Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
File: WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft (raw, json)
Hash identifier: IQt5gFma2UwjR5y9OusetX31hnmED0/yFy7khJF6h2M=
Subject key identifier: 59:2E:C2:1C:BE:A6:D5:90:81:B8:13:76:CA:63:2A:8F:57:B8:D3:44
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 019D2771EDA674C4924A3A4541AAD435F030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
Manifest number: 1896
Signing time: Thu 26 Mar 2026 00:01:10 +0000
Manifest this update: Thu 26 Mar 2026 00:01:10 +0000
Manifest next update: Fri 27 Mar 2026 00:01:10 +0000
Files and hashes: 1: 0kbAZrj0KlIr6tTe_BrPv7Ou9Do.roa (hash: j8FCsH7KdJb2m1l6ogZ9wjzQrPPAwuq0Mi1PAn+gc3E=)
2: 9zo09ix2zYPkPjtRWCZtUQY7Hx8.roa (hash: 1YGiPxIeRO9HzGHWmN+x5SsxEkq0m2RwsZb+NYZ3A1U=)
3: BMHXoNqb9w8hGpmKpbza0EXvFx4.roa (hash: GAFHMPGGv6WbCFEAKXD/fdvXu0V9RH11YpVxeHI3Tgg=)
4: QQ4KxBaAki9JFj3Vc4-C08V1ydM.roa (hash: sU9ncWykONAWb2tj0sti+vKUahUUlRIsV/AFQ67WkR4=)
5: WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl (hash: Q2pzbJX2XV7m04mu9XcSvmFhJncsg9KoVPP8iHv649c=)
6: WpRy_KPAxZKQEB_LsN9fBCkXol8.roa (hash: f3qEj6Yz1joliMM6YbG5U2guBbhW/iL/NGaA4Tk1ejo=)
7: aym4YZ7Ehm_KzkXD3V-QX01Qou4.roa (hash: QNBmXDOTHFhuiQC1mFg6H4twIsCe0r1/zgtBgEjdjlA=)
8: ttPcl3gpgQikkqNDHNv3FAV-nHQ.roa (hash: B0KgI8BvLZBPZBGXTpqu8AM7cdcZmvQ18YWeSHHi9Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:ed:a6:74:c4:92:4a:3a:45:41:aa:d4:35:f0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Mar 26 00:01:10 2026 GMT
Not After : Mar 27 00:01:10 2026 GMT
Subject: CN=592ec21cbea6d59081b81376ca632a8f57b8d344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:ee:60:62:55:36:0f:24:b7:99:89:d3:be:
08:6e:62:b0:d4:3c:36:a1:51:e8:fe:49:27:0c:6d:
ee:22:58:20:ca:a5:f4:a8:e4:9e:17:a1:7b:63:8d:
bb:8d:ba:bd:5f:86:3f:08:4e:73:82:06:bc:16:c2:
6b:82:aa:89:88:c4:db:a4:ac:a9:7c:7a:c0:e5:83:
70:a4:c6:db:68:be:c9:3b:6d:4b:af:7f:c2:ad:00:
8d:4a:bc:ab:91:d5:fc:d9:f3:7f:05:36:52:40:4a:
3a:00:a5:30:94:80:5b:be:dd:d4:92:62:4d:35:5a:
32:e5:41:0d:c5:f0:48:82:64:3b:da:fe:2d:6b:df:
f3:6e:e6:c1:5a:8a:36:85:01:1c:27:da:cd:52:69:
f2:7c:9d:fd:d7:c9:04:62:81:18:9b:cb:81:47:7b:
6a:e6:0c:d8:b4:ca:b6:08:20:7a:40:fb:e3:1d:6d:
81:48:62:0e:4b:f9:f8:b9:7c:ad:6e:3a:0b:ed:1d:
ea:22:e2:c4:c7:09:fe:98:2b:27:47:df:c8:48:2a:
9e:8b:52:99:62:a2:43:b4:3b:a6:3f:30:cc:30:55:
60:5d:4e:bc:df:f2:b8:7b:e8:50:dc:10:14:73:86:
b6:20:ea:65:dc:14:9e:cd:50:bf:3b:4b:b6:e7:13:
c8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2E:C2:1C:BE:A6:D5:90:81:B8:13:76:CA:63:2A:8F:57:B8:D3:44
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:aa:be:d2:9c:f6:96:33:47:0b:98:b4:b7:a6:d3:82:c4:f6:
3e:e0:ae:9d:84:3f:ab:01:33:c5:78:ea:08:b1:95:8b:be:90:
f8:fa:3f:5b:b1:ac:c4:1a:53:a2:a3:39:ec:30:93:66:51:73:
66:dc:1a:a4:5f:c7:d1:5b:da:ef:0c:80:87:71:c6:96:ca:83:
bb:54:57:67:03:29:4d:89:07:5b:e9:47:44:f5:00:2d:d7:29:
5f:28:34:82:9f:66:c0:54:ae:67:e6:01:48:e3:d0:f5:0d:a2:
56:37:3b:70:45:24:cb:be:b7:31:2d:14:e5:db:8e:87:eb:45:
7e:89:e2:74:8f:7a:c0:bc:84:03:c9:c4:46:87:af:e6:e4:ce:
19:fb:e8:b0:61:c7:c5:f8:b0:16:1d:e3:b9:9e:f2:ea:b4:29:
f9:49:18:05:f4:81:f7:83:46:ca:b0:47:d6:5d:c2:76:b2:57:
8e:f4:08:c5:9b:25:3f:de:38:fa:60:90:fd:ac:0f:ff:43:f3:
6f:e9:95:7f:37:de:63:2d:32:cb:4d:1e:2a:2b:67:70:6f:56:
79:07:3c:4c:e1:27:fe:0e:b6:86:07:95:8a:43:ea:9b:97:f8:
0b:42:8a:04:89:49:fe:c4:1b:01:0e:ac:fc:64:4a:d1:a8:ca:
06:cb:4c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:01:36 2026 by rpki-client