Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
File: wh-rdnRH02kRl0z5ux0a6RMfyEU.mft (raw, json)
Hash identifier: CLe0o4OQCKm31alkVPTW7KxRcDOZ2d/SDgq0Qgci0gA=
Subject key identifier: 8A:32:7C:45:32:EC:5F:BC:1D:0D:00:3A:DE:76:BA:B6:9E:1A:F9:FD
Authority key identifier: C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
Certificate issuer: /CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Certificate serial: 019EBF5ACC4EBB2E852DFD0D5644D8DBCBA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
Manifest number: 16E7
Signing time: Sat 13 Jun 2026 05:00:59 +0000
Manifest this update: Sat 13 Jun 2026 05:00:59 +0000
Manifest next update: Sun 14 Jun 2026 05:00:59 +0000
Files and hashes: 1: DtAUOHLSS6WIfSS0GF2C7AUksM4.roa (hash: 2zf4aTdLuiPqep9tgkg3+1DOOvs3BrWOmseQlMJ7vC8=)
2: wh-rdnRH02kRl0z5ux0a6RMfyEU.crl (hash: 84bvS0/PZforbxthI0bKXWwoz6eJbw01wYXN4r8Egkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:cc:4e:bb:2e:85:2d:fd:0d:56:44:d8:db:cb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Validity
Not Before: Jun 13 05:00:59 2026 GMT
Not After : Jun 14 05:00:59 2026 GMT
Subject: CN=8a327c4532ec5fbc1d0d003ade76bab69e1af9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:67:8e:95:f6:ad:07:bd:a7:d8:39:ef:49:13:
18:12:28:94:dc:00:9e:db:6c:8b:8f:0c:99:b2:84:
7f:3b:30:a7:5e:f3:cb:d3:f0:af:96:37:f5:25:10:
83:00:91:a0:49:3e:fe:17:5f:c9:60:94:d4:25:89:
a3:33:13:4b:e3:15:ac:6d:3e:10:b4:76:77:fb:d0:
fd:19:a5:51:23:f5:55:52:50:2b:53:23:4a:b4:04:
a7:9a:15:9a:b8:13:43:01:fc:41:3a:5c:78:eb:24:
4b:04:f5:df:2a:02:65:1a:26:c6:c7:79:a1:ae:76:
72:26:6b:4d:af:bb:73:f7:61:4c:93:68:f9:e1:50:
ba:74:68:ca:3c:f6:41:34:9e:bd:77:22:bb:0b:52:
3e:6a:22:ef:ad:f2:e2:a8:a6:a6:15:9d:bf:e6:df:
5f:73:70:47:e6:95:cb:fc:93:a3:88:44:66:ef:da:
38:6a:f1:41:ef:d6:e4:45:07:3e:e1:05:71:1c:e7:
1f:63:47:96:88:8c:5c:1e:8c:5b:3e:a3:8c:89:d1:
a7:77:2a:0f:bd:6f:47:57:1c:b8:78:20:8f:ce:1b:
fd:b4:a6:2d:80:61:45:f7:19:dd:11:0b:2a:c6:71:
7d:d8:25:9c:b0:84:e8:87:66:d7:75:b5:ba:3f:6a:
09:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:32:7C:45:32:EC:5F:BC:1D:0D:00:3A:DE:76:BA:B6:9E:1A:F9:FD
X509v3 Authority Key Identifier:
keyid:C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:67:21:d5:31:60:40:11:bf:18:47:48:35:e1:58:08:d4:cd:
4e:2d:2b:b8:be:d9:06:5d:e7:36:f5:56:4e:6f:02:95:77:1d:
d1:6b:ab:59:e9:a0:20:1a:df:0a:b2:4b:1f:78:3b:92:8c:f5:
b0:14:3c:b6:d2:42:1c:56:8b:dc:ba:94:64:05:48:fb:d9:f0:
63:86:5d:b4:2f:e2:a9:21:2a:27:63:a8:c3:26:ac:dd:43:82:
ce:b3:14:b0:e5:46:48:31:cc:1a:c4:0a:c3:78:0f:08:df:c1:
88:c6:5c:85:aa:74:26:04:76:29:e7:cd:39:09:5c:3b:d6:63:
6e:d6:15:a5:65:0e:da:9e:72:20:03:72:ff:a2:06:b0:9f:d1:
97:31:be:2a:c0:52:62:5d:5c:b4:48:2c:9b:c6:86:72:6f:c0:
a0:a3:aa:7b:9d:66:7f:d4:21:1e:c7:a9:cb:82:f5:f7:c3:4d:
20:c5:89:cd:38:a9:0f:c2:24:b6:24:36:33:d5:6c:6b:d9:1b:
ec:8b:e1:d1:fd:7a:16:b9:5a:56:29:2a:5a:29:c2:c6:99:98:
df:66:2b:6c:cc:a0:3d:e8:d2:e7:25:c8:30:7a:1a:f8:a5:11:
0c:61:b1:94:4c:7e:8d:c1:b9:ab:2c:cf:5c:9d:e2:cb:52:7b:
b4:59:44:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WsxOuy6FLf0NVkTY28ukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMWZhYjc2NzQ0N2QzNjkxMTk3NGNmOWJiMWQxYWU5MTMx
ZmM4NDUwHhcNMjYwNjEzMDUwMDU5WhcNMjYwNjE0MDUwMDU5WjAzMTEwLwYDVQQD
Eyg4YTMyN2M0NTMyZWM1ZmJjMWQwZDAwM2FkZTc2YmFiNjllMWFmOWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWeOlfatB72n2DnvSRMYEiiU3ACe
22yLjwyZsoR/OzCnXvPL0/Cvljf1JRCDAJGgST7+F1/JYJTUJYmjMxNL4xWsbT4Q
tHZ3+9D9GaVRI/VVUlArUyNKtASnmhWauBNDAfxBOlx46yRLBPXfKgJlGibGx3mh
rnZyJmtNr7tz92FMk2j54VC6dGjKPPZBNJ69dyK7C1I+aiLvrfLiqKamFZ2/5t9f
c3BH5pXL/JOjiERm79o4avFB79bkRQc+4QVxHOcfY0eWiIxcHoxbPqOMidGndyoP
vW9HVxy4eCCPzhv9tKYtgGFF9xndEQsqxnF92CWcsIToh2bXdbW6P2oJ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIoyfEUy7F+8HQ0AOt52uraeGvn9MB8GA1UdIwQY
MBaAFMIfq3Z0R9NpEZdM+bsdGukTH8hFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2gtcmRuUkgwMmtSbDB6NXV4MGE2Uk1meUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jZWI1YTEtMTZjMC00NzhmLWEyY2Yt
NGYyMjVkMDg4NTY2LzEvd2gtcmRuUkgwMmtSbDB6NXV4MGE2Uk1meUVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9jZWI1YTEtMTZjMC00NzhmLWEyY2YtNGYyMjVkMDg4NTY2
LzEvd2gtcmRuUkgwMmtSbDB6NXV4MGE2Uk1meUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWch1TFg
QBG/GEdINeFYCNTNTi0ruL7ZBl3nNvVWTm8ClXcd0WurWemgIBrfCrJLH3g7koz1
sBQ8ttJCHFaL3LqUZAVI+9nwY4ZdtC/iqSEqJ2Oowyas3UOCzrMUsOVGSDHMGsQK
w3gPCN/BiMZchap0JgR2KefNOQlcO9ZjbtYVpWUO2p5yIANy/6IGsJ/RlzG+KsBS
Yl1ctEgsm8aGcm/AoKOqe51mf9QhHsepy4L198NNIMWJzTipD8IktiQ2M9Vsa9kb
7Ivh0f16FrlaVikqWinCxpmY32YrbMygPejS5yXIMHoa+KURDGGxlEx+jcG5qyzP
XJ3iy1J7tFlEGg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:24:33 2026 by rpki-client