Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
File: WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft (raw, json)
Hash identifier: shYpwCVj7VuNtPEmqABXoCAvZqX+uMsr761EzgYoqLM=
Subject key identifier: D6:12:07:28:A5:66:EF:64:9E:E7:9E:04:11:7B:40:97:3A:AB:84:68
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 01A15553FCC1001BBDB69B26698B6FDE854C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
Manifest number: 1AC0
Signing time: Mon 19 Oct 2026 18:02:09 +0000
Manifest this update: Mon 19 Oct 2026 18:02:09 +0000
Manifest next update: Tue 20 Oct 2026 18:02:09 +0000
Files and hashes: 1: 0kbAZrj0KlIr6tTe_BrPv7Ou9Do.roa (hash: j8FCsH7KdJb2m1l6ogZ9wjzQrPPAwuq0Mi1PAn+gc3E=)
2: 9zo09ix2zYPkPjtRWCZtUQY7Hx8.roa (hash: 1YGiPxIeRO9HzGHWmN+x5SsxEkq0m2RwsZb+NYZ3A1U=)
3: BMHXoNqb9w8hGpmKpbza0EXvFx4.roa (hash: GAFHMPGGv6WbCFEAKXD/fdvXu0V9RH11YpVxeHI3Tgg=)
4: QQ4KxBaAki9JFj3Vc4-C08V1ydM.roa (hash: sU9ncWykONAWb2tj0sti+vKUahUUlRIsV/AFQ67WkR4=)
5: WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl (hash: djx1CcqG4e5dqr5qddsjAMbj4ZoUbiZbe41LryNcV5k=)
6: WpRy_KPAxZKQEB_LsN9fBCkXol8.roa (hash: f3qEj6Yz1joliMM6YbG5U2guBbhW/iL/NGaA4Tk1ejo=)
7: aym4YZ7Ehm_KzkXD3V-QX01Qou4.roa (hash: QNBmXDOTHFhuiQC1mFg6H4twIsCe0r1/zgtBgEjdjlA=)
8: ttPcl3gpgQikkqNDHNv3FAV-nHQ.roa (hash: B0KgI8BvLZBPZBGXTpqu8AM7cdcZmvQ18YWeSHHi9Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:53:fc:c1:00:1b:bd:b6:9b:26:69:8b:6f:de:85:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Oct 19 18:02:09 2026 GMT
Not After : Oct 20 18:02:09 2026 GMT
Subject: CN=d6120728a566ef649ee79e04117b40973aab8468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cb:0f:cc:f0:f1:d1:53:b2:40:f3:76:43:f2:
7e:6a:e1:57:81:9b:7d:f1:60:b3:22:3e:50:95:84:
31:9d:f0:14:17:b2:b7:8d:87:41:fa:2d:1c:e1:9a:
fc:85:45:41:2b:04:06:f1:be:af:53:39:1c:c2:b1:
2e:15:2f:66:97:eb:e4:dc:a8:96:d0:a1:87:a0:c4:
de:71:7b:82:40:76:8a:8d:50:28:63:6d:14:a3:2a:
87:6b:99:9c:51:9e:54:f8:e5:66:4c:6f:17:e0:0e:
e7:61:88:f9:d9:e4:0b:54:3a:8d:14:78:80:71:4f:
24:4b:ac:50:36:aa:1f:bd:ef:3d:d4:76:9b:fd:52:
69:4f:03:52:c4:04:78:02:e1:fe:b4:fb:40:3b:c9:
f4:0d:33:7e:6c:b9:15:02:9a:36:58:d2:46:4f:61:
ea:77:f4:c3:ca:db:30:6d:91:af:34:7f:43:1f:75:
1f:74:16:1a:ed:d7:54:dd:b4:f2:55:8b:3d:de:db:
49:3c:b3:ba:e3:19:7b:ca:81:ab:92:13:97:12:a8:
c3:3c:e3:76:71:11:5d:66:6b:ee:05:5c:51:06:ce:
c1:c2:eb:64:49:2a:54:11:d0:56:b0:fa:c5:f3:d5:
ea:1a:57:28:b8:ed:44:8c:20:26:a4:27:01:78:fb:
8f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:12:07:28:A5:66:EF:64:9E:E7:9E:04:11:7B:40:97:3A:AB:84:68
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0b:fb:98:40:c6:24:3c:37:86:65:58:57:64:21:af:fb:1c:
8c:b1:09:f3:09:0d:1b:f1:67:72:65:04:ca:49:05:01:67:60:
84:88:5b:69:af:2a:9b:4b:d0:03:df:0c:05:1c:74:03:a8:50:
3b:94:fe:25:52:d0:d3:8b:b6:ed:21:28:04:3a:5a:4b:0a:68:
64:fc:50:4a:76:9c:d9:e0:d3:04:8c:3a:9d:13:62:d7:b3:a4:
3f:f7:94:b6:c7:eb:7a:74:c0:24:bb:3b:44:8a:71:62:d6:7e:
cc:b8:b9:f2:06:d9:c2:87:35:b5:1a:41:1a:f8:82:47:22:b7:
66:0c:5f:4d:83:22:b7:41:ef:ce:d0:b5:bc:42:42:6e:22:ce:
e9:79:ee:71:24:96:5e:ae:6b:fc:fb:55:56:07:dd:3c:28:50:
46:f5:a1:cf:5f:63:72:be:9b:78:13:f3:18:60:2c:d8:9c:aa:
02:7f:35:1b:d7:00:4e:e4:86:20:bf:10:f4:04:ab:b2:cd:2a:
fe:e7:45:c9:6f:65:03:00:3a:e9:45:ee:a4:1d:26:8c:ba:45:
a9:fd:58:3f:e7:34:af:9b:f5:1a:56:bb:c5:3b:8b:d7:55:e2:
2f:88:01:6a:0a:e5:08:52:84:87:44:d1:eb:8c:07:84:e5:60:
5d:6a:aa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:34:14 2026 by rpki-client