:af:95:e1:0b:8a:9a:23:fa:cd:94:e6:
e9:84:5b:0f:7f:55:5e:fc:ae:cc:2a:f5:8f:04:50:
35:30:c0:4c:16:8d:8b:bf:71:c4:02:ae:ab:5c:13:
73:3a:e2:70:c0:6a:05:ce:3a:ab:91:29:af:4a:f7:
cc:70:5b:62:a9:53:a3:01:3e:e9:50:ee:0b:de:a8:
c6:49:93:2b:3a:1b:37:4d:e0:66:4b:00:aa:e4:42:
7d:7f:8f:b3:09:c3:d7:3d:ad:bc:86:64:0c:6c:3e:
9b:80:66:c7:d7:93:60:41:13:63:e9:b9:58:68:ae:
2c:ef:7d:2b:30:d6:7b:34:5f:57:6e:94:9c:d6:89:
95:53:ab:55:bd:db:5a:f0:1c:fd:fb:82:0e:0d:62:
7d:d4:5b:06:1f:c0:75:ae:d7:08:7f:1d:36:8b:cc:
d9:18:46:be:35:e5:1a:4b:aa:68:d1:fa:aa:2e:ae:
e4:7c:35:33:58:80:3b:88:55:ec:5b:2f:1e:dd:74:
b6:5a:02:57:fa:d0:86:67:c4:f8:db:74:d1:ea:3d:
68:4e:28:77:13:24:65:b6:48:0b:99:b1:38:a7:a4:
54:55:e1:00:39:7a:7f:10:01:d1:1d:62:0c:ae:1c:
30:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FA:66:68:22:CC:E3:AC:91:B2:CB:1D:0A:AD:6D:AD:1D:1A:0E:19
X509v3 Authority Key Identifier:
keyid:5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:ac:87:b3:10:1f:65:1c:bf:67:ab:91:d4:f6:f9:b8:99:1c:
5e:6a:2a:ce:6a:4f:ef:67:a2:02:0a:ba:5d:92:77:d6:81:05:
52:c5:94:3a:1f:28:5f:96:29:0c:b5:a8:13:00:ac:d8:76:d1:
07:58:26:9e:c3:56:3c:b4:93:5c:e7:0c:46:83:2f:ed:82:bb:
f4:84:80:db:b1:ff:d9:67:90:4c:8c:8b:1c:60:c3:f3:de:63:
ea:cd:54:04:db:25:09:2b:80:ea:30:b6:f7:1f:98:5f:b9:92:
2a:a8:7b:d6:33:2e:35:f5:f8:6f:fe:f8:89:06:6d:23:fa:c3:
53:be:8b:aa:97:91:c5:46:bc:08:52:f6:4a:b9:ef:2a:e6:ae:
1a:a4:45:bd:f1:19:7b:ff:26:b5:f3:26:bd:03:46:4b:b6:a5:
ab:09:a3:97:3a:7a:54:d9:b8:17:45:8f:f8:32:ac:1e:bf:70:
c2:ed:ed:45:08:f1:5c:9d:ec:08:95:79:ed:b4:d6:ae:54:71:
b8:03:4e:b0:55:36:67:e3:12:63:1a:82:94:b4:6a:aa:01:41:
76:11:1a:30:66:2d:e7:04:d1:dd:78:b1:a8:aa:a4:36:43:84:
04:a0:ee:45:b5:08:2e:60:0a:01:5b:19:ee:56:22:e0:78:d5:
c5:ed:87:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:38:19 2026 by rpki-client