Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
File: WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft (raw, json)
Hash identifier: 6+5FAbUOmRIQpxpMWsHZWup7tdqwhcGTU+rOFYq+ATE=
Subject key identifier: 42:B6:40:37:A4:0C:13:36:BD:A3:C5:E6:57:85:73:CA:73:92:72:4B
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 019E4EEAF80FF9A6A23FA1D192D419F9599F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
Manifest number: 192F
Signing time: Fri 22 May 2026 09:01:22 +0000
Manifest this update: Fri 22 May 2026 09:01:22 +0000
Manifest next update: Sat 23 May 2026 09:01:22 +0000
Files and hashes: 1: 0kbAZrj0KlIr6tTe_BrPv7Ou9Do.roa (hash: j8FCsH7KdJb2m1l6ogZ9wjzQrPPAwuq0Mi1PAn+gc3E=)
2: 9zo09ix2zYPkPjtRWCZtUQY7Hx8.roa (hash: 1YGiPxIeRO9HzGHWmN+x5SsxEkq0m2RwsZb+NYZ3A1U=)
3: BMHXoNqb9w8hGpmKpbza0EXvFx4.roa (hash: GAFHMPGGv6WbCFEAKXD/fdvXu0V9RH11YpVxeHI3Tgg=)
4: QQ4KxBaAki9JFj3Vc4-C08V1ydM.roa (hash: sU9ncWykONAWb2tj0sti+vKUahUUlRIsV/AFQ67WkR4=)
5: WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl (hash: AEDO9X0eNbgEFDtVViiAo5SlxaVF2jBz6mQoPWrP548=)
6: WpRy_KPAxZKQEB_LsN9fBCkXol8.roa (hash: f3qEj6Yz1joliMM6YbG5U2guBbhW/iL/NGaA4Tk1ejo=)
7: aym4YZ7Ehm_KzkXD3V-QX01Qou4.roa (hash: QNBmXDOTHFhuiQC1mFg6H4twIsCe0r1/zgtBgEjdjlA=)
8: ttPcl3gpgQikkqNDHNv3FAV-nHQ.roa (hash: B0KgI8BvLZBPZBGXTpqu8AM7cdcZmvQ18YWeSHHi9Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:ea:f8:0f:f9:a6:a2:3f:a1:d1:92:d4:19:f9:59:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: May 22 09:01:22 2026 GMT
Not After : May 23 09:01:22 2026 GMT
Subject: CN=42b64037a40c1336bda3c5e6578573ca7392724b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e3:c8:72:35:13:e3:a5:69:ca:fc:b4:32:6c:
58:3e:78:36:32:6d:e6:02:e4:f9:4c:9e:f5:bc:8e:
2d:70:d4:33:63:6c:c5:1e:be:48:82:c4:df:bc:68:
61:8a:bd:bd:c9:6c:0a:0b:72:80:50:e1:51:ec:e3:
d6:2d:87:10:2d:cc:96:7d:74:1c:9b:71:68:72:17:
19:30:b1:5e:cc:e0:ff:98:df:57:97:76:64:04:f8:
fd:bb:61:f1:98:a2:76:a5:dd:24:ab:70:7a:a0:2a:
74:70:36:da:48:01:e1:61:93:c2:9a:51:20:a5:3e:
0a:7b:7d:20:c9:57:ba:7d:da:91:23:56:28:c6:fc:
85:0a:11:e4:bc:25:c5:c6:56:fb:ba:a0:c3:86:a8:
4b:a4:fc:de:3f:38:e3:36:e4:d9:a4:fd:cc:5e:3e:
3d:ce:c0:dd:34:6d:15:66:f8:97:b5:be:4d:de:1a:
b3:39:ff:98:81:7e:ab:3c:92:43:8e:3f:40:58:34:
90:d7:b7:24:91:c2:e7:b4:5d:32:f5:f6:f9:c4:42:
13:b8:e3:05:e7:9c:97:cd:78:99:b4:ef:7d:f9:66:
46:53:66:fa:1f:4a:1e:cc:29:5e:56:c3:11:14:77:
a7:75:35:30:a4:0c:ef:83:d1:60:11:cb:37:36:19:
c3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B6:40:37:A4:0C:13:36:BD:A3:C5:E6:57:85:73:CA:73:92:72:4B
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:36:7b:b5:c5:b4:20:30:2e:98:fb:c6:aa:1a:99:b3:06:ee:
cb:4a:f3:c8:ee:16:6e:49:e4:01:37:04:b0:2c:bc:4e:b8:c6:
01:e6:b2:fd:6a:c8:69:6f:5c:d0:dd:42:5a:3b:17:70:38:55:
e5:2a:7e:ec:fd:1e:36:4f:74:d8:ed:03:ff:8c:da:55:fc:d9:
8e:19:1f:fe:91:c0:88:f1:60:b3:86:8a:cc:2e:f0:87:18:8e:
4b:0a:eb:c2:50:2b:e7:76:0e:cb:36:51:74:7f:bb:1f:b8:88:
ee:0e:6a:ac:45:7f:a1:86:a0:5b:cd:fe:4a:b9:45:be:d0:c5:
5b:2a:9d:1b:6f:75:e9:54:93:57:de:f4:a1:5f:55:06:87:7a:
a5:c0:55:ae:fa:d3:f2:5f:01:7a:4b:78:13:60:06:38:e6:9b:
f6:f5:0b:a4:f9:c4:51:dc:56:41:f1:3d:78:97:8b:63:43:b2:
9f:7c:1e:01:7f:c5:bc:db:54:56:2c:f2:ef:7d:03:61:e4:4d:
11:2a:c4:55:1e:03:9e:3c:28:fd:21:f9:9b:e9:d7:49:35:08:
ab:21:7e:64:89:fb:ca:6c:13:3c:bf:f0:88:33:28:49:a0:6e:
1c:3b:7f:a6:58:2c:45:96:8e:d0:37:75:ad:b5:6d:ec:54:31:
c2:d9:16:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5O6vgP+aaiP6HRktQZ+VmfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMTQxYzUwOTA4MjRkMGExN2MyOWVjNDA1MGUyMTAwNzEx
M2ZiZGEwHhcNMjYwNTIyMDkwMTIyWhcNMjYwNTIzMDkwMTIyWjAzMTEwLwYDVQQD
Eyg0MmI2NDAzN2E0MGMxMzM2YmRhM2M1ZTY1Nzg1NzNjYTczOTI3MjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+PIcjUT46Vpyvy0MmxYPng2Mm3m
AuT5TJ71vI4tcNQzY2zFHr5IgsTfvGhhir29yWwKC3KAUOFR7OPWLYcQLcyWfXQc
m3FochcZMLFezOD/mN9Xl3ZkBPj9u2HxmKJ2pd0kq3B6oCp0cDbaSAHhYZPCmlEg
pT4Ke30gyVe6fdqRI1YoxvyFChHkvCXFxlb7uqDDhqhLpPzePzjjNuTZpP3MXj49
zsDdNG0VZviXtb5N3hqzOf+YgX6rPJJDjj9AWDSQ17ckkcLntF0y9fb5xEITuOMF
55yXzXiZtO99+WZGU2b6H0oezCleVsMRFHendTUwpAzvg9FgEcs3NhnDVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEK2QDekDBM2vaPF5leFc8pzknJLMB8GA1UdIwQY
MBaAFFoUHFCQgk0KF8KexAUOIQBxE/vaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUt
ZWNlZWZmOGU4NGUwLzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUtZWNlZWZmOGU4NGUw
LzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDZ7tcW0
IDAumPvGqhqZswbuy0rzyO4WbknkATcEsCy8TrjGAeay/WrIaW9c0N1CWjsXcDhV
5Sp+7P0eNk902O0D/4zaVfzZjhkf/pHAiPFgs4aKzC7whxiOSwrrwlAr53YOyzZR
dH+7H7iI7g5qrEV/oYagW83+SrlFvtDFWyqdG2916VSTV970oV9VBod6pcBVrvrT
8l8Bekt4E2AGOOab9vULpPnEUdxWQfE9eJeLY0Oyn3weAX/FvNtUVizy730DYeRN
ESrEVR4Dnjwo/SH5m+nXSTUIqyF+ZIn7ymwTPL/wiDMoSaBuHDt/plgsRZaO0Dd1
rbVt7FQxwtkWlA==
-----END CERTIFICATE-----
Generated at Fri May 22 15:07:26 2026 by rpki-client