Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
File: WHO1mFUN9b_byZp6HjlsNJW9qDs.mft (raw, json)
Hash identifier: X3EMjyCnpVvEyjI+LsFj7sDmhl2dNfLmE8ZzJupI1Xo=
Subject key identifier: BC:C3:E2:EC:D3:74:82:A7:B6:3A:8B:DC:19:19:F8:C6:4D:44:0C:BE
Authority key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
Certificate issuer: /CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Certificate serial: 019EB958A40399FEDFED18823AAE8C522BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
Manifest number: 195A
Signing time: Fri 12 Jun 2026 01:00:54 +0000
Manifest this update: Fri 12 Jun 2026 01:00:54 +0000
Manifest next update: Sat 13 Jun 2026 01:00:54 +0000
Files and hashes: 1: MbmOe617Beb8ehTTf8MQ_smqn_o.roa (hash: 1oDwnPrpmz2JYgXg/Xbn/cWn31YRvP1U3oEbkfTev+U=)
2: WHO1mFUN9b_byZp6HjlsNJW9qDs.crl (hash: EoXKKxmx3KNolXR61L2tWzNiZ+GLm99EtHmajOsCWlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:a4:03:99:fe:df:ed:18:82:3a:ae:8c:52:2b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Validity
Not Before: Jun 12 01:00:54 2026 GMT
Not After : Jun 13 01:00:54 2026 GMT
Subject: CN=bcc3e2ecd37482a7b63a8bdc1919f8c64d440cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d4:42:e1:01:26:88:af:e4:d8:63:97:db:63:
42:9e:e8:83:97:88:d7:30:0d:80:6f:45:81:d1:dc:
41:3a:bc:f0:cf:76:3c:6c:64:7e:38:80:6b:cf:86:
06:6a:d7:2b:42:fc:0f:25:cf:3e:c2:b5:bf:e0:42:
e8:a4:91:9f:6b:11:23:bc:b6:1c:83:8b:9f:35:1a:
1e:38:89:23:77:11:cb:87:6b:44:64:cf:99:1d:d4:
a4:12:15:7e:18:d5:28:b1:78:62:97:ef:5f:eb:3e:
26:e0:8b:5e:e3:c2:e2:4d:5b:06:87:ed:74:12:bf:
14:19:6a:71:96:bd:7b:b2:59:66:9f:3a:53:d0:8d:
58:cf:82:58:8c:e7:86:e7:a9:67:8d:4d:b1:dd:0b:
70:4f:ec:ab:a6:59:44:93:0b:2e:08:78:70:37:06:
57:73:79:52:cd:9f:d3:bf:e9:21:00:b4:39:55:73:
77:53:ac:8f:ba:5d:b8:5c:c0:e0:bf:2f:84:90:a8:
c9:ca:fe:7a:36:e2:a9:27:2b:1e:e3:b5:30:d6:f4:
bc:d6:17:42:84:64:f4:89:66:8f:16:02:2d:7a:ef:
10:6e:5c:d6:02:4e:9e:49:2d:99:19:82:b4:b6:c2:
4a:dd:57:f6:20:3c:88:67:fc:78:4b:c2:5d:d2:23:
bb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C3:E2:EC:D3:74:82:A7:B6:3A:8B:DC:19:19:F8:C6:4D:44:0C:BE
X509v3 Authority Key Identifier:
keyid:58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e0:f9:32:2b:70:6a:1a:23:7b:c4:ec:fc:5e:16:2c:e5:b1:
93:5e:e7:2a:2c:07:54:d0:9a:08:59:e0:77:33:e9:3a:22:3d:
38:7f:3e:2d:87:31:85:de:49:5f:97:07:f2:e0:69:2d:56:b5:
00:52:ee:30:a8:b7:56:0e:0f:4a:e6:c4:ca:ee:f5:b7:23:ed:
df:b6:41:95:4b:4f:1a:41:22:b1:69:64:88:2b:4c:31:2b:2f:
0e:df:98:16:6a:bf:95:9f:50:1f:ae:96:fa:74:16:c4:26:0a:
29:5b:aa:3b:a5:a8:20:a9:99:a1:50:08:4b:cb:4b:22:0e:ab:
83:51:08:c6:5c:b5:21:a3:80:50:7b:e8:eb:83:6f:cf:2b:fc:
4a:fa:f2:98:48:19:43:33:f9:99:f8:0b:3f:a4:19:cf:d4:ae:
41:7f:62:43:ec:48:f9:4b:3b:50:d0:d0:23:0e:82:99:c8:69:
64:84:41:59:c8:e7:f2:b8:b8:38:fa:1f:2b:8c:a4:ae:c7:68:
36:52:ac:e6:6e:37:76:2f:c2:e8:ba:71:4b:b0:38:d3:a3:e7:
27:28:75:c2:f2:77:91:5e:6e:54:f2:23:be:43:a5:88:23:99:
68:80:04:6a:06:85:10:3a:19:98:e8:36:a6:e8:65:f7:f6:36:
7c:70:e3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:53:55 2026 by rpki-client