Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
File: WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft (raw, json)
Hash identifier: fxqn3fK8Dj9ISg8gbE0c+LmE7xx6iqB2gvPAnsY/8MU=
Subject key identifier: 54:06:42:8F:D4:C6:1F:95:55:71:C2:AC:CD:3E:E6:5F:8A:AE:43:84
Authority key identifier: 5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
Certificate issuer: /CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Certificate serial: 019D375311768904C45B5B00E3B8F13A6A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
Manifest number: 14EC
Signing time: Sun 29 Mar 2026 02:01:23 +0000
Manifest this update: Sun 29 Mar 2026 02:01:23 +0000
Manifest next update: Mon 30 Mar 2026 02:01:23 +0000
Files and hashes: 1: WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl (hash: no0u7IHMZTiIqUJjbXK5Ghij0t+zVK5STRLqeOXw6Bw=)
2: seNSk84li2dZlctJAUeZ_r6fQdk.roa (hash: AtzT2v2IabnE0tR+Z9io8DEcEd219tuxCpUpZJ+4AzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:11:76:89:04:c4:5b:5b:00:e3:b8:f1:3a:6a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Validity
Not Before: Mar 29 02:01:23 2026 GMT
Not After : Mar 30 02:01:23 2026 GMT
Subject: CN=5406428fd4c61f955571c2accd3ee65f8aae4384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b3:50:b9:a0:5c:ea:82:a8:af:4d:50:3a:a7:
b3:a1:93:a0:55:30:16:16:f2:40:3f:66:88:49:a0:
7b:4d:ad:e7:d9:43:53:57:23:d1:68:71:cb:0d:ae:
81:1e:13:9c:71:03:ec:24:45:e7:06:33:9e:22:f0:
7b:d2:e6:ac:9a:92:6a:7b:01:c0:be:e9:84:1f:26:
2b:76:50:fa:54:03:8d:8e:0d:fa:7d:26:ca:86:b7:
69:e7:d5:97:ea:85:e5:41:3f:21:5c:81:f8:4f:de:
bc:03:bd:61:c2:c7:6e:0a:9d:1a:d2:5f:b2:0f:80:
de:4d:d9:8d:ea:57:66:68:2e:3c:83:e8:0e:bb:a7:
a5:27:8e:52:15:15:ae:95:01:0b:da:52:5d:cc:9e:
22:76:51:53:08:f9:28:c3:99:65:83:f9:d1:3c:45:
55:58:b7:79:7f:7e:d4:52:2f:2e:23:e0:32:a7:0b:
9d:cf:b0:3a:0f:41:32:9c:5e:81:50:b4:04:ff:90:
73:0e:06:b6:60:7a:cf:5e:69:bc:25:7e:b2:95:51:
9f:ff:f2:84:99:35:ad:1a:49:3d:ef:31:1a:b1:2e:
ae:bb:25:3f:0e:62:b0:48:f9:2e:52:fe:50:57:a8:
58:4c:78:b4:23:b5:9c:0b:f1:ef:e8:15:cd:ef:90:
9d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:06:42:8F:D4:C6:1F:95:55:71:C2:AC:CD:3E:E6:5F:8A:AE:43:84
X509v3 Authority Key Identifier:
keyid:5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:72:46:e8:a2:c2:a2:a1:02:89:7b:d7:55:bc:3a:12:93:16:
91:7c:d1:53:ff:b4:f6:e1:04:b1:be:56:6d:82:b3:c6:0d:9c:
e4:1b:5a:95:73:2b:82:51:20:ca:a9:93:84:68:14:c9:05:af:
19:86:1e:02:85:22:20:ab:7d:37:75:97:9c:84:6a:30:aa:65:
4c:b6:29:8a:ba:c6:d7:c5:30:93:b2:c6:4f:d5:a0:97:d2:13:
fb:08:69:00:68:91:8e:fb:73:5c:99:a6:4e:5f:4d:d4:5a:3d:
e7:9c:23:a9:54:a5:d6:35:9a:a0:39:30:f4:c9:53:ee:3a:e0:
a8:7d:43:55:15:cf:6a:bf:b1:e2:f5:e6:98:b0:0a:f7:e0:db:
39:55:59:ff:39:27:b2:fb:2a:52:c8:79:fc:88:fa:3a:ae:95:
e3:1c:30:59:56:ac:e4:d0:6b:4e:54:00:31:c1:d4:20:c4:8b:
1d:f0:2b:fb:ad:c2:35:78:49:84:81:6f:2d:ef:4a:2f:f3:50:
d0:57:e7:cc:f6:e8:06:a0:6d:db:e9:05:3d:cb:49:68:15:76:
67:4e:48:1e:69:cc:0e:d4:59:1f:18:32:74:82:e3:f7:02:47:
10:ab:cb:1f:16:67:64:df:41:b9:ac:35:a0:95:96:04:0c:c9:
cf:63:87:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UxF2iQTEW1sA47jxOmpQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMTU1ZTMyYzRhOWNkYTFhODFiZDljNzM3MGRjMzRhYjAw
NjUzYTAwHhcNMjYwMzI5MDIwMTIzWhcNMjYwMzMwMDIwMTIzWjAzMTEwLwYDVQQD
Eyg1NDA2NDI4ZmQ0YzYxZjk1NTU3MWMyYWNjZDNlZTY1ZjhhYWU0Mzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bNQuaBc6oKor01QOqezoZOgVTAW
FvJAP2aISaB7Ta3n2UNTVyPRaHHLDa6BHhOccQPsJEXnBjOeIvB70uasmpJqewHA
vumEHyYrdlD6VAONjg36fSbKhrdp59WX6oXlQT8hXIH4T968A71hwsduCp0a0l+y
D4DeTdmN6ldmaC48g+gOu6elJ45SFRWulQEL2lJdzJ4idlFTCPkow5llg/nRPEVV
WLd5f37UUi8uI+Aypwudz7A6D0EynF6BULQE/5BzDga2YHrPXmm8JX6ylVGf//KE
mTWtGkk97zEasS6uuyU/DmKwSPkuUv5QV6hYTHi0I7WcC/Hv6BXN75CdOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQGQo/Uxh+VVXHCrM0+5l+KrkOEMB8GA1UdIwQY
MBaAFFoVXjLEqc2hqBvZxzcNw0qwBlOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MmJjZGEtZjk3ZS00NzY1LWFhOTUt
Y2QyZjU3NzFkYTk4LzEvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81MmJjZGEtZjk3ZS00NzY1LWFhOTUtY2QyZjU3NzFkYTk4
LzEvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHJG6KLC
oqECiXvXVbw6EpMWkXzRU/+09uEEsb5WbYKzxg2c5BtalXMrglEgyqmThGgUyQWv
GYYeAoUiIKt9N3WXnIRqMKplTLYpirrG18Uwk7LGT9Wgl9IT+whpAGiRjvtzXJmm
Tl9N1Fo955wjqVSl1jWaoDkw9MlT7jrgqH1DVRXPar+x4vXmmLAK9+DbOVVZ/zkn
svsqUsh5/Ij6Oq6V4xwwWVas5NBrTlQAMcHUIMSLHfAr+63CNXhJhIFvLe9KL/NQ
0FfnzPboBqBt2+kFPctJaBV2Z05IHmnMDtRZHxgydILj9wJHEKvLHxZnZN9Buaw1
oJWWBAzJz2OHfg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:43 2026 by rpki-client