Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
File: WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft (raw, json)
Hash identifier: ff8I1NujadVYbjm5lDEh3JlQZtRrzHcNDOEcp0xo3E8=
Subject key identifier: 72:69:AC:9C:02:D4:DA:7C:7B:9B:76:55:C9:2D:F2:36:15:E4:64:34
Authority key identifier: 58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
Certificate issuer: /CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Certificate serial: 019D265F1D368DCE6A5767D294E2BEBBFB0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
Manifest number: 0A1D
Signing time: Wed 25 Mar 2026 19:01:00 +0000
Manifest this update: Wed 25 Mar 2026 19:01:00 +0000
Manifest next update: Thu 26 Mar 2026 19:01:00 +0000
Files and hashes: 1: 6cN6nhFqlJSDVgIjOl3TycQtV6k.roa (hash: sgH5lKfufrchfpVAD0K9/jz6mZi6QmMqB/TNXEsdDxk=)
2: WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl (hash: 0j0AGhIyhmK3uTieIRWKy/wzRd/xyLUZWGDyLGKnJYY=)
3: axq7mHJm2Hnm-H9JADqzbawUKIA.roa (hash: pXMV2sY+byn88wNA/ocyULAR0qZzmlc5Pn6ZSaCAZWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:1d:36:8d:ce:6a:57:67:d2:94:e2:be:bb:fb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Validity
Not Before: Mar 25 19:01:00 2026 GMT
Not After : Mar 26 19:01:00 2026 GMT
Subject: CN=7269ac9c02d4da7c7b9b7655c92df23615e46434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:87:ca:bd:cd:31:95:17:09:b4:b9:ca:0d:cd:
09:b6:26:5b:1b:6a:45:24:64:eb:69:0d:15:76:7a:
e4:cb:33:48:5b:d8:c6:0c:92:a8:83:e2:e2:9a:ee:
3b:df:5f:21:3b:7c:9a:94:a2:a8:1d:90:15:ef:61:
c1:f4:84:5e:cc:31:69:57:f1:74:13:ca:b6:1a:17:
f0:c4:77:a8:cf:5a:c9:3c:c2:5b:2e:36:21:66:da:
b1:cb:fd:3c:c0:ea:bb:d4:db:70:a7:6d:d5:ce:0e:
71:a8:a0:02:c2:31:c3:18:3e:ef:0e:7e:ed:a1:3c:
95:17:4f:91:ed:d0:12:41:05:bb:0b:61:95:24:a1:
4d:28:16:2d:ae:a9:53:c3:89:85:49:c4:ef:93:61:
6d:d2:e7:28:6c:42:dd:82:45:6f:07:1e:1f:51:07:
a4:91:13:01:53:10:e8:5a:71:ae:62:c7:fd:de:20:
00:e3:1c:ac:ec:a1:34:2a:16:56:d5:c4:a5:f6:6e:
52:7b:2f:97:90:31:45:52:66:49:e7:4f:77:ca:55:
72:cb:91:8f:d5:a4:f5:9d:58:08:75:1e:20:f8:63:
70:fe:cc:12:5e:29:bc:7d:fb:ca:12:2e:49:10:6e:
0b:47:bc:2d:02:20:ff:54:ff:79:2b:5c:55:39:92:
fc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:69:AC:9C:02:D4:DA:7C:7B:9B:76:55:C9:2D:F2:36:15:E4:64:34
X509v3 Authority Key Identifier:
keyid:58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6b:13:c3:0e:a0:01:dd:25:15:6b:7d:ac:d7:14:b2:8c:17:
fd:9f:ea:7c:e2:12:66:40:c8:62:5c:54:89:28:02:a8:05:61:
40:1b:34:2e:3e:8c:1d:1c:5f:59:ee:c7:22:be:41:b0:91:e9:
a7:a4:95:90:5b:f6:22:50:0a:b0:b1:d3:2d:38:f6:c0:1b:d8:
b7:fe:c4:18:4f:6a:f4:2e:9f:2c:40:5a:c6:da:70:fa:7e:fb:
c1:0e:00:52:e9:57:9e:8b:2b:44:81:22:57:a7:a4:6f:88:7f:
f7:8a:c9:d7:4d:99:7d:40:67:d7:66:88:54:93:56:c0:d3:c7:
0b:74:43:f2:8c:9d:c4:9f:4e:05:dd:76:bd:e9:c8:06:f5:ce:
da:b2:b8:bc:fd:a3:f0:8b:c5:f2:e5:2a:3f:bb:af:4b:f1:f6:
a6:f8:ef:37:df:5a:dd:56:63:70:49:18:c1:22:4e:ab:69:89:
9d:71:5e:82:85:c9:8a:74:c3:3b:cc:e0:85:2a:6e:2f:8a:ab:
9a:73:e0:96:e3:2e:84:f2:de:0e:43:ee:22:5f:e6:ff:60:16:
ca:b9:22:0e:f2:09:de:70:7d:40:6c:3e:3e:0d:0e:15:35:85:
10:8f:a9:09:33:0f:52:8e:44:76:e2:14:7d:3c:95:f5:a9:a0:
61:3c:72:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:36 2026 by rpki-client