Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
File: WHO1mFUN9b_byZp6HjlsNJW9qDs.mft (raw, json)
Hash identifier: nUYsJOdK5GWgBqnizOmulLvlYecKfWWBPvC/XhmOzCo=
Subject key identifier: B3:21:B5:15:23:D9:51:51:2D:9A:B6:67:0D:FF:77:F2:18:64:8B:1C
Authority key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
Certificate issuer: /CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Certificate serial: 019FA3054E33CA094E0B9E84A4DAA14476CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 10:01:01 +0000
Manifest this update: Mon 27 Jul 2026 10:01:01 +0000
Manifest next update: Tue 28 Jul 2026 10:01:01 +0000
Files and hashes: 1: MbmOe617Beb8ehTTf8MQ_smqn_o.roa (hash: 1oDwnPrpmz2JYgXg/Xbn/cWn31YRvP1U3oEbkfTev+U=)
2: WHO1mFUN9b_byZp6HjlsNJW9qDs.crl (hash: qqOL+pqW177PCp0x33bkPKmFMu/UMOt/U2DsGOiprvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:4e:33:ca:09:4e:0b:9e:84:a4:da:a1:44:76:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Validity
Not Before: Jul 27 10:01:01 2026 GMT
Not After : Jul 28 10:01:01 2026 GMT
Subject: CN=b321b51523d951512d9ab6670dff77f218648b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d3:24:4f:73:18:48:a8:6e:f8:8f:e1:36:46:
91:71:32:1c:51:7d:b6:fa:c8:9b:08:02:a7:99:87:
28:62:29:39:cc:77:6e:a9:28:a2:76:79:fa:20:a3:
5e:41:6e:1c:e5:26:7d:d6:3d:98:2e:ee:38:44:86:
5c:4d:7c:e3:2c:3c:0a:ca:fe:8b:18:be:10:4d:5f:
d4:ba:ac:33:d5:16:db:8d:dc:33:a0:96:46:cb:42:
ec:94:9d:2f:43:7f:15:28:36:fb:d9:cf:52:45:c4:
6d:4e:66:8c:5e:57:cb:99:c1:b9:28:f4:f9:a2:42:
74:4b:45:67:22:60:ad:cb:6c:f6:80:43:9f:58:38:
0d:ed:0d:b7:39:9b:07:f2:ac:3b:a8:3b:f4:5d:af:
f3:79:83:51:fc:c8:67:8d:e9:1a:dd:41:56:b1:44:
71:50:45:80:b1:43:93:d7:42:43:df:1a:69:30:63:
5c:7b:d4:64:34:50:d2:80:13:d3:52:f1:42:11:a3:
9b:88:25:92:47:fd:03:6e:ba:ad:8a:da:d0:7d:04:
4e:a6:ea:c0:7f:c4:fa:2d:8f:bc:90:78:d9:6a:3d:
42:79:91:3f:6d:9e:1b:06:be:f7:8d:44:d7:eb:c2:
f6:67:89:dc:d5:3e:ac:43:af:51:8f:aa:6f:89:37:
dc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:21:B5:15:23:D9:51:51:2D:9A:B6:67:0D:FF:77:F2:18:64:8B:1C
X509v3 Authority Key Identifier:
keyid:58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:32:43:22:97:72:f9:41:92:b2:71:fc:6f:30:8a:8d:53:5a:
cf:c9:ea:e9:40:a5:3a:b2:f4:aa:1a:5b:6c:15:f9:31:6e:0f:
4c:09:db:7d:f6:45:a0:cf:79:cf:a2:fb:68:3a:6c:83:56:88:
49:f7:e8:2c:af:aa:4b:3c:e2:be:a2:b3:1e:ec:13:c3:d1:0d:
50:f8:ba:93:ee:04:58:7e:7f:59:04:eb:cf:81:6a:a9:2e:0c:
fb:24:2c:20:b1:a9:69:e7:b4:e7:e0:cb:22:9e:7a:7d:cd:b6:
57:3b:81:19:c6:78:6a:bb:b6:0e:7c:23:50:57:cb:a3:1e:3f:
37:85:32:7d:3f:89:be:d3:6f:b9:b4:bc:58:79:b2:36:26:78:
4f:e7:36:69:e8:ca:0f:02:b5:c9:51:bf:65:0c:f4:0d:0b:1f:
5f:c0:40:71:3c:d5:91:37:fb:fd:a7:60:ac:3f:17:ed:9a:eb:
34:3b:ce:1a:33:58:4f:77:06:5f:4a:a3:c8:3c:8d:5b:b1:3a:
ed:82:c0:7c:1f:2d:e1:e2:ec:b6:ad:ac:b6:f2:e0:77:30:8f:
c1:7e:35:b4:18:72:b2:c2:9f:1e:d3:29:cc:b7:9b:2d:80:8c:
a2:ec:dd:8d:eb:3b:86:0c:11:c4:09:79:85:59:41:d8:4d:95:
e6:3f:59:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:18:39 2026 by rpki-client