Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
File: WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft (raw, json)
Hash identifier: Z63gwFTd9gfTifxpkaOgt0T8qHfgMG2VgfcwonV6hMI=
Subject key identifier: DA:0E:C7:37:98:EA:B8:F2:26:44:32:80:58:6B:BF:B0:4E:4B:9F:20
Authority key identifier: 58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A
Certificate issuer: /CN=5871720a8884167fef82a49267661fb346d7561a
Certificate serial: 019D389C12DDB59D4D7F07D092DA58E6ADA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 08:00:45 +0000
Manifest this update: Sun 29 Mar 2026 08:00:45 +0000
Manifest next update: Mon 30 Mar 2026 08:00:45 +0000
Files and hashes: 1: WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl (hash: Gm4jTyIgLiizF4jt9Zp49LvJusYrs5qq/oRordtkfUU=)
2: aM3jDyUSBlPTCNMfpXY5YwnPsA8.roa (hash: jUnTNL0+v3OE/gFOXVeP3LxsqBN3nJHAQLUeEsSvDk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:12:dd:b5:9d:4d:7f:07:d0:92:da:58:e6:ad:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5871720a8884167fef82a49267661fb346d7561a
Validity
Not Before: Mar 29 08:00:45 2026 GMT
Not After : Mar 30 08:00:45 2026 GMT
Subject: CN=da0ec73798eab8f226443280586bbfb04e4b9f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:fe:27:5a:26:1d:91:6e:32:aa:cb:03:75:
25:97:6b:06:41:77:34:48:e2:9f:5e:1b:df:c3:0f:
82:ae:57:9e:ab:90:0e:3d:49:55:cf:4b:42:26:d8:
a7:20:0e:57:5d:e2:47:ea:4a:76:4f:2e:ac:e7:8b:
bb:28:f7:f3:07:ff:f1:c9:61:20:af:cc:f5:41:f4:
d7:e0:61:88:1b:e4:1f:90:bb:1a:a9:8c:fe:85:94:
4c:51:68:72:61:42:01:aa:ea:8b:d2:b2:26:30:a1:
eb:ef:4e:d0:bf:96:ee:be:b9:61:eb:a8:d9:a3:a5:
1f:b5:5b:34:68:c3:4d:c9:e1:2f:dd:24:25:81:58:
16:46:fd:05:c2:75:d2:ee:62:02:8a:0e:7e:37:fd:
d7:4c:b9:16:19:ab:fe:6b:99:ed:e4:e8:5f:e8:2c:
9c:08:72:41:b6:1c:92:00:a0:aa:c7:b2:96:23:95:
91:f0:46:42:1b:a0:ed:2b:4e:8e:4e:d7:f9:49:4d:
2a:3a:6f:b0:fe:80:3e:51:96:4b:4a:dd:bb:8e:54:
4f:4e:29:87:18:e5:10:d2:d6:74:b7:99:68:d5:6a:
2c:43:7f:66:b0:93:db:2a:61:85:ca:3c:33:b7:59:
da:b8:7f:4e:16:be:bc:9c:70:ce:dc:6d:13:8c:90:
4b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0E:C7:37:98:EA:B8:F2:26:44:32:80:58:6B:BF:B0:4E:4B:9F:20
X509v3 Authority Key Identifier:
keyid:58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d9:8a:13:30:b0:51:f8:80:54:d0:bc:f9:b9:a5:71:c2:39:
b6:e9:f7:d9:50:47:a1:69:10:15:54:c6:f1:89:69:71:1c:cf:
98:5b:12:56:69:c8:58:1d:5f:78:69:34:de:31:1a:30:e8:d1:
4d:b0:bc:ce:db:f2:ed:a3:7a:d1:e1:a2:79:c8:44:10:78:e8:
4f:32:ab:ee:01:97:36:df:9f:29:21:85:47:02:4f:a0:69:58:
7c:0c:cc:78:92:a1:28:f2:f9:0d:15:82:28:f9:f3:ae:70:76:
3d:18:fb:3b:d8:24:2d:63:fb:9a:f9:56:cd:f8:9f:ce:1f:3d:
63:41:42:30:33:d8:b3:76:06:58:0d:01:cb:56:90:f9:bc:9c:
94:bb:7e:9e:08:6a:9d:a3:39:e2:cd:37:a3:e4:77:f7:90:5a:
a2:25:87:0d:a2:0e:f1:d1:f6:5d:7c:d7:df:22:9f:b0:69:52:
04:44:eb:96:7f:69:36:a3:3e:c4:8b:33:f7:0f:54:e1:cd:88:
74:a0:c3:c9:8c:d8:29:c6:3b:74:5f:a3:49:c2:c1:d2:ad:7a:
aa:27:71:a0:ed:fe:88:2a:19:c0:da:09:56:98:c9:3e:18:28:
9a:8f:00:8c:83:6f:32:75:d3:04:91:1b:95:af:b5:34:a5:c2:
d2:77:5d:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nBLdtZ1NfwfQktpY5q2oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NzE3MjBhODg4NDE2N2ZlZjgyYTQ5MjY3NjYxZmIzNDZk
NzU2MWEwHhcNMjYwMzI5MDgwMDQ1WhcNMjYwMzMwMDgwMDQ1WjAzMTEwLwYDVQQD
EyhkYTBlYzczNzk4ZWFiOGYyMjY0NDMyODA1ODZiYmZiMDRlNGI5ZjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9T+J1omHZFuMqrLA3Ull2sGQXc0
SOKfXhvfww+Crleeq5AOPUlVz0tCJtinIA5XXeJH6kp2Ty6s54u7KPfzB//xyWEg
r8z1QfTX4GGIG+QfkLsaqYz+hZRMUWhyYUIBquqL0rImMKHr707Qv5buvrlh66jZ
o6UftVs0aMNNyeEv3SQlgVgWRv0FwnXS7mICig5+N/3XTLkWGav+a5nt5Ohf6Cyc
CHJBthySAKCqx7KWI5WR8EZCG6DtK06OTtf5SU0qOm+w/oA+UZZLSt27jlRPTimH
GOUQ0tZ0t5lo1WosQ39msJPbKmGFyjwzt1nauH9OFr68nHDO3G0TjJBLSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoOxzeY6rjyJkQygFhrv7BOS58gMB8GA1UdIwQY
MBaAFFhxcgqIhBZ/74KkkmdmH7NG11YaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0hGeUNvaUVGbl92Z3FTU1oyWWZzMGJYVmhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZmE2MDItZjZiOC00N2FlLWJmMDYt
N2RhODljZGE5ZjcxLzEvV0hGeUNvaUVGbl92Z3FTU1oyWWZzMGJYVmhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wZmE2MDItZjZiOC00N2FlLWJmMDYtN2RhODljZGE5Zjcx
LzEvV0hGeUNvaUVGbl92Z3FTU1oyWWZzMGJYVmhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApNmKEzCw
UfiAVNC8+bmlccI5tun32VBHoWkQFVTG8YlpcRzPmFsSVmnIWB1feGk03jEaMOjR
TbC8ztvy7aN60eGiechEEHjoTzKr7gGXNt+fKSGFRwJPoGlYfAzMeJKhKPL5DRWC
KPnzrnB2PRj7O9gkLWP7mvlWzfifzh89Y0FCMDPYs3YGWA0By1aQ+byclLt+nghq
naM54s03o+R395BaoiWHDaIO8dH2XXzX3yKfsGlSBETrln9pNqM+xIsz9w9U4c2I
dKDDyYzYKcY7dF+jScLB0q16qidxoO3+iCoZwNoJVpjJPhgomo8AjINvMnXTBJEb
la+1NKXC0nddFw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:52 2026 by rpki-client