Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
File: WhsazyJvPC_8McHrK2pRlLULUvQ.mft (raw, json)
Hash identifier: 7kLzRFB4I6e7kEIAl2paZb8H7ryio2ooLTc0KlCROsU=
Subject key identifier: B3:CA:A2:38:8A:A2:26:00:34:9C:66:B2:3D:96:28:F2:BC:65:EB:02
Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
Certificate issuer: /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Certificate serial: 019DCF7580D1EBC28AB4A3ADC8756D9D70B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
Manifest number: 1870
Signing time: Mon 27 Apr 2026 15:01:17 +0000
Manifest this update: Mon 27 Apr 2026 15:01:17 +0000
Manifest next update: Tue 28 Apr 2026 15:01:17 +0000
Files and hashes: 1: A-mJzajm6R6rc_fte01cBrdlwGQ.roa (hash: 2mDVxsRPuzcsX8IUNaU5b3fh5ELHeC7iXnOXAAz5DwA=)
2: WhsazyJvPC_8McHrK2pRlLULUvQ.crl (hash: jY27JyFuNArA5zwfSML3VREQ+Ew6qwjNmDpGYzZS0iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:80:d1:eb:c2:8a:b4:a3:ad:c8:75:6d:9d:70:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Validity
Not Before: Apr 27 15:01:17 2026 GMT
Not After : Apr 28 15:01:17 2026 GMT
Subject: CN=b3caa2388aa22600349c66b23d9628f2bc65eb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:6c:ec:df:00:54:bf:27:2b:82:77:f4:39:
87:db:8d:7a:36:f6:a7:f4:0e:cc:71:02:cc:6e:94:
87:0e:8e:3a:3d:b8:50:2c:ce:11:f8:0d:00:05:f9:
80:e4:fa:61:b7:a5:57:f1:14:b9:ab:ed:12:28:e1:
29:ca:da:2e:aa:45:7a:4c:a3:c5:fb:cb:bc:38:32:
ac:50:23:6f:16:79:1d:4c:74:0e:f9:05:78:d8:e1:
da:ad:59:cc:a6:d4:1d:f6:fd:43:57:28:63:8d:ab:
d0:10:87:1b:c2:f0:eb:0d:df:16:57:01:9d:a5:82:
81:76:2f:30:de:17:17:12:2a:f1:48:e7:16:e3:90:
28:03:f3:c5:1c:14:8d:a3:09:d3:7f:f5:5d:b4:9c:
ba:84:79:a0:91:56:8c:cb:2b:f4:1e:1f:0e:16:32:
18:c0:ba:cd:b8:15:b5:b3:e9:8e:4f:53:de:87:d1:
6e:b1:1a:09:25:93:6e:59:6f:51:07:25:48:4c:5c:
4c:7e:7a:35:04:40:f4:ea:6b:b4:8b:e4:42:4f:7a:
28:9e:b8:9e:26:2a:a6:72:24:9e:24:5a:fb:3e:53:
cb:34:9b:07:d9:63:56:53:94:c9:2a:8c:88:e5:e6:
3e:34:c3:2a:7c:7f:c3:d1:5d:e4:3d:2a:99:48:49:
01:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CA:A2:38:8A:A2:26:00:34:9C:66:B2:3D:96:28:F2:BC:65:EB:02
X509v3 Authority Key Identifier:
keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:08:cd:a4:c2:7e:8b:ce:61:a4:b8:08:db:11:e5:fc:ad:32:
d6:5a:c8:b5:34:39:15:47:f3:da:cf:54:5b:44:1e:96:5a:ab:
be:9b:b1:03:99:2c:ce:a9:7b:0a:21:c4:9c:16:44:dd:93:a3:
8b:a9:df:c9:e0:8e:ab:95:1d:14:bf:6f:dd:de:03:f4:36:1a:
30:b3:0a:62:88:e3:95:2d:07:80:b6:14:e7:03:77:27:08:e4:
26:f0:15:44:54:41:b3:ee:03:78:8b:d4:79:d3:13:fd:91:63:
28:91:e3:82:80:20:b8:6c:5d:cb:22:57:09:34:35:3a:fd:12:
95:0f:bf:26:f5:bb:12:48:c2:4d:81:da:3f:81:c5:c4:83:24:
a8:8a:9b:f5:db:73:38:77:e6:72:0d:f8:0a:d3:94:ec:d7:e2:
25:d3:3c:db:b9:93:e1:09:09:f3:c1:30:96:96:15:4f:6d:52:
ed:be:77:7e:0f:75:f7:51:f3:64:f0:aa:9b:32:21:ce:b0:7d:
25:78:94:c6:e2:69:b8:8d:dd:62:0d:a8:49:0d:7a:02:ed:b5:
ac:4a:8e:47:44:57:cc:7f:49:27:b8:9f:aa:5b:82:8e:01:fa:
2b:a7:17:84:c2:6a:bf:50:13:09:3f:a8:b7:a6:8d:e1:0a:2f:
b5:d7:b0:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PdYDR68KKtKOtyHVtnXC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMWIxYWNmMjI2ZjNjMmZmYzMxYzFlYjJiNmE1MTk0YjUw
YjUyZjQwHhcNMjYwNDI3MTUwMTE3WhcNMjYwNDI4MTUwMTE3WjAzMTEwLwYDVQQD
EyhiM2NhYTIzODhhYTIyNjAwMzQ5YzY2YjIzZDk2MjhmMmJjNjVlYjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKJs7N8AVL8nK4J39DmH2416Nvan
9A7McQLMbpSHDo46PbhQLM4R+A0ABfmA5Ppht6VX8RS5q+0SKOEpytouqkV6TKPF
+8u8ODKsUCNvFnkdTHQO+QV42OHarVnMptQd9v1DVyhjjavQEIcbwvDrDd8WVwGd
pYKBdi8w3hcXEirxSOcW45AoA/PFHBSNownTf/VdtJy6hHmgkVaMyyv0Hh8OFjIY
wLrNuBW1s+mOT1Peh9FusRoJJZNuWW9RByVITFxMfno1BED06mu0i+RCT3oonrie
JiqmciSeJFr7PlPLNJsH2WNWU5TJKoyI5eY+NMMqfH/D0V3kPSqZSEkBTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPKojiKoiYANJxmsj2WKPK8ZesCMB8GA1UdIwQY
MBaAFFobGs8ibzwv/DHB6ytqUZS1C1L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8yM2I1ZjktODg4MC00YjU0LWFkMDgt
NzMxZGRiMWMwN2VkLzEvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8yM2I1ZjktODg4MC00YjU0LWFkMDgtNzMxZGRiMWMwN2Vk
LzEvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQjNpMJ+
i85hpLgI2xHl/K0y1lrItTQ5FUfz2s9UW0QellqrvpuxA5kszql7CiHEnBZE3ZOj
i6nfyeCOq5UdFL9v3d4D9DYaMLMKYojjlS0HgLYU5wN3JwjkJvAVRFRBs+4DeIvU
edMT/ZFjKJHjgoAguGxdyyJXCTQ1Ov0SlQ+/JvW7EkjCTYHaP4HFxIMkqIqb9dtz
OHfmcg34CtOU7NfiJdM827mT4QkJ88EwlpYVT21S7b53fg9191HzZPCqmzIhzrB9
JXiUxuJpuI3dYg2oSQ16Au21rEqOR0RXzH9JJ7ifqluCjgH6K6cXhMJqv1ATCT+o
t6aN4QovtdewzQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 18:24:59 2026 by rpki-client