Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
File: WHO1mFUN9b_byZp6HjlsNJW9qDs.mft (raw, json)
Hash identifier: EJQrFCY8e2Wj1OzyG3wQDflAC5/0tTIDHjszV6/gQ/Y=
Subject key identifier: 7C:E8:40:18:1B:1A:B1:DD:3A:05:83:1A:A5:91:74:42:8A:9D:24:3E
Authority key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
Certificate issuer: /CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Certificate serial: 019DCDBD8C79972FEE511B55FECDEAF9E1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
Manifest number: 18E0
Signing time: Mon 27 Apr 2026 07:00:44 +0000
Manifest this update: Mon 27 Apr 2026 07:00:44 +0000
Manifest next update: Tue 28 Apr 2026 07:00:44 +0000
Files and hashes: 1: MbmOe617Beb8ehTTf8MQ_smqn_o.roa (hash: 1oDwnPrpmz2JYgXg/Xbn/cWn31YRvP1U3oEbkfTev+U=)
2: WHO1mFUN9b_byZp6HjlsNJW9qDs.crl (hash: ybNMaHeJVRYvvFOEnRh2xZpsw/f1VTII0sjF+c/8Qus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:8c:79:97:2f:ee:51:1b:55:fe:cd:ea:f9:e1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Validity
Not Before: Apr 27 07:00:44 2026 GMT
Not After : Apr 28 07:00:44 2026 GMT
Subject: CN=7ce840181b1ab1dd3a05831aa59174428a9d243e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d0:a3:2a:ae:ef:37:cb:56:2c:36:48:92:df:
27:1e:4e:74:44:a5:ae:ca:9b:68:52:33:c9:4e:71:
c3:8e:1f:81:73:d5:c2:fc:01:a4:45:77:70:31:68:
bb:96:fb:cd:9f:3f:bd:7b:0a:35:03:2a:a6:a2:e6:
ac:02:53:42:77:be:b7:af:f7:7b:62:d4:93:92:3e:
6b:bd:c5:76:65:77:0f:ee:bd:ad:1e:2c:0e:47:3b:
ba:9e:47:4a:57:78:3f:9f:9b:47:a0:e7:e3:30:1c:
3e:72:95:35:d0:27:af:ce:1d:29:06:2e:fa:92:aa:
b7:c2:13:72:a1:a2:c4:25:a7:af:09:7b:d0:18:ef:
37:0e:2d:c1:20:3c:47:92:62:42:aa:05:c2:22:fe:
d7:b0:d9:c2:08:2e:10:74:7c:6b:60:77:3f:ef:92:
81:20:66:d1:5c:f8:9d:fb:2b:87:d8:fe:52:4a:0b:
f4:fd:5d:79:8d:19:58:27:94:b2:93:5d:a0:6e:06:
ec:bc:ff:1b:11:94:f9:00:da:e1:9b:d7:d7:e0:e9:
19:f8:05:1b:cc:d5:a5:99:84:d8:3d:9a:76:36:8b:
0d:21:49:0f:02:5f:3b:a5:31:29:16:57:14:f4:e8:
40:84:7d:54:6c:61:5e:36:b9:01:05:16:bc:1b:e3:
fc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E8:40:18:1B:1A:B1:DD:3A:05:83:1A:A5:91:74:42:8A:9D:24:3E
X509v3 Authority Key Identifier:
keyid:58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:47:2d:71:97:c9:ec:b9:90:bc:5e:76:b9:ce:99:da:6c:2f:
ee:71:20:8d:85:9a:5f:6a:69:ec:d2:9b:a6:73:ac:6a:f9:d8:
03:dd:ed:1c:e2:d4:c3:48:a7:c4:6d:4a:80:cc:57:0b:1c:52:
7c:2b:b0:6f:7f:70:9d:46:de:c7:4d:a3:46:2c:d8:a2:cf:50:
01:04:21:d8:50:f7:ef:f9:ca:93:72:20:26:c5:06:9f:7c:27:
80:e6:d3:db:ad:73:28:14:36:03:56:4f:79:a2:ce:7b:30:13:
08:2d:57:e6:2f:72:2d:de:ac:73:bb:dd:3c:69:5d:0a:2e:d9:
01:84:12:a9:fe:3b:bf:51:80:67:63:12:8c:35:ae:96:37:7e:
60:34:ab:81:0b:bd:a5:60:f1:56:d0:62:fb:1f:d8:7a:a2:ae:
81:b9:85:57:73:e6:7d:f0:4a:33:ea:cd:3b:9b:94:9d:1e:8e:
4d:87:be:79:f2:30:aa:5c:9e:a1:d1:60:05:df:cd:17:a7:1f:
fc:fb:42:2f:d6:3b:a7:94:b7:9f:f7:08:ba:90:57:76:79:f9:
bf:2a:bc:da:78:89:85:71:16:84:33:58:d3:e4:2b:45:27:6c:
f5:52:b8:73:32:26:3d:cc:00:6b:41:d8:11:eb:cd:25:4c:29:
bd:8b:3e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:44 2026 by rpki-client