Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
File: WHiPOEJuA2KzTdVnND_oRhpYur4.mft (raw, json)
Hash identifier: nrT5pHeRyfyatYDN7FUd55ryz+JMIw0XHQw0eIyUPJE=
Subject key identifier: E2:FD:70:75:EE:0D:39:0E:BB:3C:C4:0F:C7:5D:08:AB:94:08:95:08
Authority key identifier: 58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE
Certificate issuer: /CN=58788f38426e0362b34dd567343fe8461a58babe
Certificate serial: 019D371B6937A7B6EE4E1F43BB6202EE4474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
Manifest number: 15D4
Signing time: Sun 29 Mar 2026 01:00:36 +0000
Manifest this update: Sun 29 Mar 2026 01:00:36 +0000
Manifest next update: Mon 30 Mar 2026 01:00:36 +0000
Files and hashes: 1: UQttblox4YqbtmcdrnTNUlIXUrA.roa (hash: Kp4mizWB09vMj96WX2Mw1hMJlxG7gErBxSdQDtVOWsI=)
2: WHiPOEJuA2KzTdVnND_oRhpYur4.crl (hash: 4EPNFWNJs73msoLftQpROqOwAWWbDxtA1TJ2LEefk14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:69:37:a7:b6:ee:4e:1f:43:bb:62:02:ee:44:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58788f38426e0362b34dd567343fe8461a58babe
Validity
Not Before: Mar 29 01:00:36 2026 GMT
Not After : Mar 30 01:00:36 2026 GMT
Subject: CN=e2fd7075ee0d390ebb3cc40fc75d08ab94089508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:03:f1:2d:75:09:2f:f5:f7:7a:28:41:cb:
9f:86:3e:6a:b6:15:7a:99:a2:95:2b:8b:f4:8f:e1:
90:84:68:e4:6a:da:a9:76:95:a9:b0:34:c7:54:fe:
70:81:9b:af:9c:5e:74:5e:a2:15:63:9b:83:10:a2:
d1:3d:7d:a9:62:49:a9:56:dc:e3:ee:f0:5f:34:7e:
cb:5b:5f:5f:22:47:14:cd:ee:52:6c:21:1d:3f:4b:
8e:1b:9b:e0:b3:0f:52:13:57:eb:c8:9c:e1:55:9d:
09:af:3d:46:01:c3:b7:bb:46:32:f9:04:dd:56:5b:
3f:b0:c5:9c:79:46:57:47:31:f6:3b:1e:b3:ff:a0:
a5:23:e8:f8:1d:9a:d7:5e:ca:88:64:7e:91:7a:c6:
8d:6e:58:b5:64:fb:3f:1e:5a:2b:65:16:42:81:fe:
33:01:29:66:f8:0b:dc:13:2a:f7:4c:35:19:7f:ff:
b4:14:4e:3f:ae:d2:99:da:c4:66:48:99:08:08:be:
a1:6a:52:41:f5:92:9f:31:8c:d3:a2:8b:d5:a7:5f:
4b:e2:71:ba:d7:3a:4a:ca:3b:dd:c1:e7:65:00:bf:
5e:1b:d1:e2:62:ac:af:17:25:c4:33:06:fc:56:a2:
40:cc:1a:80:db:94:95:05:c1:cf:d1:d3:37:c1:f7:
be:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FD:70:75:EE:0D:39:0E:BB:3C:C4:0F:C7:5D:08:AB:94:08:95:08
X509v3 Authority Key Identifier:
keyid:58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3b:c3:fb:68:20:11:fb:cb:7a:5b:9b:b1:ac:aa:24:20:e4:
04:9f:7e:d8:14:aa:41:80:f4:70:b7:d8:3c:f8:4f:5d:c3:6c:
cd:aa:09:75:75:bb:13:55:cb:a7:1e:a0:8e:dc:59:b1:da:99:
29:99:11:87:67:95:90:e9:b5:1b:74:50:85:f3:8d:67:fb:37:
be:39:a8:43:7c:22:6e:f7:52:1a:a4:30:12:f9:fa:40:42:f4:
40:d7:cf:98:6c:d7:b8:7c:fd:5b:97:dc:76:77:b2:ad:bb:a8:
58:b3:d9:c9:5c:e8:fd:00:ee:34:55:9c:bb:50:d9:b9:89:9d:
ba:0e:8d:d7:91:28:03:30:b4:e2:5a:5f:b4:11:c0:c6:84:7c:
15:73:ce:73:5e:f4:5b:88:d3:55:39:b3:00:62:b0:55:1c:d3:
c1:aa:a1:13:e7:1a:53:0a:ce:b0:7d:95:e6:ab:e2:68:f7:ea:
2d:5e:14:cb:3c:66:d0:86:40:a1:fb:ef:e0:9f:08:67:91:06:
8a:2c:16:98:f2:a3:01:4a:ff:49:b5:a4:54:af:1e:2f:2b:28:
b1:c3:1d:d7:17:91:69:7a:30:3c:42:b4:99:f7:ea:53:d8:5d:
22:f2:ef:74:9d:45:e7:4d:45:9a:af:8a:20:c5:c2:fc:77:c7:
0e:e2:03:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:44 2026 by rpki-client