Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
File: Wh1F7dft3pqLhipzmtqOeLfcgrk.mft (raw, json)
Hash identifier: T7d7tsqPBJAEvw3T+PFpN28PoRIMKAq7DfCu76LcKbU=
Subject key identifier: 7C:67:52:10:D8:7D:9C:FB:3F:A5:1B:6F:DF:28:68:59:13:15:8F:E6
Authority key identifier: 5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
Certificate issuer: /CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Certificate serial: 019D389C1F716AD4B0CCE47FF73950506D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
Manifest number: 08F7
Signing time: Sun 29 Mar 2026 08:00:48 +0000
Manifest this update: Sun 29 Mar 2026 08:00:48 +0000
Manifest next update: Mon 30 Mar 2026 08:00:48 +0000
Files and hashes: 1: ECgQqL27E95oDO2UnT5GtnD2MOo.asa (hash: FyGPkpvNHxEr+w+xHCpx+LmSayXKpypdP8RYo7kPHxE=)
2: Wh1F7dft3pqLhipzmtqOeLfcgrk.crl (hash: uoxlYzxxG4hwUAGpNRCA0BdtZaUiSJL+ZXmneDoAL3I=)
3: s8m3AyH2NlTDR3fTgsQPhcOlx7E.roa (hash: Kh2PCRdzGOujvxuGu8QsoDuJDZuroFKBTb7iTvPyMic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:1f:71:6a:d4:b0:cc:e4:7f:f7:39:50:50:6d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Validity
Not Before: Mar 29 08:00:48 2026 GMT
Not After : Mar 30 08:00:48 2026 GMT
Subject: CN=7c675210d87d9cfb3fa51b6fdf28685913158fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:1f:69:36:08:40:5c:8c:9c:e2:07:d9:16:
50:23:1e:84:de:77:f1:48:72:69:2e:2f:73:56:37:
73:72:8b:da:01:44:10:ed:e6:d2:ef:87:59:11:4c:
48:0d:0c:7a:47:dc:52:7d:8c:76:3f:89:5d:ac:c6:
e5:2d:cd:6c:02:37:28:e0:07:52:3c:bf:52:f2:89:
5b:3c:35:33:79:a2:c6:9d:01:4c:25:2e:11:13:af:
ff:9b:4b:7f:6f:03:e5:7b:61:45:b4:e8:97:ea:ff:
04:0d:38:bf:60:24:87:92:f3:ba:45:6d:2c:79:f5:
14:86:70:50:26:5e:af:9b:18:b0:2c:92:dd:5f:fa:
84:94:b4:29:40:22:6d:d0:75:73:a1:03:6c:30:e6:
8d:33:cd:1d:54:48:9a:54:0f:35:6b:73:15:7d:8d:
d6:9a:e2:96:83:15:bd:44:f8:77:f8:da:9f:f1:bf:
33:d7:36:8e:c6:54:27:77:9b:f7:76:8b:1f:1a:80:
6e:95:6c:07:dc:f8:9e:01:35:78:aa:65:52:79:af:
12:ae:eb:31:df:c0:3d:81:56:00:f8:ac:1f:50:e4:
f1:54:9e:d0:c2:ba:13:12:13:6f:be:ac:d7:98:b1:
df:53:c6:3e:9b:39:68:be:44:90:ed:c8:32:af:50:
d3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:67:52:10:D8:7D:9C:FB:3F:A5:1B:6F:DF:28:68:59:13:15:8F:E6
X509v3 Authority Key Identifier:
keyid:5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:41:29:88:98:63:f7:ed:39:ee:da:cd:0c:12:ea:f0:b9:e1:
2c:aa:ab:72:e1:b0:2a:74:6f:50:2b:91:b1:e8:66:bd:be:3a:
50:4c:33:81:3b:72:1a:61:cd:de:0a:eb:f2:93:3d:2d:a5:fa:
ec:94:8d:aa:a6:d9:25:3a:c9:35:fb:ff:b8:55:f1:47:eb:1b:
d0:8a:4d:55:e6:4b:22:03:af:72:a4:74:73:3e:f4:00:f5:b2:
11:03:ca:62:29:b8:78:a3:60:95:25:d2:f5:f0:31:88:d1:95:
3c:49:64:7e:33:c7:32:29:a4:ae:61:72:80:77:d4:54:67:a1:
95:2d:74:1c:f0:38:42:e3:ad:b0:69:8c:27:9b:84:d8:1a:f3:
12:a5:51:20:ab:3a:0e:df:5b:04:f3:be:eb:f5:63:8d:dc:21:
b6:20:4c:75:a7:1a:32:3c:72:10:fb:01:36:12:c3:38:14:d8:
b5:82:bd:9c:bc:53:bf:f3:b0:c1:8c:57:b0:55:2c:ca:86:da:
9c:8d:08:40:5c:8a:be:e2:47:76:82:81:72:de:62:42:ed:ce:
93:e7:b1:8a:7c:9a:9e:76:fc:03:de:19:91:ce:0d:ae:c9:c8:
f2:f9:30:cb:1b:3e:f9:28:47:84:d3:ce:24:16:9d:36:bc:b8:
c7:57:6e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:14 2026 by rpki-client