Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
File: wh-rdnRH02kRl0z5ux0a6RMfyEU.mft (raw, json)
Hash identifier: G0KMrFZHBrOs3sL1RZs6A1sNyVM0CdqTn9U7e0Pg4b4=
Subject key identifier: 9D:1B:7C:35:17:60:64:84:F3:D5:B2:DF:E2:7B:2E:42:96:92:FA:BB
Authority key identifier: C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
Certificate issuer: /CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Certificate serial: 01A17EBCC60B7726504A892EF304717692DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
Manifest number: 1855
Signing time: Tue 27 Oct 2026 19:01:03 +0000
Manifest this update: Tue 27 Oct 2026 19:01:03 +0000
Manifest next update: Wed 28 Oct 2026 19:01:03 +0000
Files and hashes: 1: G-Y2fzzEHULOChArE8HjVv0l6Lc.roa (hash: YBP9k7F2aZZfP4DTM4JQomZd5iB19jVQtDkjyUcNssQ=)
2: MtUsxVkzaQnJUDqvIpHbGDeDiMY.roa (hash: 1LbHmqJ52KUuB35jhJjRFkWQs98HkVEhmIkG4Hjy7kA=)
3: wh-rdnRH02kRl0z5ux0a6RMfyEU.crl (hash: vCBF/Gy0qGlH9CS5hpPoikQx6ioQeEHynMv3YRcjBGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bc:c6:0b:77:26:50:4a:89:2e:f3:04:71:76:92:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Validity
Not Before: Oct 27 19:01:03 2026 GMT
Not After : Oct 28 19:01:03 2026 GMT
Subject: CN=9d1b7c3517606484f3d5b2dfe27b2e429692fabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:70:23:a1:4b:55:00:ea:f2:8e:c6:92:ed:
4f:21:ca:d9:96:64:14:73:41:b1:0c:64:64:3b:f3:
9e:a7:eb:3d:4b:4d:2e:49:5a:9e:b4:bf:5d:6d:06:
bd:7e:86:2f:69:69:28:5a:17:3c:98:b8:c7:94:73:
37:d6:6c:e1:cc:9c:a1:37:4a:fd:c0:b9:9b:ae:1b:
8a:a5:09:a9:37:da:70:9f:9f:94:a7:01:45:0a:68:
9e:5c:24:0b:90:b2:76:fb:6d:9c:f4:56:05:43:87:
21:a8:3a:df:97:e6:59:8e:56:67:84:e2:7b:57:db:
ec:29:2d:c7:58:db:c4:f9:83:3e:6a:2f:33:80:07:
12:c9:d6:5e:8b:6b:3f:c0:2b:ea:61:c1:1e:f6:05:
19:aa:b6:5c:74:a3:d1:47:8a:21:77:6c:df:ac:c6:
b8:0f:82:e3:b8:d0:b7:85:bd:31:a5:2c:31:92:d0:
be:bc:6f:60:4a:54:06:11:f0:41:40:da:f1:f9:1f:
ae:95:1c:27:6f:91:ca:95:32:26:67:ab:b3:d8:4c:
da:76:0e:73:ab:27:18:62:34:3c:df:36:f4:02:08:
fb:e4:a8:b7:f2:cb:69:29:87:4d:9f:20:21:2a:01:
58:44:27:16:3f:09:25:9a:cf:57:fd:ce:5e:46:f3:
28:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1B:7C:35:17:60:64:84:F3:D5:B2:DF:E2:7B:2E:42:96:92:FA:BB
X509v3 Authority Key Identifier:
keyid:C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ce:0a:94:ad:0e:bd:dc:8a:92:5e:c2:e9:cd:89:1d:bd:de:
d1:a5:1c:7b:7f:8b:64:d8:22:11:9f:60:15:17:89:24:91:98:
0c:5a:cc:33:c5:f9:54:e4:fc:82:d3:9f:a0:7e:9d:aa:a5:02:
29:3e:0a:dd:83:12:04:53:8c:21:28:69:ec:67:55:9f:77:c3:
e9:cc:1e:4c:83:4c:c2:41:3a:15:7c:8e:01:f5:ef:e4:84:00:
b6:59:39:91:f8:86:d1:73:23:1f:33:e9:b4:d4:a2:4e:3d:37:
0c:c9:52:75:76:b4:69:0f:8d:1e:77:d8:1a:a7:e5:88:85:f4:
0b:d9:be:c9:14:65:f9:fa:a4:be:59:83:9e:3a:99:6d:c4:92:
71:94:47:de:89:8f:f2:06:ce:3e:c2:50:19:9d:a6:b6:0e:3a:
33:2c:4d:4b:dc:cb:4c:47:79:c5:51:af:a9:e7:42:18:9e:b1:
94:2e:57:5b:db:c4:83:74:6e:17:9f:9d:4d:84:ad:73:7d:d5:
b1:a7:0f:c0:25:71:2b:66:15:79:63:ac:88:28:00:86:09:06:
23:f1:ae:f0:85:f7:1a:58:de:65:79:19:2c:2a:d0:60:b5:bc:
8f:b7:97:16:b2:3e:b8:01:2e:69:7f:bc:3d:5d:3e:1c:9a:78:
d6:4a:cd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:33:15 2026 by rpki-client