Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
File: wHR_vibJzddiit_ttXt4vo3nXik.mft (raw, json)
Hash identifier: 3n9hqgtpdzCnBa7AzUEaV1AP/kwS17j82hvqQbMnh4A=
Subject key identifier: C8:9D:19:94:B5:9B:8A:B9:D9:AE:80:C8:DB:AD:C3:C6:83:6F:D9:41
Authority key identifier: C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29
Certificate issuer: /CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29
Certificate serial: 019D2884B4D0A52E395DE01A6F8E3CA9A5A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 05:01:18 +0000
Manifest this update: Thu 26 Mar 2026 05:01:18 +0000
Manifest next update: Fri 27 Mar 2026 05:01:18 +0000
Files and hashes: 1: 0LzCBx0QZRSAfZaRMo_cS4BQtQE.roa (hash: 7o32IoSE1cfCxEZcczuy7FXmMXs2mDb+wYFqA7QXBeM=)
2: 1-Hu9W0FmiG82NC7-tjuK0EgepjY.roa (hash: 7s+sH/SAKFRmku03mgi9bj0bc7250BG+Tn/rh7WZuyY=)
3: 8BRkastJX7wU0bPIsin3zeWNSuA.roa (hash: 60PaOzCg7fH+6KJwHOstj/lUrw5vKE8AsGhSw9z1YKg=)
4: FPC9ddwt1ZBgWoLZwL1mMkIz18k.roa (hash: 9EL+o03COhmEnSRSMen7S+EN9QVh1AUZEemgl/OWiGI=)
5: _vvsbXrJo_c1HEgyqYRPDVhypp0.roa (hash: qkx1pHlwpZwYxvxvdZ0ja9GX2r8gdUPL+Cn8v39PX0Q=)
6: eQ4EGhSV6uGFEKwIgwY9cmJUUYM.roa (hash: H69c+k9Jj7yLzfrYUCen8bz8XDZeFZd5WtWdrEuCPgc=)
7: iU5ejVJ6QfRKNVuhTVBGxsukqUw.roa (hash: mXUy26J3J14czVIo2p0qCZCLF116yGstOAyzjRstGT4=)
8: wHR_vibJzddiit_ttXt4vo3nXik.crl (hash: m6xTa2mFwzwiG9n2kBK6buMj7OFswJQguKeHC7jL3dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:b4:d0:a5:2e:39:5d:e0:1a:6f:8e:3c:a9:a5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29
Validity
Not Before: Mar 26 05:01:18 2026 GMT
Not After : Mar 27 05:01:18 2026 GMT
Subject: CN=c89d1994b59b8ab9d9ae80c8dbadc3c6836fd941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:28:a6:55:91:36:1f:40:33:32:9a:01:9c:
be:7b:96:bf:c4:9b:30:b3:f5:ee:db:43:78:a2:ce:
d0:59:b8:b4:32:86:8d:4d:65:c1:ef:66:3f:34:17:
5c:fb:d6:27:77:6b:17:a0:d9:12:d4:1f:79:56:8c:
e0:25:2c:78:29:86:06:44:ba:7b:d6:44:9d:cb:ac:
cf:e6:39:02:bd:84:74:e1:fb:12:ef:c8:d5:b9:85:
1b:23:a5:be:00:6a:21:89:00:71:52:96:56:43:d9:
57:3d:d2:68:bb:70:6d:ad:6b:98:b6:27:80:1e:ac:
6e:1e:22:70:6a:bb:ca:72:26:91:c9:b4:07:b6:5f:
48:2c:25:b0:39:da:19:9b:7f:b5:9c:69:5f:48:ee:
72:e8:48:34:9e:05:e3:13:51:e6:dc:8c:e6:5e:64:
a0:ea:b0:5c:f9:99:9b:77:2a:33:9b:06:39:df:e3:
61:57:04:48:c3:d9:2b:73:cf:73:e0:9c:49:9a:88:
f6:6d:55:8e:6f:c4:0c:2d:9b:4e:95:d2:67:2c:22:
9c:64:ce:cb:8f:e6:d6:d7:98:ee:67:5e:4b:b4:a1:
85:d5:08:74:02:4c:b2:ef:a5:30:a0:e9:9e:64:7f:
be:df:da:b1:53:d4:71:20:08:fa:4f:2b:72:7e:89:
74:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9D:19:94:B5:9B:8A:B9:D9:AE:80:C8:DB:AD:C3:C6:83:6F:D9:41
X509v3 Authority Key Identifier:
keyid:C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c6:e1:9c:d7:0d:4b:bc:10:d2:3c:f3:91:71:39:8c:20:5e:
21:f8:16:4b:53:af:0c:5d:c2:76:c4:28:f4:0e:cc:3d:c3:b7:
c0:98:52:47:af:1f:13:29:6d:23:47:df:69:e7:1a:7d:b4:eb:
75:4e:28:00:b5:61:a3:86:db:c4:de:4c:1e:6b:db:78:1d:eb:
b2:bb:4c:a5:72:69:1f:b9:31:e2:4b:75:85:cb:e4:bf:25:f4:
b7:b4:75:b4:00:0b:10:62:6e:b2:d1:5c:6e:3b:48:20:29:d9:
ef:2a:32:eb:e0:a1:5e:0e:77:70:a3:fe:5d:b3:81:94:06:65:
de:1c:d9:90:f8:96:f7:28:1c:ac:ac:bf:fa:f1:48:e8:e6:cb:
19:3e:5b:96:a7:a6:53:1f:07:5d:28:5a:4d:f1:f7:0c:82:98:
e0:a0:31:6e:30:54:f8:46:f7:17:b1:4f:78:c8:85:9d:f6:e1:
6a:4e:39:a6:fb:3c:eb:9d:66:b3:f7:78:40:94:f9:50:78:32:
3d:5d:12:08:90:b9:7b:6e:d3:bb:e4:fc:b1:20:1e:f1:47:7a:
86:d3:51:31:b3:de:13:1e:f7:8e:4a:bc:e5:8d:8c:bd:8a:18:
06:43:80:7d:db:fe:94:b5:f7:66:24:05:26:ea:d0:2d:21:8f:
2b:74:2f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:49:11 2026 by rpki-client