Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
File: wh-rdnRH02kRl0z5ux0a6RMfyEU.mft (raw, json)
Hash identifier: ZoR6Od+6GrvIB4DQ596Q/3rCOdV9rZY5tu/DoKG8sxY=
Subject key identifier: AA:BA:5C:08:6C:68:13:2B:31:67:08:B6:D2:E1:C4:77:38:CE:21:F5
Authority key identifier: C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
Certificate issuer: /CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Certificate serial: 019D3752B89A7098FCF74E92567095BD46E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
Manifest number: 161C
Signing time: Sun 29 Mar 2026 02:01:01 +0000
Manifest this update: Sun 29 Mar 2026 02:01:01 +0000
Manifest next update: Mon 30 Mar 2026 02:01:01 +0000
Files and hashes: 1: DtAUOHLSS6WIfSS0GF2C7AUksM4.roa (hash: 2zf4aTdLuiPqep9tgkg3+1DOOvs3BrWOmseQlMJ7vC8=)
2: wh-rdnRH02kRl0z5ux0a6RMfyEU.crl (hash: Tf3QtWUL2IOdO6ktj1wgBXxP6zod86jAqXzuAvZf1yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:b8:9a:70:98:fc:f7:4e:92:56:70:95:bd:46:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Validity
Not Before: Mar 29 02:01:01 2026 GMT
Not After : Mar 30 02:01:01 2026 GMT
Subject: CN=aaba5c086c68132b316708b6d2e1c47738ce21f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:c9:ab:b2:ae:70:46:e6:71:95:5a:b7:b9:
76:78:c2:c7:49:af:51:bb:cf:82:64:0a:d3:d1:01:
41:23:fa:81:12:5a:c4:9e:f2:81:2e:9a:b2:e3:c2:
f0:b7:1e:60:6f:ab:13:a4:d7:17:eb:d1:8b:1d:de:
c2:19:f3:ef:cb:ac:c7:98:de:9e:0b:6c:2e:a6:2b:
d6:96:b6:c9:ca:79:ca:87:20:d4:2e:11:07:4a:f5:
31:fb:b1:0c:58:32:44:aa:7a:d2:4c:62:2b:b6:4a:
1f:e4:7a:3e:53:a5:99:f3:90:f0:5d:16:19:c2:5a:
f3:25:b2:bf:1b:95:c0:ab:26:e4:20:d2:9b:aa:a9:
5f:c0:7c:c8:cd:d0:3f:20:1b:42:90:ae:63:b4:44:
99:5e:77:fd:81:8a:9c:18:3c:46:e9:c4:61:4e:0c:
20:95:82:b9:98:48:72:02:a8:33:35:40:8f:87:b6:
8b:8d:20:41:74:f8:64:df:a9:28:61:b5:90:fb:b7:
1c:fe:d2:20:e3:56:a5:7f:9a:68:e7:81:8e:34:18:
3e:1e:ef:77:14:55:ff:0b:7f:4f:4d:34:e0:46:fe:
eb:5e:b2:aa:fa:78:85:13:83:f1:75:55:a4:dc:8a:
80:63:ea:f7:bc:dc:64:bb:05:43:45:6f:2c:40:d7:
a9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BA:5C:08:6C:68:13:2B:31:67:08:B6:D2:E1:C4:77:38:CE:21:F5
X509v3 Authority Key Identifier:
keyid:C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:75:46:6e:55:97:df:a3:48:de:7d:f0:bc:ba:d1:b3:eb:23:
f4:ce:76:fc:d7:c6:9e:a1:13:e8:03:01:47:9c:15:91:92:1a:
b0:ac:b7:0a:1f:f7:25:41:62:4e:3f:e5:2b:67:bd:c7:02:8c:
4a:0f:13:1f:f6:77:1f:43:1e:05:55:06:54:d4:1a:1b:e3:5c:
fc:eb:da:17:d2:31:03:4c:71:76:27:5c:f6:37:c9:a3:9c:21:
a3:db:39:22:e7:c9:ff:ce:92:8f:ae:bc:65:ea:ff:c4:ef:ef:
79:47:8c:3b:02:3f:0c:e0:f3:7b:28:c8:dc:de:eb:73:23:c2:
c5:82:92:4b:38:b9:45:60:ab:ab:7f:42:30:d4:b0:49:a9:40:
83:00:c8:1a:5b:53:73:fa:59:7c:43:f2:3e:be:de:5b:2c:51:
5a:78:0c:b6:b2:2e:fc:29:a9:81:3b:fb:05:82:91:23:92:e2:
07:46:be:69:55:df:bd:83:38:f5:25:87:b9:19:2e:ba:88:a7:
93:f3:c6:de:14:06:4b:35:fa:a7:aa:4a:ac:06:3f:3d:40:63:
4a:c3:9d:a7:10:fc:45:34:75:41:a5:83:a0:a6:ba:93:a5:21:
4c:08:9a:c6:0e:2a:09:36:31:fa:3e:e1:53:33:0a:1d:a6:39:
43:ad:f2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:27 2026 by rpki-client