Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
File: WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft (raw, json)
Hash identifier: 4GVTeFwv9ErhheblrRWXQJnVsKFJfSkJxjmObJx4d7Y=
Subject key identifier: 51:DD:26:52:BF:7C:D3:19:6B:3F:A5:41:B2:FE:A3:6D:B9:3E:DB:EB
Authority key identifier: 58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
Certificate issuer: /CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Certificate serial: 019CE6A3F7FF40A3E4DF2E4F641DC8035A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
Manifest number: 09FC
Signing time: Fri 13 Mar 2026 10:00:31 +0000
Manifest this update: Fri 13 Mar 2026 10:00:31 +0000
Manifest next update: Sat 14 Mar 2026 10:00:31 +0000
Files and hashes: 1: 6cN6nhFqlJSDVgIjOl3TycQtV6k.roa (hash: sgH5lKfufrchfpVAD0K9/jz6mZi6QmMqB/TNXEsdDxk=)
2: WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl (hash: Zemd0Q37O/QeFuao8bpAEZ6zY0sY4XanUMHG2vQa0qY=)
3: axq7mHJm2Hnm-H9JADqzbawUKIA.roa (hash: pXMV2sY+byn88wNA/ocyULAR0qZzmlc5Pn6ZSaCAZWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a3:f7:ff:40:a3:e4:df:2e:4f:64:1d:c8:03:5a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Validity
Not Before: Mar 13 10:00:31 2026 GMT
Not After : Mar 14 10:00:31 2026 GMT
Subject: CN=51dd2652bf7cd3196b3fa541b2fea36db93edbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b9:91:55:75:05:e5:05:da:94:5e:56:db:cd:
9c:2b:a3:49:74:db:7f:df:8c:d7:14:18:84:dc:7a:
e7:91:3c:30:2d:c5:7f:46:ea:1e:13:99:8a:83:ac:
0d:7d:7a:01:cf:21:7a:24:7e:86:03:dc:56:d7:1c:
3e:42:25:88:47:e6:7b:d3:6f:79:af:c3:11:d7:4d:
d9:e7:0b:32:55:e4:25:9d:0e:d3:e8:17:a8:c1:96:
9a:13:2e:73:c9:31:5d:6a:a8:97:82:78:ed:17:71:
3c:79:ad:2b:33:c4:25:0f:5c:73:09:d3:00:b3:2a:
2c:75:8c:ef:79:98:68:3c:b3:18:c0:03:18:b7:1d:
b8:b2:53:30:43:14:76:fe:a4:04:86:40:40:4a:ec:
da:49:82:84:5d:ec:2d:e9:3d:a1:31:4b:5f:f2:53:
2d:26:5f:c2:8a:90:2a:00:a8:b2:b1:4d:bf:5b:da:
27:8c:cc:20:73:82:6a:9d:4c:da:02:ea:92:09:21:
de:d2:02:e6:f4:df:3b:d1:77:7b:92:95:b8:9d:a6:
d3:6d:2a:10:30:3f:55:b0:ab:5b:1a:35:0c:51:39:
d0:88:fe:4f:42:18:50:fb:b7:ae:dc:69:b5:6f:04:
d9:1a:75:99:68:fb:d0:e6:13:75:21:8e:9e:9b:fc:
4f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DD:26:52:BF:7C:D3:19:6B:3F:A5:41:B2:FE:A3:6D:B9:3E:DB:EB
X509v3 Authority Key Identifier:
keyid:58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2a:cc:73:57:e5:55:b0:ea:31:7e:6c:78:7e:20:ba:05:c3:
fb:a3:3a:75:e5:c9:84:d0:a4:08:3c:e0:11:91:9b:27:56:a1:
26:5f:b0:5c:e4:9a:72:32:79:bb:78:5d:fd:27:bc:f6:44:03:
66:0b:0f:e8:4c:79:44:df:11:04:10:b8:2e:b0:fd:da:7e:cd:
23:de:b5:a8:cc:21:31:e1:2d:b6:87:33:81:a9:18:e4:85:3d:
6b:f7:1c:83:f9:26:1b:d4:51:66:13:34:b7:81:ef:54:26:b5:
01:4b:b0:06:68:7c:26:02:85:6d:54:2c:fe:4e:d6:a9:5a:58:
f4:4e:48:18:af:71:de:c5:7d:b1:9b:ce:59:b0:01:1b:40:6d:
4d:4a:b8:4d:c9:72:b7:8a:d3:15:e5:65:43:29:e1:18:1d:6f:
61:76:bb:81:cf:bd:c3:b3:e7:cf:9c:16:47:7b:ad:a1:92:3e:
42:de:26:28:9f:83:46:4d:08:64:e1:34:81:aa:da:d9:4b:23:
75:04:cf:cb:da:d3:9d:de:9c:aa:27:37:41:8e:20:43:28:81:
ee:df:1d:ed:27:fa:a2:13:cd:aa:a1:7d:c7:48:f3:16:25:57:
20:ff:8f:ba:1c:1e:bf:82:1c:4c:61:1f:2d:1e:0e:07:6a:5d:
2c:66:bb:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmo/f/QKPk3y5PZB3IA1ouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4N2Q4YjBlNzU0NjM1MTE3NmNjMGM2ZTUxZWQ0NTIwYWJl
MDRlZjEwHhcNMjYwMzEzMTAwMDMxWhcNMjYwMzE0MTAwMDMxWjAzMTEwLwYDVQQD
Eyg1MWRkMjY1MmJmN2NkMzE5NmIzZmE1NDFiMmZlYTM2ZGI5M2VkYmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbmRVXUF5QXalF5W282cK6NJdNt/
34zXFBiE3HrnkTwwLcV/RuoeE5mKg6wNfXoBzyF6JH6GA9xW1xw+QiWIR+Z70295
r8MR103Z5wsyVeQlnQ7T6BeowZaaEy5zyTFdaqiXgnjtF3E8ea0rM8QlD1xzCdMA
syosdYzveZhoPLMYwAMYtx24slMwQxR2/qQEhkBASuzaSYKEXewt6T2hMUtf8lMt
Jl/CipAqAKiysU2/W9onjMwgc4JqnUzaAuqSCSHe0gLm9N870Xd7kpW4nabTbSoQ
MD9VsKtbGjUMUTnQiP5PQhhQ+7eu3Gm1bwTZGnWZaPvQ5hN1IY6em/xP5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHdJlK/fNMZaz+lQbL+o225PtvrMB8GA1UdIwQY
MBaAFFh9iw51RjURdswMblHtRSCr4E7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0gyTERuVkdOUkYyekF4dVVlMUZJS3ZnVHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84MWRjNjItYjNjYy00Zjk5LWFhNDIt
YzEwZjc4MmZiMDdmLzEvV0gyTERuVkdOUkYyekF4dVVlMUZJS3ZnVHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC84MWRjNjItYjNjYy00Zjk5LWFhNDItYzEwZjc4MmZiMDdm
LzEvV0gyTERuVkdOUkYyekF4dVVlMUZJS3ZnVHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSrMc1fl
VbDqMX5seH4gugXD+6M6deXJhNCkCDzgEZGbJ1ahJl+wXOSacjJ5u3hd/Se89kQD
ZgsP6Ex5RN8RBBC4LrD92n7NI961qMwhMeEttoczgakY5IU9a/ccg/kmG9RRZhM0
t4HvVCa1AUuwBmh8JgKFbVQs/k7WqVpY9E5IGK9x3sV9sZvOWbABG0BtTUq4Tcly
t4rTFeVlQynhGB1vYXa7gc+9w7Pnz5wWR3utoZI+Qt4mKJ+DRk0IZOE0gara2Usj
dQTPy9rTnd6cqic3QY4gQyiB7t8d7Sf6ohPNqqF9x0jzFiVXIP+Puhwev4IcTGEf
LR4OB2pdLGa70Q==
-----END CERTIFICATE-----
Generated at Fri Mar 13 12:11:24 2026 by rpki-client