
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
File: WiHxhbSzhmdV26ABC88QuUqKpmw.mft (raw, json)
Hash identifier: RpbbkfgbwSKtlNCfNt2uU0PC6KexTXxw/DdSCyDlwto=
Subject key identifier: A8:31:40:6B:A6:42:FC:AD:7F:7F:1E:AF:05:E2:BC:91:DF:75:8F:2E
Authority key identifier: 5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C
Certificate issuer: /CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c
Certificate serial: 019D3866703716F0D74A59A3A202879293FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
Manifest number: 1832
Signing time: Sun 29 Mar 2026 07:02:10 +0000
Manifest this update: Sun 29 Mar 2026 07:02:10 +0000
Manifest next update: Mon 30 Mar 2026 07:02:10 +0000
Files and hashes: 1: WiHxhbSzhmdV26ABC88QuUqKpmw.crl (hash: wa18WBNlz5ikDGUDvdrF5HP77Tk9zTBzoWlLmPVSdb4=)
2: ylZo-PtqvCZYS10GqApM9m6Ug-o.roa (hash: 4edYiQzvX2wZ9mo10QzR6c1dv5Szd3EKKnlZ558MCYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:70:37:16:f0:d7:4a:59:a3:a2:02:87:92:93:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c
Validity
Not Before: Mar 29 07:02:10 2026 GMT
Not After : Mar 30 07:02:10 2026 GMT
Subject: CN=a831406ba642fcad7f7f1eaf05e2bc91df758f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5b:97:86:0a:af:ae:cc:b2:1b:d9:2f:b4:ec:
f1:f1:62:9e:5e:d0:76:25:ad:05:7a:0e:49:39:f0:
64:a5:55:f9:bc:b4:fa:38:05:00:ff:5b:0f:be:91:
75:ba:c5:1f:bf:f6:55:14:13:71:22:d2:85:7a:5b:
4c:3e:96:d1:e5:89:8f:48:b9:36:9d:b3:a3:7d:7b:
8f:27:13:8c:8b:a6:30:c2:06:e3:43:30:d7:6d:1c:
8e:36:0a:69:f1:3a:6c:e8:1b:6b:a3:e0:3c:14:47:
4b:f2:e7:6c:b7:c9:15:28:f4:ee:40:78:4f:45:a5:
99:50:9e:34:5e:4b:89:c4:af:ce:f6:c2:40:d2:21:
ed:94:59:bb:37:36:94:27:4c:1b:ef:dc:a4:4f:cc:
9e:fa:c2:c0:51:8d:5e:e9:c6:f7:7a:9a:b1:04:2a:
ec:ab:fd:5b:e8:0a:cd:3a:d0:a7:f7:b2:e8:fb:5b:
f3:e0:bc:fa:dd:e9:55:49:a4:37:69:90:24:d9:ef:
23:b2:8f:39:b9:85:af:f6:89:fb:32:e7:93:55:fa:
2e:7e:14:04:bd:f6:cc:63:07:e0:a5:07:da:ba:d3:
d4:c6:7f:11:47:1d:d9:c2:d5:e7:0a:73:7a:1e:77:
b4:aa:ae:f0:d6:81:dc:4b:d9:e5:9d:30:66:43:fc:
9b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:31:40:6B:A6:42:FC:AD:7F:7F:1E:AF:05:E2:BC:91:DF:75:8F:2E
X509v3 Authority Key Identifier:
keyid:5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:86:14:c4:6a:da:f3:2a:ca:f5:f4:97:09:d5:6e:5b:25:22:
82:00:95:ea:b4:d4:59:ce:fd:7b:ad:d1:2d:68:87:6e:c5:84:
d2:39:7a:15:33:53:c2:20:b0:08:5f:73:cb:af:c7:3f:ef:96:
a4:7c:a1:98:0f:a1:54:f1:c2:0a:40:f9:07:71:fb:4e:6a:70:
ba:f7:ef:e6:f8:9e:dc:80:95:0e:8b:d2:74:fd:c6:b0:81:2e:
fb:84:0a:8f:e7:10:66:e6:2b:b4:45:21:c7:b8:0e:e4:65:55:
38:74:9a:eb:01:80:c7:66:b4:c2:2a:b1:34:72:c1:30:da:15:
fc:5c:98:e8:6e:32:76:2d:ee:7c:10:39:a3:d3:f3:fe:e2:90:
15:ea:dc:2a:db:d2:c4:0c:ce:6e:96:25:70:0b:f3:9c:ca:8e:
7f:d7:d9:a9:17:10:4f:a1:82:75:b2:84:af:c7:b2:6b:55:cd:
75:4e:a5:c5:92:53:72:bd:c2:84:57:00:db:3d:bc:dc:90:95:
11:74:c1:8c:63:66:13:86:a7:65:84:54:b7:fd:5d:1f:a7:a0:
b1:65:52:96:48:c7:75:4e:f4:f0:bc:23:4e:00:64:1a:42:d3:
fa:b9:18:46:4f:e1:21:ed:2e:2b:66:ec:42:a5:76:11:3e:e3:
9a:74:d6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:42:13 2026 by rpki-client