Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
File: wh-rdnRH02kRl0z5ux0a6RMfyEU.mft (raw, json)
Hash identifier: lZBV2BCqDnTYhyOGJJ57PV4oa4E4LNyIpg2T3eljWzU=
Subject key identifier: 90:3D:DD:13:00:78:3D:80:17:BF:46:79:C9:74:05:B2:46:BD:04:AA
Authority key identifier: C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
Certificate issuer: /CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Certificate serial: 01A06E70A83750CF0C34E68C5F976F26972C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
Manifest number: 17C8
Signing time: Fri 04 Sep 2026 22:01:11 +0000
Manifest this update: Fri 04 Sep 2026 22:01:11 +0000
Manifest next update: Sat 05 Sep 2026 22:01:11 +0000
Files and hashes: 1: G-Y2fzzEHULOChArE8HjVv0l6Lc.roa (hash: YBP9k7F2aZZfP4DTM4JQomZd5iB19jVQtDkjyUcNssQ=)
2: MtUsxVkzaQnJUDqvIpHbGDeDiMY.roa (hash: 1LbHmqJ52KUuB35jhJjRFkWQs98HkVEhmIkG4Hjy7kA=)
3: wh-rdnRH02kRl0z5ux0a6RMfyEU.crl (hash: 5NCoQhOyoag5Wn4xy5TkpY3phYL5K2kpOkthwAgsPPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:a8:37:50:cf:0c:34:e6:8c:5f:97:6f:26:97:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Validity
Not Before: Sep 4 22:01:11 2026 GMT
Not After : Sep 5 22:01:11 2026 GMT
Subject: CN=903ddd1300783d8017bf4679c97405b246bd04aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:80:16:f2:22:08:f0:99:69:72:ce:2c:1f:
9a:e0:20:71:16:2c:b2:14:26:aa:94:0a:07:84:1c:
ee:e8:3e:4d:17:7c:f6:fd:11:aa:03:3d:c4:03:f9:
f3:f3:00:76:d1:67:4e:96:dc:8b:02:a2:c5:2d:19:
eb:f5:be:fd:9f:86:7e:98:6a:0d:72:64:27:71:11:
e2:5b:54:50:69:bb:96:d1:3d:6f:c9:3b:9e:ed:04:
11:68:c5:b0:1c:ee:38:13:95:89:a1:59:2b:f1:ea:
66:3c:d1:f5:46:2b:39:b6:0c:aa:8b:d1:b4:99:e0:
18:50:52:bf:f7:16:c2:59:54:d1:89:e6:97:b4:5e:
a8:51:68:63:eb:e0:c1:18:5a:62:46:6e:4b:33:02:
98:42:0b:5f:06:12:02:79:ff:77:68:6f:19:fb:67:
97:3b:26:97:cd:be:0d:ec:85:30:e9:4c:17:a2:e2:
0d:a8:87:bd:63:df:dd:9a:00:83:3c:4c:c8:fe:61:
04:a5:7d:d3:2b:72:34:d1:36:79:c0:0b:61:b4:18:
89:c7:3a:93:30:8b:59:5a:8b:8a:ad:c7:14:48:43:
c6:0c:17:01:cb:81:c4:f3:6c:ff:86:d7:a8:44:0b:
78:fd:8c:73:6a:c4:2f:03:67:3e:5b:1c:de:83:39:
62:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3D:DD:13:00:78:3D:80:17:BF:46:79:C9:74:05:B2:46:BD:04:AA
X509v3 Authority Key Identifier:
keyid:C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c2:c9:69:5f:6d:2a:7f:6d:00:8a:bf:8f:52:16:ec:8e:f9:
80:5e:7a:5f:2c:b2:fe:98:3c:00:52:0f:b0:2f:3f:f7:09:39:
37:a4:bd:17:96:dc:f5:01:6a:86:c3:3b:02:29:1c:fd:81:fb:
33:5d:6a:44:83:b1:a3:1c:5f:9b:c0:d4:bd:f1:f6:40:52:8a:
47:0e:8e:86:16:3d:0d:32:b3:f4:53:e3:80:fe:3f:d6:94:83:
b0:30:9e:be:d3:be:25:49:fa:c6:09:91:26:8f:d4:0b:92:d6:
6a:9d:e2:f6:19:9c:8c:ce:d5:09:39:5e:2f:34:99:95:1d:52:
8d:7d:3e:36:83:fa:2e:f2:6b:0c:36:fd:3e:03:4b:a3:22:69:
11:e2:a0:5b:b6:dc:ff:ef:7a:dd:0c:1f:07:d8:9a:94:13:67:
ce:c9:ce:a5:18:d5:39:d3:10:d6:6a:58:45:6a:2e:d7:ca:e9:
65:46:9d:f9:3e:54:17:3c:7d:5f:79:e2:58:06:34:61:89:1f:
31:e0:ab:f3:8e:de:f1:26:97:35:a3:1a:2e:86:19:6e:43:a9:
13:88:41:d4:e8:22:89:97:0b:da:eb:71:87:4b:65:d8:03:4b:
82:d3:ef:0e:4f:8d:c7:1b:21:77:85:42:38:f8:e9:fe:3f:65:
52:7b:75:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:24:18 2026 by rpki-client