Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
File: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft (raw, json)
Hash identifier: aJdQY7TACa70cml0uTkTlEiKAdZK5tJqVab8XZNIz3k=
Subject key identifier: 87:55:9F:09:D7:DE:B3:AA:3B:85:29:65:86:2B:CF:20:45:E7:A6:7C
Authority key identifier: 5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
Certificate issuer: /CN=5a1a31909780e81734af6607272d18525db7657d
Certificate serial: 019D38D3277000C284074A078D0FCA3D7829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
Manifest number: 0D62
Signing time: Sun 29 Mar 2026 09:00:55 +0000
Manifest this update: Sun 29 Mar 2026 09:00:55 +0000
Manifest next update: Mon 30 Mar 2026 09:00:55 +0000
Files and hashes: 1: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl (hash: N7J4iv7MzVAPTen9k7kRf7iAZ0Jc8OW0fj65Ne1yj3o=)
2: a3Lzw_FUmbYwiAPLTEPryzUOYTE.roa (hash: UT3xazFEWgxD4QE0HTQ3reWyQqUTm3ksXZVs3NOwPPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:27:70:00:c2:84:07:4a:07:8d:0f:ca:3d:78:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1a31909780e81734af6607272d18525db7657d
Validity
Not Before: Mar 29 09:00:55 2026 GMT
Not After : Mar 30 09:00:55 2026 GMT
Subject: CN=87559f09d7deb3aa3b852965862bcf2045e7a67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:dc:37:bc:e5:d3:2f:c1:02:cf:64:2a:9d:
fa:46:26:24:f8:4e:03:bd:77:5c:43:08:88:83:48:
a5:92:b0:21:a4:f4:05:18:d3:87:0c:d3:31:83:07:
2c:90:4b:79:f1:52:01:40:90:06:6d:6e:89:c8:f0:
b7:37:e7:4c:c9:91:8f:99:c0:93:ad:8f:ee:27:74:
48:e6:20:13:b5:95:b2:ca:b2:4a:88:c7:6c:47:c1:
a7:0c:3d:2d:a2:0b:65:2f:16:ea:5b:95:c6:98:30:
e8:2b:e3:f7:1b:68:f6:d8:b2:52:bc:5b:08:8a:b7:
fd:5e:bd:79:e3:f2:a0:3f:4b:e1:3c:90:64:94:e0:
ef:a2:37:16:0c:eb:31:98:6c:74:89:d5:8e:81:33:
bc:2c:28:b6:69:41:b2:6b:d6:85:49:52:a3:7d:68:
7f:4e:f6:70:34:01:54:b4:4f:9b:9c:c6:63:6a:9f:
a5:b8:38:2f:d9:52:1c:cb:ea:b1:f4:4a:d0:8d:8e:
de:6f:9b:8a:eb:c0:b2:3d:3b:a5:38:35:13:ca:4d:
55:e8:46:c1:0f:a2:d6:ec:a4:6c:4b:2e:61:2c:48:
a4:e7:9c:8a:e6:45:bd:62:2f:c8:85:dc:b5:ea:67:
e6:0c:02:e6:f4:7c:b8:18:bc:d9:c1:f3:ef:09:4c:
90:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:55:9F:09:D7:DE:B3:AA:3B:85:29:65:86:2B:CF:20:45:E7:A6:7C
X509v3 Authority Key Identifier:
keyid:5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:74:75:74:e7:5d:3b:ac:c4:66:25:de:64:e1:74:93:82:01:
82:78:22:f1:e5:c7:ef:58:d9:31:b7:c4:97:b3:7c:e4:cd:0a:
4c:cc:d6:64:18:02:ea:eb:ab:2f:2f:d1:34:2a:04:0f:a0:3f:
71:10:13:08:b3:20:b9:3c:d0:d3:dc:6c:67:d1:54:00:da:9a:
e7:89:de:0b:52:75:11:17:03:cf:3a:21:46:5c:2a:5e:1b:7c:
9f:f3:ad:ce:b0:28:a2:d7:6c:a4:c0:be:d0:ee:d3:8d:22:72:
14:a1:06:40:d2:4f:5f:f7:b3:59:cc:55:59:dd:c2:1e:38:02:
09:a2:a1:e0:a6:7c:2d:91:4d:ba:21:34:36:5e:ff:5f:66:21:
0b:8e:63:03:0c:9a:85:9d:64:22:d2:94:be:58:f0:92:50:aa:
15:b5:0d:1e:d7:ee:c1:78:88:df:1a:ea:6c:66:9f:e8:b3:96:
9c:d5:f2:ab:e3:22:e3:31:d5:7f:18:9c:b9:a3:69:2d:0d:a4:
d8:0b:f9:fd:93:04:3a:2c:4b:bb:b1:12:3c:a0:93:b9:b0:fb:
a8:2a:3a:45:96:3a:c6:b4:dc:58:04:f9:1d:65:cf:c6:d6:f1:
f6:90:ea:5a:93:bf:16:97:ad:47:1a:cc:c2:49:b4:40:d3:43:
95:bb:0c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:06 2026 by rpki-client