Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
File: wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft (raw, json)
Hash identifier: cYpMrLLYMYVOZ4dByChPwBV1nt6oH064rIImn0f2fDQ=
Subject key identifier: 92:1A:DA:32:04:90:4F:32:FA:9A:BF:F5:98:36:ED:7D:27:BC:E0:68
Authority key identifier: C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
Certificate issuer: /CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Certificate serial: 019D29299CB660D3E718ACF264B1725299E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
Manifest number: 115B
Signing time: Thu 26 Mar 2026 08:01:26 +0000
Manifest this update: Thu 26 Mar 2026 08:01:26 +0000
Manifest next update: Fri 27 Mar 2026 08:01:26 +0000
Files and hashes: 1: gWlv5iDtX9nVjLLKKMShSTPx4uA.roa (hash: LL5oSQlkIVfG3xLLP9DHUwmZyFU2l1CdAagBhNZJ0QQ=)
2: wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl (hash: BA2lTGzgf4YhZEYISmZqhgX6Fv7uWZXmF5GLd71FRSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:9c:b6:60:d3:e7:18:ac:f2:64:b1:72:52:99:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Validity
Not Before: Mar 26 08:01:26 2026 GMT
Not After : Mar 27 08:01:26 2026 GMT
Subject: CN=921ada3204904f32fa9abff59836ed7d27bce068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:c5:4b:13:36:8f:f3:d5:f8:b3:d9:1e:9f:
47:3d:e9:2e:94:85:1f:9a:92:c1:e4:7e:a6:d3:de:
9a:f2:61:07:7d:ac:7a:d9:5e:29:6f:16:16:7f:3d:
69:36:19:90:10:74:40:66:b2:da:8c:56:3f:3d:25:
2d:d5:83:13:1f:d9:53:4f:70:c4:84:d6:5f:b7:be:
72:47:38:df:c3:f2:05:c1:63:0a:be:5e:32:b1:b4:
e2:10:7c:ac:85:5f:82:66:80:cb:01:9f:f0:76:04:
2f:4b:b8:96:23:80:d6:02:74:14:d4:1e:ce:df:6a:
6a:6d:e6:80:a5:9a:8e:fa:f2:7d:71:81:5c:ec:2b:
2a:db:fc:d2:fc:a9:f8:9d:97:2b:b8:4c:f1:90:20:
a6:f8:1d:35:89:b4:0d:9b:18:90:2e:f5:5e:35:0d:
b0:85:1e:9e:60:80:ec:ce:9b:15:2c:83:db:70:d2:
8a:e2:3b:11:ac:fd:a2:f3:36:af:be:ca:4d:90:44:
c2:83:68:cd:29:79:1a:c3:d1:9d:cb:12:e5:49:eb:
6e:b4:75:b8:63:ab:be:5f:dc:ec:b7:6c:df:92:24:
17:88:57:2d:35:3f:c8:18:3a:21:2d:ce:9b:f2:75:
8e:3c:d0:ae:80:58:3a:d0:f6:bc:62:c9:19:22:b7:
31:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1A:DA:32:04:90:4F:32:FA:9A:BF:F5:98:36:ED:7D:27:BC:E0:68
X509v3 Authority Key Identifier:
keyid:C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4d:c0:66:cc:e6:63:7d:6f:c3:e7:8f:b7:fb:00:7a:ba:ab:
27:3f:47:d4:1b:03:e7:56:81:8a:2e:b8:ee:60:db:7c:0d:b1:
30:85:d1:d7:7a:a5:4e:c9:85:3f:16:9c:a0:29:d2:9b:b7:c0:
d2:53:85:48:b9:1d:4e:c9:62:14:52:23:9c:f8:31:94:20:b4:
40:41:bd:0c:13:ec:34:d4:34:6d:3b:9b:4d:a8:cc:63:df:b8:
4b:2b:5f:74:35:4f:be:e4:19:f4:90:1b:34:89:84:ad:24:78:
cb:3b:ff:26:55:6a:e1:c9:7a:ff:60:c1:ca:75:79:ee:89:de:
61:fd:ca:b7:f0:36:85:9c:39:62:58:2f:60:79:a3:bc:0c:d9:
a5:e5:d5:75:1f:85:e4:65:7b:62:ac:6a:ae:c6:e0:e6:9b:12:
f8:df:aa:65:79:4f:21:c6:45:67:84:39:86:73:25:13:cf:2f:
56:bf:a6:18:21:35:05:e4:33:87:93:c8:c5:88:e9:d5:32:f1:
90:bb:2d:37:84:62:47:b2:85:1d:57:6d:bc:dd:4d:c3:67:37:
6f:73:8a:21:53:75:13:6d:55:45:56:f2:76:4e:df:12:13:18:
f2:bb:ba:8c:b7:c1:25:97:85:c9:41:0a:b1:2a:72:ca:4c:64:
be:43:49:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:20:57 2026 by rpki-client