Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
File: wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft (raw, json)
Hash identifier: gMrmtsDMaz/NwTcd9FlIpNOviEz5GceoF3ut9GuNd7A=
Subject key identifier: 99:22:81:13:88:76:C0:2D:7D:45:11:25:97:19:E4:9B:62:38:0A:9A
Authority key identifier: C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
Certificate issuer: /CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Certificate serial: 019F92B685D8E37935A1B3501DCF8D92F043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
Manifest number: 0CEA
Signing time: Fri 24 Jul 2026 06:01:02 +0000
Manifest this update: Fri 24 Jul 2026 06:01:02 +0000
Manifest next update: Sat 25 Jul 2026 06:01:02 +0000
Files and hashes: 1: Y8cmMZQvMnJkziqHhszvZV_UjeQ.roa (hash: cYgGX/s9jr31rZGmmaEtyXpNrfjq8EGIHIKPU1pqwxk=)
2: wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl (hash: TfKN3+pLNxuhnZvo53N3yj7+5eB0+BFcWWwDhYvRsT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:85:d8:e3:79:35:a1:b3:50:1d:cf:8d:92:f0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Validity
Not Before: Jul 24 06:01:02 2026 GMT
Not After : Jul 25 06:01:02 2026 GMT
Subject: CN=992281138876c02d7d4511259719e49b62380a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5f:03:29:18:3a:3a:95:b2:ec:c9:d1:b2:c1:
c0:31:14:f9:1c:80:49:9a:cc:c6:f6:ce:09:52:e9:
3f:3d:30:73:03:b4:d9:27:06:09:97:18:b7:65:0a:
e0:36:8d:0b:65:82:f5:66:6a:6d:2a:19:8b:25:f2:
24:61:60:af:34:45:6f:63:9f:75:34:31:7b:48:0f:
f1:2b:2e:43:f9:4f:ca:ca:3a:48:a7:ac:18:d5:40:
01:16:ac:aa:3d:3c:6f:ee:20:6c:8e:05:d7:84:30:
71:fb:cb:92:2f:ef:e5:9b:60:50:68:2e:99:da:d9:
48:ce:b2:61:83:ce:cf:c5:3d:82:30:0c:af:b3:1d:
47:d3:a2:db:61:59:64:d0:0d:7d:3b:b9:56:c9:d7:
83:b4:03:86:37:97:c9:a7:1f:78:de:8c:4d:1f:2f:
5f:40:8b:f0:6e:17:b4:6d:cd:03:11:01:e3:e0:c3:
31:b2:9a:fa:5f:a5:2e:2b:99:01:2f:83:f5:7b:09:
9a:98:7b:17:8d:ee:5a:30:78:55:3f:af:ca:ee:8f:
a0:11:90:20:fc:cb:73:5a:bf:36:8c:f4:36:e3:d6:
79:62:f8:ce:a2:9d:f1:7a:30:81:1f:b0:a6:d0:af:
74:66:6a:2d:49:c2:ac:39:5a:38:30:5b:2a:c6:19:
ec:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:22:81:13:88:76:C0:2D:7D:45:11:25:97:19:E4:9B:62:38:0A:9A
X509v3 Authority Key Identifier:
keyid:C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:33:7e:12:63:28:01:26:86:4f:7c:17:6f:28:ab:f6:53:dc:
a8:ad:46:f4:ad:2b:e6:40:da:e5:13:73:d7:ee:7d:9e:90:82:
88:d9:7e:1b:e6:0e:05:d4:90:0d:2a:97:55:58:96:91:e9:80:
44:7b:44:19:25:9e:a7:34:ba:c4:6e:b7:aa:65:00:62:39:ae:
08:49:bf:1d:ae:cd:ce:cf:56:c6:8e:65:2b:4d:27:d8:88:84:
18:7f:21:7d:e4:c1:8c:19:9d:c8:e7:e3:d3:bd:b6:73:51:68:
eb:4b:37:02:14:d2:1d:63:56:24:90:34:46:7a:0d:3d:fa:44:
c6:69:c0:a7:1c:35:ab:ba:3e:01:1c:74:6f:d7:fc:5e:dc:38:
f3:06:c3:c9:7d:a4:27:a6:23:d0:06:84:75:fe:77:47:c8:9b:
3b:55:79:18:e9:e0:ac:0c:03:1e:e6:09:6c:7c:65:30:24:9a:
3a:30:09:40:5d:4a:dc:71:69:1e:81:56:eb:91:a9:55:83:ea:
20:37:aa:dd:ea:85:e0:4a:3c:84:cf:fc:10:08:d0:2e:2d:c6:
85:02:53:2e:f5:41:1d:80:86:59:71:9d:3d:34:92:ae:b8:f9:
0c:0b:98:74:2d:10:ca:24:13:4c:37:17:3d:92:28:46:fe:27:
4b:70:18:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StoXY43k1obNQHc+NkvBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMWUzMmQwNDdjNWQxYjllMjY3NzBjMzg0MDMwNGNmNjk3
MWRlMWMwHhcNMjYwNzI0MDYwMTAyWhcNMjYwNzI1MDYwMTAyWjAzMTEwLwYDVQQD
Eyg5OTIyODExMzg4NzZjMDJkN2Q0NTExMjU5NzE5ZTQ5YjYyMzgwYTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2l8DKRg6OpWy7MnRssHAMRT5HIBJ
mszG9s4JUuk/PTBzA7TZJwYJlxi3ZQrgNo0LZYL1ZmptKhmLJfIkYWCvNEVvY591
NDF7SA/xKy5D+U/KyjpIp6wY1UABFqyqPTxv7iBsjgXXhDBx+8uSL+/lm2BQaC6Z
2tlIzrJhg87PxT2CMAyvsx1H06LbYVlk0A19O7lWydeDtAOGN5fJpx943oxNHy9f
QIvwbhe0bc0DEQHj4MMxspr6X6UuK5kBL4P1ewmamHsXje5aMHhVP6/K7o+gEZAg
/MtzWr82jPQ249Z5YvjOop3xejCBH7Cm0K90ZmotScKsOVo4MFsqxhnsKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkigROIdsAtfUURJZcZ5JtiOAqaMB8GA1UdIwQY
MBaAFMIeMtBHxdG54mdww4QDBM9pcd4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2g0eTBFZkYwYm5pWjNERGhBTUV6Mmx4M2h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zMDBiZDQtMDM1Ni00YzQ0LTgzY2Yt
MzhlZmNmZGM0MTdiLzEvd2g0eTBFZkYwYm5pWjNERGhBTUV6Mmx4M2h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8zMDBiZDQtMDM1Ni00YzQ0LTgzY2YtMzhlZmNmZGM0MTdi
LzEvd2g0eTBFZkYwYm5pWjNERGhBTUV6Mmx4M2h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDN+EmMo
ASaGT3wXbyir9lPcqK1G9K0r5kDa5RNz1+59npCCiNl+G+YOBdSQDSqXVViWkemA
RHtEGSWepzS6xG63qmUAYjmuCEm/Ha7Nzs9Wxo5lK00n2IiEGH8hfeTBjBmdyOfj
0722c1Fo60s3AhTSHWNWJJA0RnoNPfpExmnApxw1q7o+ARx0b9f8Xtw48wbDyX2k
J6Yj0AaEdf53R8ibO1V5GOngrAwDHuYJbHxlMCSaOjAJQF1K3HFpHoFW65GpVYPq
IDeq3eqF4Eo8hM/8EAjQLi3GhQJTLvVBHYCGWXGdPTSSrrj5DAuYdC0QyiQTTDcX
PZIoRv4nS3AYIw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:18:56 2026 by rpki-client