Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
File: WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft (raw, json)
Hash identifier: SOhr8xtGZrMJY39R6u2UyqfNNZVjtQQJnrpHJXxng5A=
Subject key identifier: 64:91:23:24:1D:30:8A:62:D9:15:A6:53:FD:87:A2:3C:5B:E5:E1:08
Authority key identifier: 5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
Certificate issuer: /CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Certificate serial: 019D25F14736101749B4C871E124725CF518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
Manifest number: 14E3
Signing time: Wed 25 Mar 2026 17:01:02 +0000
Manifest this update: Wed 25 Mar 2026 17:01:02 +0000
Manifest next update: Thu 26 Mar 2026 17:01:02 +0000
Files and hashes: 1: WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl (hash: MH827TDsiORz1T9MAHTSLqto/b95OB2in0BfcqpyHtU=)
2: seNSk84li2dZlctJAUeZ_r6fQdk.roa (hash: AtzT2v2IabnE0tR+Z9io8DEcEd219tuxCpUpZJ+4AzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:47:36:10:17:49:b4:c8:71:e1:24:72:5c:f5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Validity
Not Before: Mar 25 17:01:02 2026 GMT
Not After : Mar 26 17:01:02 2026 GMT
Subject: CN=649123241d308a62d915a653fd87a23c5be5e108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:6c:3d:d4:e1:2f:79:8c:c7:cc:cf:52:45:
03:1b:09:74:cb:f4:8a:33:1c:04:fc:6f:05:09:1d:
82:7b:37:16:24:2b:3e:7d:7a:5d:33:a6:9f:26:41:
af:9e:76:e4:d9:c5:79:48:86:3f:49:83:65:e6:fa:
c8:0a:3e:97:ff:56:e7:cd:67:f4:e6:c9:60:b2:e3:
c4:43:d2:4d:fd:ff:a0:f3:f0:cc:0f:d9:2f:7a:69:
a7:74:28:b7:51:52:a5:ec:1c:a5:b5:26:2c:39:43:
0d:0f:5a:21:c2:6f:d9:12:33:31:72:72:53:d2:9f:
15:46:2e:a5:1c:b2:90:a3:0b:df:3b:81:dc:cc:44:
4e:d1:c9:e5:38:14:25:be:71:60:3b:72:d8:d3:d5:
31:41:4f:f3:09:6d:3f:43:97:fa:11:5c:a9:f8:15:
87:8f:5e:6b:57:c7:4e:97:ec:fd:c1:b1:39:3f:33:
21:d8:76:df:d1:32:e4:17:bd:9d:bd:72:ba:a2:c0:
c8:4e:56:f4:c7:3b:3c:c3:f3:8c:bc:78:24:cd:91:
e1:23:58:b5:31:c6:93:d2:ec:f1:d1:6a:32:82:f5:
3b:86:4d:72:c0:29:de:5c:c9:d9:9d:a0:41:57:a3:
9d:64:07:ab:20:ae:24:b9:f0:8e:4e:ca:ae:13:54:
ff:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:91:23:24:1D:30:8A:62:D9:15:A6:53:FD:87:A2:3C:5B:E5:E1:08
X509v3 Authority Key Identifier:
keyid:5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1b:e6:08:b3:de:fd:ce:03:ea:20:c5:b1:74:fd:c9:1e:67:
55:08:1c:6b:77:0f:42:e5:c0:ba:90:1d:93:8b:48:4e:ee:f0:
94:6b:ba:7e:fe:39:ae:93:d2:e0:4c:a8:b8:f0:8a:a0:d8:a0:
5a:9c:9f:55:75:b7:47:f2:c6:31:8f:88:d6:05:52:9b:8b:a4:
45:fb:47:fc:02:aa:ce:f5:aa:20:a0:1a:5f:a2:71:4d:62:1f:
24:8b:86:7b:b2:14:4f:f4:2f:92:cd:d6:93:71:e1:6a:97:66:
33:e1:fc:68:4e:a4:6f:b6:e3:9d:93:72:6c:78:c4:b7:63:a8:
dd:49:33:03:cc:da:00:36:c0:b4:7c:81:bc:2c:5c:df:89:6e:
3e:3b:8c:e5:16:8e:09:dc:c1:23:dd:bd:31:bc:f2:56:b2:65:
c9:df:69:6c:79:69:25:97:83:5a:14:16:09:9f:7e:1b:47:f4:
f8:a5:26:49:0e:3b:8f:74:ed:ae:8f:f2:01:e6:78:24:2e:91:
45:b7:3b:4a:e5:8c:b9:9e:d6:4d:3b:b6:d9:3a:db:e1:64:e0:
97:82:36:50:d0:ff:5c:6f:6c:a7:aa:db:94:2c:d0:98:6e:65:
f0:1d:05:1e:3c:e8:41:df:c4:c3:98:c5:47:5a:1a:94:bb:50:
d8:24:4c:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8Uc2EBdJtMhx4SRyXPUYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMTU1ZTMyYzRhOWNkYTFhODFiZDljNzM3MGRjMzRhYjAw
NjUzYTAwHhcNMjYwMzI1MTcwMTAyWhcNMjYwMzI2MTcwMTAyWjAzMTEwLwYDVQQD
Eyg2NDkxMjMyNDFkMzA4YTYyZDkxNWE2NTNmZDg3YTIzYzViZTVlMTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW9sPdThL3mMx8zPUkUDGwl0y/SK
MxwE/G8FCR2CezcWJCs+fXpdM6afJkGvnnbk2cV5SIY/SYNl5vrICj6X/1bnzWf0
5slgsuPEQ9JN/f+g8/DMD9kvemmndCi3UVKl7ByltSYsOUMND1ohwm/ZEjMxcnJT
0p8VRi6lHLKQowvfO4HczERO0cnlOBQlvnFgO3LY09UxQU/zCW0/Q5f6EVyp+BWH
j15rV8dOl+z9wbE5PzMh2Hbf0TLkF72dvXK6osDITlb0xzs8w/OMvHgkzZHhI1i1
McaT0uzx0WoygvU7hk1ywCneXMnZnaBBV6OdZAerIK4kufCOTsquE1T/SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSRIyQdMIpi2RWmU/2Hojxb5eEIMB8GA1UdIwQY
MBaAFFoVXjLEqc2hqBvZxzcNw0qwBlOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MmJjZGEtZjk3ZS00NzY1LWFhOTUt
Y2QyZjU3NzFkYTk4LzEvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81MmJjZGEtZjk3ZS00NzY1LWFhOTUtY2QyZjU3NzFkYTk4
LzEvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlRvmCLPe
/c4D6iDFsXT9yR5nVQgca3cPQuXAupAdk4tITu7wlGu6fv45rpPS4EyouPCKoNig
WpyfVXW3R/LGMY+I1gVSm4ukRftH/AKqzvWqIKAaX6JxTWIfJIuGe7IUT/Qvks3W
k3HhapdmM+H8aE6kb7bjnZNybHjEt2Oo3UkzA8zaADbAtHyBvCxc34luPjuM5RaO
CdzBI929MbzyVrJlyd9pbHlpJZeDWhQWCZ9+G0f0+KUmSQ47j3Ttro/yAeZ4JC6R
Rbc7SuWMuZ7WTTu22Trb4WTgl4I2UND/XG9sp6rblCzQmG5l8B0FHjzoQd/Ew5jF
R1oalLtQ2CRMDg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:34 2026 by rpki-client