Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
File: WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft (raw, json)
Hash identifier: udxUEm/495kS0kVC0F8gt2eaSnDN7r7MWPjgKT/2e4Q=
Subject key identifier: 3D:B6:82:6E:97:FC:3A:64:1B:43:59:80:F7:30:F6:BA:59:9E:25:22
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 01A05A44A1A7BA6AB58C41088B28E2ED3DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
Manifest number: 1A3E
Signing time: Tue 01 Sep 2026 00:00:42 +0000
Manifest this update: Tue 01 Sep 2026 00:00:42 +0000
Manifest next update: Wed 02 Sep 2026 00:00:42 +0000
Files and hashes: 1: 0kbAZrj0KlIr6tTe_BrPv7Ou9Do.roa (hash: j8FCsH7KdJb2m1l6ogZ9wjzQrPPAwuq0Mi1PAn+gc3E=)
2: 9zo09ix2zYPkPjtRWCZtUQY7Hx8.roa (hash: 1YGiPxIeRO9HzGHWmN+x5SsxEkq0m2RwsZb+NYZ3A1U=)
3: BMHXoNqb9w8hGpmKpbza0EXvFx4.roa (hash: GAFHMPGGv6WbCFEAKXD/fdvXu0V9RH11YpVxeHI3Tgg=)
4: QQ4KxBaAki9JFj3Vc4-C08V1ydM.roa (hash: sU9ncWykONAWb2tj0sti+vKUahUUlRIsV/AFQ67WkR4=)
5: WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl (hash: Xwz1POuHhS5hMlP4pNevvQPYfJ5cq3nNNuAiPvdaYFU=)
6: WpRy_KPAxZKQEB_LsN9fBCkXol8.roa (hash: f3qEj6Yz1joliMM6YbG5U2guBbhW/iL/NGaA4Tk1ejo=)
7: aym4YZ7Ehm_KzkXD3V-QX01Qou4.roa (hash: QNBmXDOTHFhuiQC1mFg6H4twIsCe0r1/zgtBgEjdjlA=)
8: ttPcl3gpgQikkqNDHNv3FAV-nHQ.roa (hash: B0KgI8BvLZBPZBGXTpqu8AM7cdcZmvQ18YWeSHHi9Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:44:a1:a7:ba:6a:b5:8c:41:08:8b:28:e2:ed:3d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Sep 1 00:00:42 2026 GMT
Not After : Sep 2 00:00:42 2026 GMT
Subject: CN=3db6826e97fc3a641b435980f730f6ba599e2522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:e4:e8:25:24:39:b0:e2:23:27:d1:21:b6:
66:9e:68:9c:72:6c:02:46:bd:17:32:bc:d2:22:91:
41:bf:e2:25:19:27:48:bf:65:55:c7:70:4e:d2:d0:
32:e2:03:62:2b:55:44:77:dd:76:57:63:b5:31:f1:
aa:58:50:ea:a1:bd:8e:6f:43:92:5b:20:0b:14:0b:
e1:ea:9e:09:05:a1:0a:5e:5d:e1:ba:a8:49:05:7c:
86:a6:27:8d:ea:4a:1d:9f:55:5a:10:17:a9:b5:48:
da:f9:fd:6f:e0:a4:bc:72:76:9c:65:9e:93:d4:65:
0a:cb:23:0f:83:fd:22:0d:ee:d6:b4:3d:8b:3d:2b:
14:81:f9:ce:8a:5f:0d:ea:03:fc:b9:04:d5:59:7e:
0b:7d:f3:49:03:11:24:28:71:76:85:84:10:ba:29:
33:d8:83:19:2e:c5:3e:60:93:0b:a4:ba:b5:5f:89:
83:02:38:37:2e:5e:4f:4a:91:a6:20:52:39:76:78:
9c:6a:72:e7:df:22:5a:70:75:93:64:db:c7:05:7f:
5b:17:27:0e:72:4a:ec:65:72:fe:df:2a:21:72:1d:
be:d9:fd:cd:a2:96:f1:5b:71:39:59:78:83:99:fc:
26:54:0f:73:8d:a7:bf:f0:95:ce:dd:5b:de:75:01:
10:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B6:82:6E:97:FC:3A:64:1B:43:59:80:F7:30:F6:BA:59:9E:25:22
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:1b:fb:82:b7:71:04:46:df:19:9d:95:ed:6d:9f:fe:8f:55:
5c:a2:01:18:b2:40:1d:38:f4:75:bf:68:00:41:11:b8:57:01:
53:d7:4c:0a:05:37:08:02:43:41:c1:e0:14:cc:d5:c7:d7:85:
96:42:b5:13:03:66:cd:ac:38:75:0a:27:c8:cd:cf:b7:18:c4:
98:85:94:44:76:70:2f:33:e7:e7:ad:96:4e:51:e3:78:5a:9c:
af:65:b3:b1:2b:e4:2a:df:88:30:82:31:46:1b:ac:5b:dc:30:
28:9e:90:24:be:9b:4b:5e:e7:8f:0a:28:25:2d:28:a4:66:6e:
5b:c6:4e:d9:0a:91:b6:2d:1c:be:df:2c:a2:d6:33:77:a1:5c:
7a:32:76:e7:43:43:57:fd:36:3b:c5:b3:fb:cc:c4:02:17:63:
6f:05:41:72:05:45:4e:35:d2:47:4b:32:ab:18:74:85:03:83:
78:75:42:e2:cc:16:ab:3a:0a:9b:b0:38:e9:23:46:3d:cb:64:
24:fe:35:5c:5a:89:b1:e6:3b:23:75:9e:6f:cb:22:e4:ab:b5:
20:15:b2:2f:ea:6a:64:1e:ae:fd:94:02:0c:c8:ae:d6:8d:6a:
59:a6:84:96:4c:bd:7d:5f:5f:5a:30:c5:d2:85:32:db:52:9e:
81:ea:95:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBaRKGnumq1jEEIiyji7T3uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMTQxYzUwOTA4MjRkMGExN2MyOWVjNDA1MGUyMTAwNzEx
M2ZiZGEwHhcNMjYwOTAxMDAwMDQyWhcNMjYwOTAyMDAwMDQyWjAzMTEwLwYDVQQD
EygzZGI2ODI2ZTk3ZmMzYTY0MWI0MzU5ODBmNzMwZjZiYTU5OWUyNTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWrk6CUkObDiIyfRIbZmnmiccmwC
Rr0XMrzSIpFBv+IlGSdIv2VVx3BO0tAy4gNiK1VEd912V2O1MfGqWFDqob2Ob0OS
WyALFAvh6p4JBaEKXl3huqhJBXyGpieN6kodn1VaEBeptUja+f1v4KS8cnacZZ6T
1GUKyyMPg/0iDe7WtD2LPSsUgfnOil8N6gP8uQTVWX4LffNJAxEkKHF2hYQQuikz
2IMZLsU+YJMLpLq1X4mDAjg3Ll5PSpGmIFI5dnicanLn3yJacHWTZNvHBX9bFycO
ckrsZXL+3yohch2+2f3NopbxW3E5WXiDmfwmVA9zjae/8JXO3VvedQEQjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD22gm6X/DpkG0NZgPcw9rpZniUiMB8GA1UdIwQY
MBaAFFoUHFCQgk0KF8KexAUOIQBxE/vaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUt
ZWNlZWZmOGU4NGUwLzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUtZWNlZWZmOGU4NGUw
LzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhv7grdx
BEbfGZ2V7W2f/o9VXKIBGLJAHTj0db9oAEERuFcBU9dMCgU3CAJDQcHgFMzVx9eF
lkK1EwNmzaw4dQonyM3PtxjEmIWURHZwLzPn562WTlHjeFqcr2WzsSvkKt+IMIIx
RhusW9wwKJ6QJL6bS17njwooJS0opGZuW8ZO2QqRti0cvt8sotYzd6FcejJ250ND
V/02O8Wz+8zEAhdjbwVBcgVFTjXSR0syqxh0hQODeHVC4swWqzoKm7A46SNGPctk
JP41XFqJseY7I3Web8si5Ku1IBWyL+pqZB6u/ZQCDMiu1o1qWaaElky9fV9fWjDF
0oUy21KegeqVlg==
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:06:48 2026 by rpki-client