Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft
File: WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft (raw, json)
Hash identifier: 5Iqtc6tz9mOJeuLYE5O0sfG6P4vPx3l2zeeUH0+GnZk=
Subject key identifier: 0B:54:CB:13:0F:F5:3C:F7:64:0C:A7:1E:90:12:62:63:A9:06:34:2B
Authority key identifier: 5A:15:68:19:9D:29:23:9A:27:45:AD:43:B6:96:FB:DC:2E:06:70:6D
Certificate issuer: /CN=5a1568199d29239a2745ad43b696fbdc2e06706d
Certificate serial: 019D386647E5C01FF534D75325DCE8537C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft
Manifest number: 1857
Signing time: Sun 29 Mar 2026 07:02:00 +0000
Manifest this update: Sun 29 Mar 2026 07:02:00 +0000
Manifest next update: Mon 30 Mar 2026 07:02:00 +0000
Files and hashes: 1: WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl (hash: Y34DA9ZTC4xbFNft9jEZkA8whih16zxqzQ6nQORhhyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:47:e5:c0:1f:f5:34:d7:53:25:dc:e8:53:7c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1568199d29239a2745ad43b696fbdc2e06706d
Validity
Not Before: Mar 29 07:02:00 2026 GMT
Not After : Mar 30 07:02:00 2026 GMT
Subject: CN=0b54cb130ff53cf7640ca71e90126263a906342b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:20:42:22:49:39:6f:ba:f8:70:44:ea:19:13:
f8:b5:e5:c8:cf:45:8b:50:c1:a1:18:78:0d:22:3e:
01:90:d8:54:de:60:c1:44:22:8c:70:94:59:43:bc:
2a:6f:fe:06:91:25:63:60:04:bc:3e:98:f4:31:68:
21:47:b7:cc:1c:6e:31:08:f7:a7:22:f8:c4:05:0d:
c8:a1:57:43:c5:d8:77:e8:73:55:0a:e6:02:b6:af:
58:82:b4:4c:84:8c:c3:bb:23:35:9a:af:ec:a1:50:
a4:00:52:45:f8:f6:52:a2:1f:9c:d6:b9:fc:c4:03:
1e:65:30:d6:4b:1a:ce:bc:03:fa:9f:43:7e:8f:9d:
4d:b3:e8:66:33:bf:ea:05:5c:d5:59:d4:d8:c8:30:
7b:ec:bf:15:16:ce:b1:f5:93:86:1f:6b:b7:e0:22:
9a:3c:ce:dd:76:cb:29:ac:2e:ea:5c:40:45:69:61:
8b:1c:81:30:92:87:e4:f5:e8:40:f3:5c:2e:1e:23:
78:c2:e4:da:78:08:d4:76:14:e2:b2:a0:61:98:eb:
26:6a:a6:1c:61:1f:49:5a:7d:72:6a:c9:97:2a:0e:
f3:7c:1a:a3:05:5e:61:5c:a2:3b:6e:79:23:f8:6d:
64:d6:71:6b:18:23:0e:44:91:68:a7:3f:d6:f6:60:
66:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:54:CB:13:0F:F5:3C:F7:64:0C:A7:1E:90:12:62:63:A9:06:34:2B
X509v3 Authority Key Identifier:
keyid:5A:15:68:19:9D:29:23:9A:27:45:AD:43:B6:96:FB:DC:2E:06:70:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:aa:5f:24:1b:39:b5:53:8e:da:cf:30:43:c5:07:63:3e:c8:
4e:39:f8:9e:ea:57:41:a1:5c:fe:ad:91:94:ff:a0:d6:58:c6:
e1:5d:c2:2b:e3:aa:5d:1d:99:93:f0:76:0f:0b:7c:1d:b1:1c:
cc:03:07:80:4a:84:65:2a:91:0d:ec:21:74:e4:62:db:87:f2:
ff:83:a8:46:d2:80:f5:6b:47:d0:fa:ce:f5:cd:31:da:55:8e:
89:5c:83:73:39:fc:32:47:c7:b0:cf:bf:d8:e3:4c:2a:29:b9:
d9:ac:88:8f:e0:44:d3:af:53:ce:f9:e4:4f:f1:0b:b4:5e:b3:
a4:4d:52:f1:03:bf:bf:92:d7:05:b8:07:75:d4:18:60:aa:aa:
17:1f:bc:3f:a8:48:e2:9a:dd:74:87:28:9e:b5:21:56:dd:46:
c4:31:89:aa:ea:6f:72:40:61:f8:c6:29:97:fb:ab:f4:f9:e4:
6c:e9:ff:b3:98:cb:ab:cf:11:22:58:77:26:11:41:e9:35:1a:
19:df:69:00:e8:18:24:0b:a2:39:bb:9a:7f:02:10:2b:f9:a9:
18:47:86:70:7c:75:3d:dc:77:d6:64:4c:c3:a0:e3:f3:5c:9c:
80:0c:13:b0:06:84:a0:ee:09:f8:1a:19:c9:19:dd:82:56:72:
dd:36:ee:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:54 2026 by rpki-client