Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
File: wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft (raw, json)
Hash identifier: teEPRhEITnkMqucMFEyrPF6aaZ4qvhWpnos8+wtM3zw=
Subject key identifier: 15:51:DA:7C:0F:3B:8D:6B:DA:12:BF:26:84:FD:4F:CF:76:1E:07:8C
Authority key identifier: C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
Certificate issuer: /CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Certificate serial: 019D382E1B0D847D5C5E9C55AF1B78FFCA66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
Manifest number: 0BB2
Signing time: Sun 29 Mar 2026 06:00:38 +0000
Manifest this update: Sun 29 Mar 2026 06:00:38 +0000
Manifest next update: Mon 30 Mar 2026 06:00:38 +0000
Files and hashes: 1: Y8cmMZQvMnJkziqHhszvZV_UjeQ.roa (hash: cYgGX/s9jr31rZGmmaEtyXpNrfjq8EGIHIKPU1pqwxk=)
2: wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl (hash: lhyoqWPkymQNLfqDDBvS8MwqbPvPdbiFrPAfF2E5Xak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:1b:0d:84:7d:5c:5e:9c:55:af:1b:78:ff:ca:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Validity
Not Before: Mar 29 06:00:38 2026 GMT
Not After : Mar 30 06:00:38 2026 GMT
Subject: CN=1551da7c0f3b8d6bda12bf2684fd4fcf761e078c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3d:09:e3:9e:1b:50:a4:33:19:e0:6b:af:4e:
02:ba:74:99:c5:1d:c2:09:a5:77:2f:14:1e:8e:e2:
9a:47:25:7d:f2:be:85:02:71:a4:5c:3d:94:f0:b8:
ee:d8:72:da:ba:34:f1:9a:fb:86:a6:9e:99:18:4d:
f2:20:ea:af:9e:54:a6:bf:52:ca:ba:8d:63:a9:b6:
25:01:8f:45:1f:a0:bb:60:6f:64:cb:2b:6a:ef:68:
dd:e3:88:9e:8b:ee:bc:ad:8a:27:a1:38:89:91:b2:
84:36:30:10:1d:e7:8d:bb:ca:44:2b:ea:39:13:bc:
a4:b4:19:39:b8:c2:a0:ae:9e:9e:57:5e:b0:77:ca:
2f:f7:a5:d9:d1:69:19:77:64:37:5c:85:a6:df:27:
bf:fe:b6:f0:fc:9b:70:1f:55:0f:7b:41:10:48:43:
99:62:22:4e:6e:7c:d8:13:6b:7b:fc:17:78:d1:a5:
36:f7:53:94:04:d0:22:7a:1a:bb:a8:b1:fc:1a:86:
a2:50:b0:fc:b3:5d:fe:de:c6:31:d0:30:65:94:c1:
58:80:e1:1c:30:50:0c:90:63:85:72:fa:1d:de:4c:
de:3a:16:0a:d1:2a:f8:ac:d6:d4:ad:14:10:58:79:
c5:c8:de:43:15:6d:07:16:5f:1f:60:9d:a7:89:06:
91:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:51:DA:7C:0F:3B:8D:6B:DA:12:BF:26:84:FD:4F:CF:76:1E:07:8C
X509v3 Authority Key Identifier:
keyid:C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:91:74:96:38:48:29:f2:cd:f2:3e:18:39:57:f8:3c:21:3e:
df:49:f8:17:5f:6f:5d:1f:2f:a5:ef:ff:b4:c4:2e:d9:b3:5d:
6e:8a:db:78:5f:e4:8a:6e:26:36:8a:21:14:8c:cb:cd:e9:ef:
54:4c:63:79:2a:37:8f:bb:f7:e9:47:cc:ae:76:01:d0:50:da:
ab:66:48:24:7b:de:f9:fd:1c:f5:7c:03:10:1a:53:2d:70:1c:
2d:79:44:2c:9c:87:51:8c:92:ec:4c:3c:37:c2:3d:a7:e0:8a:
16:74:d3:9d:c6:bc:ad:dd:e4:37:f2:8d:82:cb:75:fa:cf:d0:
72:00:e5:3e:0f:30:c4:18:2a:56:ae:dc:0b:d3:2b:36:cb:91:
51:df:d6:d5:ea:69:76:7d:6a:86:c1:05:58:0b:4b:46:ec:b2:
98:c9:c6:5b:a8:90:4a:9f:cb:67:53:62:71:37:79:31:65:fa:
79:5c:62:62:c2:41:94:10:82:e1:dd:39:27:0e:5c:12:c7:6b:
8b:fd:13:82:47:1d:05:8b:f4:05:02:b3:0f:c2:99:c2:0a:45:
41:9f:e9:c2:f1:12:bf:b9:b9:28:88:0a:c5:63:44:7b:52:71:
e3:0d:cf:18:09:e1:b3:12:c2:8c:b2:45:3d:30:65:6c:08:e0:
65:ca:ef:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:54 2026 by rpki-client