Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
File: WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft (raw, json)
Hash identifier: qSCCaxXYTbWUz4rjm2s8LygT4CJkGNEgSHHWG/+cblk=
Subject key identifier: 8F:8B:1E:A8:E0:1F:D2:AD:DC:D6:F6:E6:32:82:44:87:D1:B7:D4:3B
Authority key identifier: 5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A
Certificate issuer: /CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
Certificate serial: 019D27A90168088F2D357F8CFA0031AA7E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
Manifest number: 147A
Signing time: Thu 26 Mar 2026 01:01:20 +0000
Manifest this update: Thu 26 Mar 2026 01:01:20 +0000
Manifest next update: Fri 27 Mar 2026 01:01:20 +0000
Files and hashes: 1: 7A_oUuwZOHP7qCqGIUn186LfEF4.roa (hash: eOQFJRSGBCHPkAX8J9zFheW30UxAoTGKrY+SsoDxPV4=)
2: WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl (hash: xq9tXZThACFTPYkhuz0LqAqdiFRHQq1Z/nFUrqeqqzA=)
3: Xx2Olifw7gOhhQp_hVway2OYq0E.roa (hash: FwU2QD1K2hMPUXQG6G1Z4ns3e0WuMr2QexzlmgdbQwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:01:68:08:8f:2d:35:7f:8c:fa:00:31:aa:7e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
Validity
Not Before: Mar 26 01:01:20 2026 GMT
Not After : Mar 27 01:01:20 2026 GMT
Subject: CN=8f8b1ea8e01fd2addcd6f6e632824487d1b7d43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:db:95:e4:2e:ce:4a:eb:36:39:66:27:fb:8d:
36:ea:66:d6:1e:82:33:e1:d0:90:4d:2c:81:c3:47:
d1:a9:4d:cf:83:70:bc:3b:bd:5f:8f:23:c3:a6:27:
9c:5a:55:79:22:da:72:4e:56:8a:1f:4d:0d:c0:f0:
db:38:f0:e5:23:25:56:93:a0:14:91:e8:9f:e2:fc:
83:49:13:bf:b4:d4:e2:3c:db:3e:26:98:38:ce:d2:
8f:b1:f0:ac:b9:8c:ea:03:32:07:4c:83:08:91:54:
8e:11:2f:a0:a8:1e:67:f7:69:3e:8a:23:b1:e3:bd:
4d:31:0e:70:d6:a7:58:b0:55:c6:88:ad:17:83:cf:
f7:c6:df:a9:d0:28:39:29:1e:fc:5f:05:d1:fc:05:
78:1c:d5:93:bd:3b:44:c0:e6:68:ea:eb:82:20:7e:
3c:cb:d9:5b:07:d7:c6:aa:9a:1d:9f:cf:cb:36:44:
d5:51:46:fd:32:34:4f:1e:85:36:94:f6:2d:e0:a7:
f0:79:70:d6:61:69:6d:e7:89:1f:a7:66:e0:ab:0d:
bf:e4:d4:65:52:50:e0:f6:ae:46:88:80:04:19:96:
c1:69:71:44:59:91:7b:7a:ff:d6:cc:29:44:ac:cf:
8c:a7:a3:2b:f3:e2:4a:20:d7:c2:24:82:3d:b2:8f:
e5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8B:1E:A8:E0:1F:D2:AD:DC:D6:F6:E6:32:82:44:87:D1:B7:D4:3B
X509v3 Authority Key Identifier:
keyid:5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f0:2a:0e:ea:b3:c6:7b:87:b3:e6:a4:51:c4:29:d4:12:07:
a9:bc:1e:e5:4a:7c:18:e8:b9:61:c9:05:f4:3a:2b:85:ab:76:
11:94:c8:0a:0b:df:22:88:2e:83:49:2c:2e:ec:6d:a2:f6:63:
dc:2e:3e:36:e7:5b:c6:1a:3f:90:43:bd:1a:1b:64:1a:09:25:
7f:29:b4:75:1f:0c:c5:d2:71:4a:59:24:4f:e4:61:9c:be:ec:
f8:05:73:ef:ac:d7:0e:45:28:ac:2f:1a:04:30:3d:97:8f:74:
e7:54:d3:d0:42:7b:71:13:1a:cc:1e:13:33:16:78:40:f2:3a:
ee:99:77:78:f6:56:17:22:4d:14:11:52:34:ff:95:a1:07:bf:
52:14:79:e9:6b:e2:ca:de:ca:f9:e6:4a:32:2f:64:e2:df:e7:
bb:35:3f:5a:bb:85:79:7d:08:29:8c:df:9a:39:fc:af:d3:0f:
ad:a6:8b:25:31:76:00:dc:31:03:ec:ef:2a:13:0b:ae:e0:80:
76:6e:fb:60:4f:8e:4f:1a:24:85:de:ed:e8:0b:ed:d3:3f:b4:
c3:ee:dd:2f:11:58:b1:d7:ed:47:d0:2c:a0:ac:15:2e:22:ab:
f6:be:e9:62:de:78:be:2c:c1:ce:05:28:9f:bc:16:fb:e3:56:
44:f2:f6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:48:46 2026 by rpki-client