Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
File: WHO1mFUN9b_byZp6HjlsNJW9qDs.mft (raw, json)
Hash identifier: 27ATUMPuv5Br/2JWCI7jvKYG0fxy4GTMYDn1+vaM/lo=
Subject key identifier: 60:58:94:14:C1:BC:D3:8A:D8:AC:82:43:2C:09:1E:21:42:F8:AF:79
Authority key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
Certificate issuer: /CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Certificate serial: 019D25BA3C54B005832EC434B32FFF941C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 16:00:55 +0000
Manifest this update: Wed 25 Mar 2026 16:00:55 +0000
Manifest next update: Thu 26 Mar 2026 16:00:55 +0000
Files and hashes: 1: MbmOe617Beb8ehTTf8MQ_smqn_o.roa (hash: 1oDwnPrpmz2JYgXg/Xbn/cWn31YRvP1U3oEbkfTev+U=)
2: WHO1mFUN9b_byZp6HjlsNJW9qDs.crl (hash: 0m0uWtbnf24DDiTScuZntKZbKa6Sx4wJB5HcQd8ME1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:3c:54:b0:05:83:2e:c4:34:b3:2f:ff:94:1c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Validity
Not Before: Mar 25 16:00:55 2026 GMT
Not After : Mar 26 16:00:55 2026 GMT
Subject: CN=60589414c1bcd38ad8ac82432c091e2142f8af79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:86:3e:f1:e2:63:85:5b:ad:36:71:aa:d6:08:
90:9c:f4:ec:16:1f:f8:39:12:5d:4a:07:2c:a0:2c:
62:1c:37:5b:31:8e:54:8d:a0:e6:fa:40:d3:01:e8:
0f:a6:66:52:f2:32:e7:ba:68:07:5d:dd:30:6f:e4:
fe:8b:8c:de:6e:7c:d2:b5:33:42:39:56:a6:9f:2d:
15:69:78:b5:25:e4:e1:46:e6:fe:c2:08:83:16:31:
ae:f8:90:57:3c:6b:19:6b:bf:05:1b:c7:62:c1:aa:
b2:6c:f3:f4:6f:0b:4b:17:98:f3:91:09:53:fc:10:
31:dd:d6:43:7a:bc:49:9d:17:b5:aa:03:c3:bf:7b:
ca:67:fc:68:f9:af:9e:13:76:50:dc:3e:08:96:c9:
de:31:0c:d9:f2:a5:f2:aa:cf:d1:2d:bd:eb:20:09:
bf:8b:61:fb:b4:1d:f6:9a:0d:b7:89:71:b3:ba:40:
f4:3a:0d:54:9d:9a:1c:3e:14:10:11:20:58:0c:ab:
4c:6a:fb:69:40:79:71:7a:89:80:de:1b:4d:6c:91:
e6:58:36:2c:1f:1c:41:78:82:f3:50:6e:d9:a6:fc:
4b:b1:13:be:1f:4a:1a:c1:8f:c6:ad:3f:76:0f:b0:
50:aa:e8:20:71:9d:b2:7f:bc:3a:55:0e:cd:29:22:
95:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:58:94:14:C1:BC:D3:8A:D8:AC:82:43:2C:09:1E:21:42:F8:AF:79
X509v3 Authority Key Identifier:
keyid:58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c8:28:c7:6c:35:2b:6a:33:20:56:5c:86:18:1b:fc:72:08:
5d:50:ae:ca:80:91:59:63:63:59:73:e2:21:a3:9c:2c:ad:d7:
24:9e:37:a6:c4:4b:5e:ef:99:af:f8:ea:8b:e5:a6:25:b9:a4:
bc:c6:32:0c:15:de:2e:70:6e:2a:f2:60:8f:f5:39:6e:ed:01:
04:a5:96:a8:68:e0:2d:e9:c9:ee:34:44:d4:23:a0:35:35:a5:
ed:bf:29:e4:75:f0:42:34:b7:51:81:bc:73:44:ec:72:80:f1:
05:48:69:8d:90:28:81:9a:0e:86:46:d6:8c:ef:0e:67:9d:07:
3f:1e:25:e6:85:5d:e0:a7:ab:ec:6b:58:ca:d0:8d:84:4e:ab:
ff:7e:62:3a:1d:27:2b:74:13:c0:48:8b:26:bf:37:36:9f:d3:
76:f2:39:f3:40:dd:58:2b:67:f2:dd:73:09:75:ca:f1:77:3a:
60:82:4b:59:be:c2:56:d6:77:a7:e1:25:92:ce:f3:af:65:38:
01:2a:c5:55:c6:f8:68:4c:ae:38:f2:a5:9d:f9:a7:6a:27:26:
b7:43:a3:14:a6:8f:31:4d:ff:0a:98:00:48:7f:bb:cb:6e:c3:
21:8d:b8:6d:0a:e0:d2:1f:d8:01:ed:d1:d4:82:2d:24:15:3e:
1b:2b:9c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:08 2026 by rpki-client