Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
File: wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft (raw, json)
Hash identifier: 2oCHSs+g55h19GUScEITOJ2aaHOL438xZVYfucViHMA=
Subject key identifier: 13:5B:E6:B1:E5:E0:F9:9A:18:35:8F:9E:25:AB:1A:52:3B:12:0D:D3
Authority key identifier: C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
Certificate issuer: /CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Certificate serial: 019F834366644FF22BA56521D556F72B9FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
Manifest number: 0CE2
Signing time: Tue 21 Jul 2026 06:01:00 +0000
Manifest this update: Tue 21 Jul 2026 06:01:00 +0000
Manifest next update: Wed 22 Jul 2026 06:01:00 +0000
Files and hashes: 1: Y8cmMZQvMnJkziqHhszvZV_UjeQ.roa (hash: cYgGX/s9jr31rZGmmaEtyXpNrfjq8EGIHIKPU1pqwxk=)
2: wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl (hash: Vb/edia2s+Bw42QXGFYYnLKWaSBzxxjsvCz6MBJLzBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:43:66:64:4f:f2:2b:a5:65:21:d5:56:f7:2b:9f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Validity
Not Before: Jul 21 06:01:00 2026 GMT
Not After : Jul 22 06:01:00 2026 GMT
Subject: CN=135be6b1e5e0f99a18358f9e25ab1a523b120dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:63:3c:08:75:e3:31:f7:60:5b:54:b0:da:fb:
17:31:cc:78:2d:d3:89:79:a6:13:7c:74:fc:e6:cb:
a1:24:b6:f1:fb:38:c3:db:a2:ce:2a:ab:f6:7a:49:
46:c7:af:9d:43:43:fd:b1:38:05:4e:bb:d5:dc:cc:
96:2d:1d:1c:13:cd:20:5c:d6:b1:f4:df:76:55:33:
b4:b2:2b:f8:49:89:f0:80:00:80:ba:da:12:0b:83:
7c:03:bf:05:82:d5:31:18:7a:4e:08:12:14:28:ca:
39:71:11:9b:7b:bd:5e:2c:26:f5:a9:3d:00:d9:05:
5c:e4:b5:b2:60:7b:f5:2b:a1:9f:c0:5c:15:2f:6f:
26:91:0e:13:3d:8a:f6:9d:2b:26:18:04:4d:7a:c7:
c5:64:5f:57:5d:7f:85:15:3a:5f:55:72:98:2d:a9:
67:92:b9:b5:84:3b:54:8b:62:66:1d:70:89:8b:74:
ee:85:7b:01:e6:1b:62:76:19:2a:20:0a:90:c8:25:
33:8c:c0:21:91:4d:b6:f5:09:8e:f3:f6:11:2e:ec:
14:69:3c:34:b3:2a:ed:1d:f4:50:20:16:a6:30:52:
f6:bd:31:65:dc:ad:d7:85:2f:b9:2a:cd:c7:dd:89:
ef:49:bc:29:60:3a:83:31:d6:68:15:7b:b9:8b:36:
09:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5B:E6:B1:E5:E0:F9:9A:18:35:8F:9E:25:AB:1A:52:3B:12:0D:D3
X509v3 Authority Key Identifier:
keyid:C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2b:51:4d:71:39:42:06:54:e0:c3:2a:a2:4f:d2:11:2e:37:
04:2c:e7:03:d7:d6:9d:4c:bd:e6:98:bb:f0:d8:0b:d8:1d:21:
ad:0d:8d:04:cf:a8:91:57:ef:b6:77:b1:56:8a:0c:c5:7c:53:
4f:7e:ac:d6:5d:0d:49:25:0e:02:fb:17:05:d9:54:f8:32:72:
a0:88:24:d8:1a:8a:c3:5c:c9:ef:a7:e6:be:2b:e5:fc:a0:17:
20:fb:4c:b6:cb:f5:8d:b8:79:54:63:8a:0b:04:1d:71:06:c3:
e6:7c:76:45:17:30:26:e3:d1:7a:b9:81:a7:bc:8a:a4:f4:d3:
46:9e:de:dc:cf:ea:ec:fd:ad:5d:98:a5:32:ba:e8:55:c2:57:
96:9d:6b:40:9c:a7:f2:81:c3:3c:0c:a8:e1:2f:ba:b0:93:cc:
d3:3e:83:52:ef:70:31:47:8d:2a:d7:e5:82:5f:c2:90:77:2b:
ca:06:0a:f2:ca:f5:ec:ef:6b:35:2b:20:02:fa:be:c8:70:44:
77:7b:58:ec:73:e2:69:ef:82:30:b1:f7:b4:03:3f:4f:d6:b9:
0f:78:cc:31:a7:34:a4:9b:58:31:4a:55:9d:a1:15:08:a3:eb:
7a:0b:c0:44:c3:cf:cf:a6:cb:d3:0c:9c:ae:4b:6c:e7:73:0a:
0a:8b:18:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:21:29 2026 by rpki-client