Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
File: WHO1mFUN9b_byZp6HjlsNJW9qDs.mft (raw, json)
Hash identifier: Gn/VZKHU+EVCMhD8a8OhsVIyRdCjYoGIRZS0/lpVos0=
Subject key identifier: AE:44:B0:FE:BC:1B:4E:3F:F7:AD:1F:BF:BC:8F:C7:68:0C:A6:5A:B2
Authority key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
Certificate issuer: /CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Certificate serial: 01A08E9FFE445AAAFBE6845F22EC7F986270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
Manifest number: 1A4D
Signing time: Fri 11 Sep 2026 04:00:45 +0000
Manifest this update: Fri 11 Sep 2026 04:00:45 +0000
Manifest next update: Sat 12 Sep 2026 04:00:45 +0000
Files and hashes: 1: MbmOe617Beb8ehTTf8MQ_smqn_o.roa (hash: 1oDwnPrpmz2JYgXg/Xbn/cWn31YRvP1U3oEbkfTev+U=)
2: WHO1mFUN9b_byZp6HjlsNJW9qDs.crl (hash: jWeZiJSArWTC9L41nEfhsVbYd+zxDZHvh5Dbhnku3hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:9f:fe:44:5a:aa:fb:e6:84:5f:22:ec:7f:98:62:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Validity
Not Before: Sep 11 04:00:45 2026 GMT
Not After : Sep 12 04:00:45 2026 GMT
Subject: CN=ae44b0febc1b4e3ff7ad1fbfbc8fc7680ca65ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:73:bb:82:d1:64:f0:4c:9a:8d:d6:81:43:9d:
b6:71:12:14:81:63:bb:bc:64:24:99:c8:b1:c8:cb:
8c:68:d0:2e:94:87:09:64:66:df:89:cf:69:71:38:
66:4f:85:37:ab:4c:0f:1d:14:ca:ce:1d:a1:96:42:
c9:54:72:d3:c7:ea:14:67:80:76:bc:aa:77:72:be:
73:ed:eb:ec:eb:c5:d0:8b:e6:bc:ec:16:0d:91:c4:
c8:1f:ec:64:a7:79:85:78:18:7d:cd:7c:44:33:f8:
5a:d0:a0:03:67:98:f5:ec:90:20:d1:ac:3f:9e:e8:
de:70:c7:7c:38:a8:78:f7:4f:11:6d:d2:08:8f:e0:
ef:66:60:3c:b7:c0:7d:51:d1:7a:7b:f2:86:14:0a:
46:1b:08:91:4f:41:f0:b5:f9:1a:0e:92:94:ac:18:
58:36:6f:1c:69:1d:86:1f:7d:ba:43:bc:cb:1f:98:
e0:9a:32:58:97:fe:d4:5e:a0:7f:3e:fe:e3:81:29:
51:0f:3d:b7:d1:a2:44:40:88:c6:ab:15:8f:0a:85:
ee:2b:e7:d2:7f:38:93:99:36:3e:dd:c1:fd:00:35:
88:d9:cf:b8:cb:0d:1f:ad:0d:69:36:ea:f2:3b:ba:
df:48:e2:34:b6:4c:b2:38:78:91:76:fe:94:d6:f6:
74:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:44:B0:FE:BC:1B:4E:3F:F7:AD:1F:BF:BC:8F:C7:68:0C:A6:5A:B2
X509v3 Authority Key Identifier:
keyid:58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c1:b7:fa:bd:d2:9a:a6:b2:11:ba:31:fa:a7:f2:f9:bf:0e:
ac:13:76:dc:80:90:ac:c5:65:9b:42:b2:e8:6d:ef:35:d7:fd:
0e:2e:6a:6b:70:59:37:15:21:55:6a:c9:71:03:45:b5:d3:0d:
80:c7:95:75:b5:ac:dc:62:45:48:5c:d1:79:d1:8a:3d:7c:b3:
01:e4:ee:53:2b:0b:71:0f:91:71:12:2c:b2:98:83:09:06:9d:
44:b4:ea:8a:0e:aa:f6:82:b0:64:2e:42:f3:9f:67:a2:be:5b:
a8:ff:ef:c3:a9:f6:3c:9a:4a:57:92:2c:34:9b:c9:66:95:9e:
2f:64:56:9e:ea:be:08:52:5e:ff:ba:b0:d9:48:85:83:d3:0d:
86:ff:51:9f:5d:18:42:5c:13:df:db:e3:c3:d2:3a:a9:df:24:
db:40:9d:5d:bc:1c:c5:e1:42:18:6b:98:b5:86:38:3c:8c:0a:
ba:f3:7b:87:27:31:ac:95:6e:00:01:9d:ae:5d:d4:a2:c9:18:
cd:dc:20:b1:b1:bd:11:0a:b8:91:13:a0:1f:be:37:83:90:e4:
30:b4:47:de:80:7b:b1:a6:b3:e1:a2:b2:ba:16:97:78:1a:b4:
32:0a:97:b1:58:0b:66:7e:87:7b:ef:76:12:ae:0e:f7:5b:c0:
33:b3:4a:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCOn/5EWqr75oRfIux/mGJwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NzNiNTk4NTUwZGY1YmZkYmM5OWE3YTFlMzk2YzM0OTVi
ZGE4M2IwHhcNMjYwOTExMDQwMDQ1WhcNMjYwOTEyMDQwMDQ1WjAzMTEwLwYDVQQD
EyhhZTQ0YjBmZWJjMWI0ZTNmZjdhZDFmYmZiYzhmYzc2ODBjYTY1YWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXO7gtFk8EyajdaBQ522cRIUgWO7
vGQkmcixyMuMaNAulIcJZGbfic9pcThmT4U3q0wPHRTKzh2hlkLJVHLTx+oUZ4B2
vKp3cr5z7evs68XQi+a87BYNkcTIH+xkp3mFeBh9zXxEM/ha0KADZ5j17JAg0aw/
nujecMd8OKh4908RbdIIj+DvZmA8t8B9UdF6e/KGFApGGwiRT0HwtfkaDpKUrBhY
Nm8caR2GH326Q7zLH5jgmjJYl/7UXqB/Pv7jgSlRDz230aJEQIjGqxWPCoXuK+fS
fziTmTY+3cH9ADWI2c+4yw0frQ1pNuryO7rfSOI0tkyyOHiRdv6U1vZ0TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5EsP68G04/960fv7yPx2gMplqyMB8GA1UdIwQY
MBaAFFhztZhVDfW/28maeh45bDSVvag7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xNDIzOGQtODU5MS00NzFmLTg5NWIt
MTc2OWQxOTk0ZGY2LzEvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8xNDIzOGQtODU5MS00NzFmLTg5NWItMTc2OWQxOTk0ZGY2
LzEvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqMG3+r3S
mqayEbox+qfy+b8OrBN23ICQrMVlm0Ky6G3vNdf9Di5qa3BZNxUhVWrJcQNFtdMN
gMeVdbWs3GJFSFzRedGKPXyzAeTuUysLcQ+RcRIsspiDCQadRLTqig6q9oKwZC5C
859nor5bqP/vw6n2PJpKV5IsNJvJZpWeL2RWnuq+CFJe/7qw2UiFg9MNhv9Rn10Y
QlwT39vjw9I6qd8k20CdXbwcxeFCGGuYtYY4PIwKuvN7hycxrJVuAAGdrl3UoskY
zdwgsbG9EQq4kROgH743g5DkMLRH3oB7saaz4aKyuhaXeBq0MgqXsVgLZn6He+92
Eq4O91vAM7NKGA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 10:38:08 2026 by rpki-client