Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
File: P_WH5OB6zfs4niWRYdoYazhrT2M.mft (raw, json)
Hash identifier: vBmgMoUr3tY/9qOWHudR5BxgR7TAq6Pj8FNbAfKqYg0=
Subject key identifier: A2:7A:43:C5:B8:E1:35:D8:8A:D6:A2:8D:E1:2A:2A:ED:A9:87:4B:82
Authority key identifier: 3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63
Certificate issuer: /CN=3ff587e4e07acdfb389e259161da186b386b4f63
Certificate serial: 019D382E65AF8A3FFEA49209E04EA70B8F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
Manifest number: 033D
Signing time: Sun 29 Mar 2026 06:00:57 +0000
Manifest this update: Sun 29 Mar 2026 06:00:57 +0000
Manifest next update: Mon 30 Mar 2026 06:00:57 +0000
Files and hashes: 1: 1xVEjhQE9q20oXVNNhsn5zEoY7Q.roa (hash: 8p4K4uwRtctRWOC7mSCiV88ZU41loGPvxjZBmuT5O8M=)
2: P_WH5OB6zfs4niWRYdoYazhrT2M.crl (hash: RzJ636M0gN+gHrx8CtVQmB6rnD3Psi1ETfSr5AOJok8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:65:af:8a:3f:fe:a4:92:09:e0:4e:a7:0b:8f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff587e4e07acdfb389e259161da186b386b4f63
Validity
Not Before: Mar 29 06:00:57 2026 GMT
Not After : Mar 30 06:00:57 2026 GMT
Subject: CN=a27a43c5b8e135d88ad6a28de12a2aeda9874b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:51:d2:bf:5c:c3:fc:fc:42:a4:b8:2a:5e:
f3:27:66:ea:c8:51:cc:19:01:56:8c:94:26:d5:dc:
d8:e4:10:c7:76:69:a6:12:89:13:ab:d3:ee:a1:96:
42:06:d6:67:79:af:b4:a9:67:47:95:ab:59:65:26:
29:24:c0:15:c1:d6:b2:bf:35:91:77:88:44:12:06:
16:33:4a:6c:d5:9b:2d:e9:e2:69:7e:29:eb:36:fd:
2f:54:43:bf:42:61:31:b8:85:9e:88:69:cc:fb:27:
af:74:d2:c0:f0:da:c7:0b:71:a6:d5:d6:31:a3:12:
04:75:0f:57:c1:34:2a:cc:04:eb:e5:7f:14:e3:81:
c4:6e:43:55:94:a6:6a:07:99:88:72:2a:24:b5:72:
21:90:6e:fe:23:2b:28:6c:5c:dd:45:1e:bb:be:bb:
93:f6:84:b2:a7:ae:db:9b:f5:b8:b6:f2:ff:23:5b:
ba:ba:97:18:a8:35:f4:e3:59:6d:45:28:75:b9:57:
27:7d:98:3d:60:70:0c:8e:c5:58:5f:e6:19:b7:59:
b8:1b:0d:09:9e:12:f9:07:09:51:dd:47:36:b0:0e:
ef:dc:7f:84:96:c9:5b:ec:21:d8:03:98:4b:79:59:
27:da:da:f3:a2:16:0c:59:57:c9:9a:60:32:e7:d0:
fc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7A:43:C5:B8:E1:35:D8:8A:D6:A2:8D:E1:2A:2A:ED:A9:87:4B:82
X509v3 Authority Key Identifier:
keyid:3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5b:d1:cf:25:62:f4:a7:4c:b2:67:b2:15:83:b9:5a:12:bd:
78:85:2a:57:c4:8a:5f:aa:00:6b:ce:2a:65:68:ad:bf:8f:3c:
7e:2c:b1:10:fa:13:6b:53:36:cd:a5:bb:39:84:79:7e:5b:49:
07:bb:58:69:ff:26:66:8a:90:37:9a:3d:27:76:43:b8:b6:73:
a8:03:94:07:8e:4d:b8:61:e5:3a:03:45:c8:4b:05:ae:06:bc:
ee:6b:e3:59:a0:00:71:11:a6:fd:d0:27:42:39:1b:95:58:6e:
f6:44:f5:cd:8e:db:de:88:58:7f:07:0b:1a:1c:f8:05:93:09:
36:71:dd:48:e8:be:d3:4a:51:3b:1a:06:cb:71:d6:ad:70:4a:
41:1c:19:92:37:b6:ed:c0:98:5c:a6:24:07:5f:33:60:01:e8:
d5:e0:d6:e4:54:bc:5e:b2:8b:33:38:10:fd:1c:9c:88:fb:7f:
c2:70:f2:e6:f6:2a:c3:07:ee:f0:7b:76:c2:10:e3:c8:74:d4:
d9:5a:73:f1:4b:79:bc:0f:f8:f5:83:3f:cc:12:60:f2:b8:44:
cf:47:da:c6:f1:21:b6:32:7c:8f:08:9c:34:c8:57:40:e7:78:
bf:f9:fa:4b:ab:a8:ca:60:b0:34:d8:e0:12:f0:b3:aa:62:bb:
f6:9c:93:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:38 2026 by rpki-client