Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
File: WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft (raw, json)
Hash identifier: AV62OldB7mpvksNFNtAfQvswah0zr2P2kgAexKVO7N0=
Subject key identifier: 13:59:CB:96:F3:94:0D:7C:14:C9:A9:9A:BA:BA:AD:6F:6E:4C:B7:E2
Authority key identifier: 5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A
Certificate issuer: /CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
Certificate serial: 019D3909F68C9383D88851F08A4DAFB03873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
Manifest number: 1483
Signing time: Sun 29 Mar 2026 10:00:47 +0000
Manifest this update: Sun 29 Mar 2026 10:00:47 +0000
Manifest next update: Mon 30 Mar 2026 10:00:47 +0000
Files and hashes: 1: 7A_oUuwZOHP7qCqGIUn186LfEF4.roa (hash: eOQFJRSGBCHPkAX8J9zFheW30UxAoTGKrY+SsoDxPV4=)
2: WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl (hash: 8yllfrbGjiedF+x7fSYjx3GInrcrklFpz2FSXSPXZFA=)
3: Xx2Olifw7gOhhQp_hVway2OYq0E.roa (hash: FwU2QD1K2hMPUXQG6G1Z4ns3e0WuMr2QexzlmgdbQwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:f6:8c:93:83:d8:88:51:f0:8a:4d:af:b0:38:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
Validity
Not Before: Mar 29 10:00:47 2026 GMT
Not After : Mar 30 10:00:47 2026 GMT
Subject: CN=1359cb96f3940d7c14c9a99ababaad6f6e4cb7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f0:f7:4b:de:aa:c9:04:88:59:f9:ed:f7:65:
e8:da:c5:8f:7f:c8:60:e6:c3:5b:74:8b:82:62:4c:
1a:77:31:82:39:28:51:93:01:8e:97:39:f0:88:93:
33:2a:0c:db:85:d5:19:a9:03:c2:c8:50:22:97:e6:
0d:d0:4b:f2:28:8f:70:ae:d6:6c:10:d2:d4:9e:3f:
3c:7b:d9:0f:79:8a:70:16:88:e0:b0:57:86:f6:c8:
74:4d:3d:78:3e:22:23:a9:ca:b4:d5:8c:4e:c1:54:
a9:96:51:78:23:b2:05:b6:a8:29:79:ff:11:cb:54:
22:d4:9d:33:56:e6:05:77:02:d3:a2:01:f4:31:05:
fc:0a:9e:fa:83:90:3b:2c:c8:29:ef:ca:0e:38:6b:
0a:37:ff:d9:c5:c8:81:4a:d0:29:36:59:c6:50:f5:
da:de:5e:b8:9d:ba:5b:0f:4a:e1:40:8d:f9:db:81:
cc:7d:86:55:08:37:8e:47:7c:44:64:40:74:59:3a:
6e:5e:ac:22:2c:8b:21:58:18:51:03:f3:9d:a1:9f:
50:61:ed:7e:83:72:64:cb:3a:f7:0e:12:13:91:88:
25:5e:57:90:f5:92:b6:d5:1d:95:d7:22:f3:a1:9a:
ef:61:36:1d:05:0a:d4:64:5b:10:eb:7f:75:85:44:
91:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:59:CB:96:F3:94:0D:7C:14:C9:A9:9A:BA:BA:AD:6F:6E:4C:B7:E2
X509v3 Authority Key Identifier:
keyid:5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6c:0a:7a:c9:82:f1:7a:e6:b8:a4:de:88:53:7e:a0:b8:b2:
79:cf:42:4c:c3:7d:b3:55:6e:79:a0:f6:23:0d:5b:8e:d4:a8:
b8:68:10:ed:ab:e7:59:c9:75:9a:4c:77:9d:c7:fc:44:c8:a4:
39:8d:9b:56:3a:73:93:ff:7c:02:b0:84:c0:fb:f1:7c:b2:4b:
02:5c:9a:aa:bd:0c:a7:13:cc:31:80:b4:21:71:a6:78:c8:9c:
6a:06:5b:a2:ff:9d:34:79:0a:8e:44:25:c2:f6:6e:44:b0:91:
84:5a:d4:1e:a8:a9:bc:f7:19:21:23:04:0f:1b:50:f7:4c:7e:
a3:c6:25:c7:7e:fa:bc:36:13:57:11:1b:41:9c:46:a9:04:b9:
24:4f:b0:20:93:f8:7b:68:2a:af:d3:b3:0a:8b:55:76:84:08:
60:1f:44:0f:f6:17:c7:71:00:4c:d9:46:be:26:5c:28:a4:4a:
f2:c8:2a:be:62:f7:8d:fe:b1:e4:2a:8e:ba:9a:1d:14:fa:2f:
5f:1b:0a:ba:39:67:fe:c5:03:1f:da:e5:10:a6:72:61:94:55:
e3:18:47:64:4c:bf:92:32:26:bc:4b:51:25:81:5f:7e:e8:c0:
0f:74:c6:3e:75:12:32:40:ef:5f:55:1d:56:17:f7:48:2d:34:
cc:90:41:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:16 2026 by rpki-client