Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
File: Wh1F7dft3pqLhipzmtqOeLfcgrk.mft (raw, json)
Hash identifier: /YwIro+bYafbx4LBu9wt62Lr+bkq2h9Km5btgtfsCD8=
Subject key identifier: 47:1F:E0:F9:D7:A1:34:22:3B:35:F9:C8:E0:E7:A3:E1:53:B4:7E:C6
Authority key identifier: 5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
Certificate issuer: /CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Certificate serial: 019F8EA23EF0BF88506C7D4502E52BF3B60D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
Manifest number: 0A2D
Signing time: Thu 23 Jul 2026 11:00:25 +0000
Manifest this update: Thu 23 Jul 2026 11:00:25 +0000
Manifest next update: Fri 24 Jul 2026 11:00:25 +0000
Files and hashes: 1: AS-oysEqUI5CVvE948att4Xq6JI.asa (hash: 77TWGfYwUVUPd2n4D+6kjGiOa/YM7yw2cUJ1Rc0SYHQ=)
2: Wh1F7dft3pqLhipzmtqOeLfcgrk.crl (hash: 30t3ZTXn3JEPVeYg6uCWrRCVXzk8Wrrv7XOGdMuLHIs=)
3: s8m3AyH2NlTDR3fTgsQPhcOlx7E.roa (hash: Kh2PCRdzGOujvxuGu8QsoDuJDZuroFKBTb7iTvPyMic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:3e:f0:bf:88:50:6c:7d:45:02:e5:2b:f3:b6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Validity
Not Before: Jul 23 11:00:25 2026 GMT
Not After : Jul 24 11:00:25 2026 GMT
Subject: CN=471fe0f9d7a134223b35f9c8e0e7a3e153b47ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2a:57:e2:21:b4:40:57:02:e2:71:9d:a6:79:
d8:09:11:30:9d:be:61:fa:50:6c:b5:67:5a:c7:2a:
b9:35:93:3c:51:85:a7:88:af:03:23:7b:d1:e1:2c:
41:68:84:30:90:40:da:87:53:ab:4d:c4:71:8e:3e:
2f:fd:d4:02:c1:68:d3:48:2f:b2:de:33:e1:e8:34:
13:c7:ad:29:07:ec:04:6a:21:a8:0f:83:ef:b9:00:
3d:7f:8a:ed:95:7c:c1:a6:18:76:1c:f2:17:82:e3:
be:38:da:ac:79:49:63:5c:f0:fd:0f:6b:1b:2d:d0:
05:f4:93:8a:22:75:b3:55:ad:8b:fe:12:17:f7:1a:
e6:99:b8:e8:5a:cc:fa:15:70:06:76:ce:d1:51:c8:
1a:54:b3:77:aa:7c:a9:1b:e7:6d:cc:64:9c:3e:ca:
c9:2b:26:b0:8e:aa:38:88:13:b3:81:30:54:f2:75:
4d:9b:17:09:79:bf:7a:67:63:ad:d0:5f:eb:ca:65:
74:77:90:e6:b7:f1:d5:bd:44:b4:09:09:94:9b:9b:
46:2b:28:ff:b2:82:ad:a9:78:c8:57:07:9b:0c:fa:
ff:d0:c7:e9:14:52:ac:c8:27:47:04:29:66:3b:77:
89:05:1b:b5:70:51:e0:32:7f:50:b3:db:d6:74:94:
bd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1F:E0:F9:D7:A1:34:22:3B:35:F9:C8:E0:E7:A3:E1:53:B4:7E:C6
X509v3 Authority Key Identifier:
keyid:5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:51:c4:42:b4:b3:15:01:9e:b7:98:1a:ec:50:de:30:8e:fe:
03:85:36:45:d5:9f:56:21:e0:a4:a0:f9:61:b2:56:69:0e:02:
57:a0:bc:26:b9:1c:b0:f8:e5:8b:25:e3:9b:cd:b0:f2:35:66:
9e:d3:86:b3:69:4d:1c:7b:2c:97:f5:40:fb:49:f3:19:68:e0:
23:67:13:8e:28:af:2a:d7:8f:72:60:46:2c:88:4e:1b:11:5e:
16:98:e5:51:48:b7:5a:8f:ac:91:ee:7e:c1:73:0d:73:16:a8:
27:46:cc:fd:cf:5f:90:8a:5c:79:eb:8c:3f:d9:ba:f2:3c:39:
51:dc:9a:9b:d3:ce:55:87:59:9d:5f:94:e1:3f:09:3e:46:4e:
66:24:b6:9b:92:6d:6a:91:77:2d:09:e4:ff:be:6b:b0:56:43:
21:c5:d8:4f:2b:61:d1:ba:e0:cf:2e:91:63:11:3a:39:11:9f:
8f:d5:69:5a:31:45:14:f6:39:f1:5c:62:2c:d3:47:a6:ff:0d:
e5:a0:e2:f3:2e:ae:39:97:6e:bd:c0:4f:dc:61:a8:71:23:91:
ac:1b:67:a1:2f:21:65:99:81:f2:5a:c1:21:1d:b0:fb:34:a1:
cc:5a:34:48:20:90:a6:df:61:36:38:a3:81:c4:63:ed:e6:a9:
a4:5b:33:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:45 2026 by rpki-client