Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
File: Wh1F7dft3pqLhipzmtqOeLfcgrk.mft (raw, json)
Hash identifier: ghgsGfa4kNicY1354ZWgSRkz32jvAIzd/N9vH6Eh7wo=
Subject key identifier: 7B:10:D2:5E:E1:9F:70:F0:30:5F:91:C7:41:0A:D7:35:7D:07:19:AA
Authority key identifier: 5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
Certificate issuer: /CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Certificate serial: 01A0442B57EABCF4150336B884496E06A16F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
Manifest number: 0A8B
Signing time: Thu 27 Aug 2026 17:01:26 +0000
Manifest this update: Thu 27 Aug 2026 17:01:26 +0000
Manifest next update: Fri 28 Aug 2026 17:01:26 +0000
Files and hashes: 1: AS-oysEqUI5CVvE948att4Xq6JI.asa (hash: 77TWGfYwUVUPd2n4D+6kjGiOa/YM7yw2cUJ1Rc0SYHQ=)
2: Wh1F7dft3pqLhipzmtqOeLfcgrk.crl (hash: ZbTUXv+PsOCRM1pvejhL4I+8bM2OicPSPUhg9sZeg/Q=)
3: s8m3AyH2NlTDR3fTgsQPhcOlx7E.roa (hash: Kh2PCRdzGOujvxuGu8QsoDuJDZuroFKBTb7iTvPyMic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 14:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:44:2b:57:ea:bc:f4:15:03:36:b8:84:49:6e:06:a1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Validity
Not Before: Aug 27 17:01:26 2026 GMT
Not After : Aug 28 17:01:26 2026 GMT
Subject: CN=7b10d25ee19f70f0305f91c7410ad7357d0719aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:29:3f:80:36:ba:9d:b6:ad:b3:50:69:ba:
a1:26:4f:5c:f0:2e:06:e9:10:9e:0d:1d:7a:53:07:
82:e1:ab:53:44:40:18:f7:3e:84:fc:68:d9:e3:9f:
89:37:58:9f:e2:18:2d:6b:4c:aa:12:ee:22:07:3f:
04:63:68:e5:f9:39:a2:8b:20:d2:62:fb:22:29:cf:
fe:77:b7:11:6a:a6:c3:1f:b7:21:b4:f2:2e:13:91:
30:22:76:56:e0:c6:c4:a3:08:f3:00:93:95:1d:b6:
ed:10:ad:ec:66:29:6e:09:54:7d:ec:e3:61:97:c9:
9c:f3:89:03:c6:9d:f8:78:c9:60:fc:86:d5:9c:c0:
8e:eb:92:cc:cf:84:f0:2e:6a:b1:ae:84:fd:0e:5d:
cd:03:ef:fd:ea:4c:a0:7e:76:e1:92:24:7b:e4:59:
0d:da:cc:d5:6b:24:21:25:dd:35:d8:f3:e9:8f:4d:
a4:5d:da:96:44:f0:13:b8:a8:9c:31:96:59:72:37:
95:bc:3e:61:77:3c:a8:11:66:13:ce:34:9a:b9:53:
7a:3b:f9:f3:43:1e:f2:9a:96:57:96:ce:75:14:0e:
bc:aa:75:98:5a:47:db:cd:75:4d:1d:44:cc:72:81:
35:b8:e4:bc:40:68:96:4a:c3:05:c5:85:8c:91:bc:
44:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:10:D2:5E:E1:9F:70:F0:30:5F:91:C7:41:0A:D7:35:7D:07:19:AA
X509v3 Authority Key Identifier:
keyid:5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fd:8f:39:d2:7e:3f:af:ee:84:1e:a1:16:df:97:ee:6d:5f:
d8:e3:d1:4d:dd:0f:9d:27:8f:3b:24:0a:27:82:e4:ef:3a:1c:
e6:d0:54:55:7e:15:b2:2c:48:30:a0:8e:06:15:7e:6f:40:32:
91:86:40:4a:76:cd:1a:cf:2d:07:3e:80:42:ab:35:aa:9f:7d:
11:73:79:1a:74:05:a1:a3:2a:b5:06:9e:00:cb:37:dd:a3:76:
2a:d9:71:55:45:b2:31:8a:54:5f:42:fd:4f:61:ab:c4:cb:78:
25:82:0c:87:8e:d8:2a:ba:64:1a:90:be:5d:c6:d0:d4:b7:10:
fa:7a:2f:ed:5c:e7:ca:5a:bc:74:2a:09:0b:17:78:80:a7:fd:
66:19:b2:0e:fb:98:2b:4d:47:5e:80:fb:01:c8:95:83:10:49:
47:e9:0e:e0:ac:59:3b:09:db:96:c2:80:95:21:82:3a:0f:a2:
4d:cb:4b:4d:37:b5:9a:1c:c4:1e:9e:8f:5c:17:57:80:46:c7:
af:07:44:7e:44:55:dd:e9:c6:9d:7d:00:e5:23:64:3d:3a:99:
b6:28:53:26:3d:f5:0d:c0:e7:42:99:90:e0:a7:c1:9a:5c:55:
be:e6:a8:ba:a5:a9:24:43:f6:84:4a:0b:9f:e9:d2:3c:31:b3:
77:88:c9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 19:56:41 2026 by rpki-client