Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
File: Wh1F7dft3pqLhipzmtqOeLfcgrk.mft (raw, json)
Hash identifier: /Bi0SsqEkG36grP3uzfzZiEJyqZVF2boldXpnMs6sYs=
Subject key identifier: AE:D2:1B:C0:DA:90:B4:F1:91:86:4A:06:DF:30:8E:E1:83:BB:56:1F
Authority key identifier: 5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
Certificate issuer: /CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Certificate serial: 01A0D501F9B610D05F59A26F1AF4C72891EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
Manifest number: 0AD6
Signing time: Thu 24 Sep 2026 20:01:11 +0000
Manifest this update: Thu 24 Sep 2026 20:01:11 +0000
Manifest next update: Fri 25 Sep 2026 20:01:11 +0000
Files and hashes: 1: AS-oysEqUI5CVvE948att4Xq6JI.asa (hash: 77TWGfYwUVUPd2n4D+6kjGiOa/YM7yw2cUJ1Rc0SYHQ=)
2: Wh1F7dft3pqLhipzmtqOeLfcgrk.crl (hash: kjhro9BOa2EgMICbRtZMSfUgrsiD9jZDQ6JNpUMy+FE=)
3: s8m3AyH2NlTDR3fTgsQPhcOlx7E.roa (hash: Kh2PCRdzGOujvxuGu8QsoDuJDZuroFKBTb7iTvPyMic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:01:f9:b6:10:d0:5f:59:a2:6f:1a:f4:c7:28:91:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Validity
Not Before: Sep 24 20:01:11 2026 GMT
Not After : Sep 25 20:01:11 2026 GMT
Subject: CN=aed21bc0da90b4f191864a06df308ee183bb561f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ac:92:81:9d:25:ca:c0:2a:b0:fc:01:b0:36:
15:96:35:87:00:b0:92:e7:15:73:f0:3a:e4:50:15:
d4:8b:30:4c:dd:2d:ac:58:a2:35:da:c0:97:dc:41:
11:a1:1f:e8:62:a1:d2:51:99:fa:b3:74:af:9c:bd:
f9:e0:42:70:7c:ce:18:ef:a5:4f:6b:8a:63:e3:c3:
ba:17:15:78:66:e4:3b:38:cd:2e:0a:b4:86:a6:ad:
f2:ee:03:ea:98:92:24:ed:f0:96:51:ce:a8:89:b7:
6f:f0:9f:87:61:86:f3:9a:5a:d4:53:20:ab:ed:3e:
0d:c7:d4:2a:9d:da:cd:a2:6b:0b:9e:c0:67:fc:10:
2a:a7:01:92:8b:1d:3c:f6:eb:53:b4:1b:fa:64:24:
97:4f:9d:6d:be:17:76:f1:f1:9c:a2:7d:5c:8a:94:
1d:2d:2f:34:79:5f:e7:35:99:5d:fd:c9:43:57:d9:
fd:f9:6f:c5:6e:9d:b6:c9:3d:b7:0d:51:d9:c8:cc:
d5:83:57:e4:76:8b:6f:97:8c:4d:10:36:34:95:29:
ef:03:45:2e:e3:30:07:6c:45:f9:ea:4b:99:47:32:
43:e5:5a:47:77:f2:bc:98:a2:b0:f4:7a:a2:79:c1:
df:3e:25:9d:b8:50:80:e6:3b:ba:c0:0f:ee:6c:66:
48:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D2:1B:C0:DA:90:B4:F1:91:86:4A:06:DF:30:8E:E1:83:BB:56:1F
X509v3 Authority Key Identifier:
keyid:5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:55:f0:9d:f1:6c:09:7f:8b:3c:ac:95:1f:4b:ee:cc:3b:6f:
51:f0:eb:88:b3:7b:15:b5:35:c8:d2:1a:0c:c3:aa:6b:c1:c9:
e0:f2:6d:eb:3b:77:2a:81:9f:bf:c7:92:99:8f:2e:0e:7d:4c:
e4:5d:7a:f2:c8:ff:11:f0:9b:9e:d8:04:aa:0f:e2:5a:68:d1:
e7:16:3c:db:4e:46:b8:c4:88:7a:94:8d:af:eb:8a:e2:2a:fb:
13:55:fb:7b:03:c5:ce:71:65:db:1b:83:70:eb:b9:d3:aa:f3:
3d:e6:05:80:7b:35:b3:ee:09:79:a6:e3:d5:22:24:05:f0:e0:
ec:2c:6d:19:cc:ca:fd:4c:79:a9:1a:e7:34:97:71:25:32:60:
b7:77:5a:dd:84:d3:bd:86:61:af:ea:2e:44:8f:91:e0:0b:7e:
96:f6:b0:be:d9:09:8b:1c:32:e9:4f:bd:3b:ce:8d:21:26:68:
2b:cc:b1:b1:e9:cc:3d:61:a7:76:2b:49:d1:c8:a9:d3:31:09:
75:1e:74:83:57:b7:73:ad:08:91:94:d3:7d:8d:1e:fb:c4:51:
4e:f0:07:6a:a0:33:ca:fe:e4:0a:6c:dd:cd:86:22:29:9f:76:
f6:f3:a7:33:80:0f:18:a8:ec:99:29:b3:df:17:68:3d:d2:dd:
c9:d7:04:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVAfm2ENBfWaJvGvTHKJHvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMWQ0NWVkZDdlZGRlOWE4Yjg2MmE3MzlhZGE4ZTc4Yjdk
YzgyYjkwHhcNMjYwOTI0MjAwMTExWhcNMjYwOTI1MjAwMTExWjAzMTEwLwYDVQQD
EyhhZWQyMWJjMGRhOTBiNGYxOTE4NjRhMDZkZjMwOGVlMTgzYmI1NjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaySgZ0lysAqsPwBsDYVljWHALCS
5xVz8DrkUBXUizBM3S2sWKI12sCX3EERoR/oYqHSUZn6s3SvnL354EJwfM4Y76VP
a4pj48O6FxV4ZuQ7OM0uCrSGpq3y7gPqmJIk7fCWUc6oibdv8J+HYYbzmlrUUyCr
7T4Nx9QqndrNomsLnsBn/BAqpwGSix089utTtBv6ZCSXT51tvhd28fGcon1cipQd
LS80eV/nNZld/clDV9n9+W/Fbp22yT23DVHZyMzVg1fkdotvl4xNEDY0lSnvA0Uu
4zAHbEX56kuZRzJD5VpHd/K8mKKw9HqiecHfPiWduFCA5ju6wA/ubGZIkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7SG8DakLTxkYZKBt8wjuGDu1YfMB8GA1UdIwQY
MBaAFFodRe3X7d6ai4Yqc5rajni33IK5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2gxRjdkZnQzcHFMaGlwem10cU9lTGZjZ3JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zNzNlY2EtY2E0My00ZDYyLWExMGYt
YmM3ZmM3MTlkMzFiLzEvV2gxRjdkZnQzcHFMaGlwem10cU9lTGZjZ3JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8zNzNlY2EtY2E0My00ZDYyLWExMGYtYmM3ZmM3MTlkMzFi
LzEvV2gxRjdkZnQzcHFMaGlwem10cU9lTGZjZ3JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVXwnfFs
CX+LPKyVH0vuzDtvUfDriLN7FbU1yNIaDMOqa8HJ4PJt6zt3KoGfv8eSmY8uDn1M
5F168sj/EfCbntgEqg/iWmjR5xY8205GuMSIepSNr+uK4ir7E1X7ewPFznFl2xuD
cOu506rzPeYFgHs1s+4Jeabj1SIkBfDg7CxtGczK/Ux5qRrnNJdxJTJgt3da3YTT
vYZhr+ouRI+R4At+lvawvtkJixwy6U+9O86NISZoK8yxsenMPWGnditJ0cip0zEJ
dR50g1e3c60IkZTTfY0e+8RRTvAHaqAzyv7kCmzdzYYiKZ929vOnM4APGKjsmSmz
3xdoPdLdydcECw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:46:21 2026 by rpki-client