Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
File: WhsazyJvPC_8McHrK2pRlLULUvQ.mft (raw, json)
Hash identifier: /SmuDnlAyy7yb+7zFt3s4qIME0H2ES7XpmrjItb04bY=
Subject key identifier: CB:F9:8A:7E:41:BC:E9:36:41:26:79:87:38:1B:4E:EF:F1:EA:95:F3
Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
Certificate issuer: /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Certificate serial: 01A0DF85737DAC0F71F43347E1A2B354E31E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
Manifest number: 1A07
Signing time: Sat 26 Sep 2026 21:01:00 +0000
Manifest this update: Sat 26 Sep 2026 21:01:00 +0000
Manifest next update: Sun 27 Sep 2026 21:01:00 +0000
Files and hashes: 1: A-mJzajm6R6rc_fte01cBrdlwGQ.roa (hash: 2mDVxsRPuzcsX8IUNaU5b3fh5ELHeC7iXnOXAAz5DwA=)
2: WhsazyJvPC_8McHrK2pRlLULUvQ.crl (hash: eOhT1lEIH7MM95Y0s9T0HUACzVErMX8j9qX8pgYWrZM=)
3: dZTs0EIjPnxi68tbTokfAbw6h7g.roa (hash: /Yw0GBij2t0h3+q9/KbDbCPzij5LVOg+e269LitDfx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:85:73:7d:ac:0f:71:f4:33:47:e1:a2:b3:54:e3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Validity
Not Before: Sep 26 21:01:00 2026 GMT
Not After : Sep 27 21:01:00 2026 GMT
Subject: CN=cbf98a7e41bce93641267987381b4eeff1ea95f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c2:e8:0a:c1:28:aa:82:f1:5b:03:2d:b1:43:
1a:93:d3:c2:43:be:c8:b2:07:42:62:ed:33:c0:9f:
dc:30:11:bc:ad:fe:53:fc:b8:1f:a9:d7:fa:1a:3e:
03:03:ee:0d:9d:aa:72:fc:31:af:77:e1:d1:0d:d8:
50:a2:b6:d2:7e:65:d4:25:19:bf:fb:eb:97:4f:39:
dc:a8:6f:98:e1:23:3d:cb:b0:2f:51:ac:88:b4:35:
cb:f6:07:35:e0:70:40:22:05:08:7b:30:40:a6:2c:
1a:3a:80:f5:b7:bb:31:5e:d7:22:bb:3e:cc:f8:d5:
8f:d2:fe:74:04:b2:49:b3:91:6c:84:5e:8b:30:81:
5b:4d:39:5e:71:72:0f:e1:a4:83:15:0f:23:80:93:
d6:3b:57:bb:f6:79:bc:46:0a:51:07:4e:d1:df:3b:
cb:b3:e3:1c:06:c1:f9:20:27:6c:fb:f1:68:61:78:
9f:50:c0:38:10:8b:4b:3b:f0:06:c6:61:65:8c:87:
3b:87:d5:ec:52:45:66:97:61:e9:23:97:91:4b:5e:
ab:10:49:7e:e5:60:4c:cb:31:f6:15:d2:2f:4f:8f:
fc:3f:36:7c:32:78:5a:c6:d5:0c:19:a3:1c:74:c6:
93:71:15:e3:6c:7e:18:5b:9b:8f:23:ef:b7:da:5b:
06:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F9:8A:7E:41:BC:E9:36:41:26:79:87:38:1B:4E:EF:F1:EA:95:F3
X509v3 Authority Key Identifier:
keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d6:e8:e6:83:f3:f0:0b:ce:86:fd:b5:56:5d:09:80:72:00:
ab:d5:38:6f:c3:e9:ac:ba:9f:65:0d:6f:95:64:5d:a4:c7:f7:
b0:5a:30:32:b2:db:7d:70:f6:29:f9:4b:84:dd:5f:56:62:1c:
fb:8d:ea:3d:2e:16:df:56:17:dd:f6:61:1f:eb:b0:7a:0a:4e:
79:04:85:8e:e1:13:29:e3:b8:1b:68:c4:39:0e:da:8a:cd:48:
a5:29:1e:93:de:bd:d5:9f:21:58:a4:fc:a5:8c:99:42:73:39:
b3:36:90:79:6c:4d:14:23:28:a8:c1:94:98:85:14:6c:fe:c3:
95:c2:83:c3:d4:00:60:07:a3:58:c0:af:08:6b:0f:b3:ba:93:
88:b9:f0:b3:b3:e4:a4:0d:c7:4c:14:dc:8d:9c:af:0e:c3:0b:
20:b0:aa:ce:14:27:ba:6c:2f:ed:50:5f:b1:c8:9b:ac:2c:59:
b9:f9:41:e7:48:f8:ad:31:ad:db:b5:19:5e:84:6a:14:09:a0:
f0:81:94:51:bc:80:18:f3:2e:3f:1e:e9:b2:fa:9d:83:73:5d:
b3:ce:4a:d9:85:20:4a:42:79:7e:b5:0f:69:dd:bd:b6:46:44:
5d:f8:b8:cb:9e:4a:9d:be:c7:09:b8:27:62:e4:5d:55:4b:8c:
14:29:84:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:09:25 2026 by rpki-client