Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
File: WH9UeNHpTyQHBXIsN4kHba9VN1c.mft (raw, json)
Hash identifier: NmCDIB8ucXp7T+J3osg98xydMRxReV8XyNRtPTN4EAM=
Subject key identifier: 03:53:F2:96:2E:A6:98:4D:40:40:DB:1D:C0:04:31:D2:4E:9C:D3:79
Authority key identifier: 58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57
Certificate issuer: /CN=587f5478d1e94f240705722c3789076daf553757
Certificate serial: 019A4F99741BFA9B8DCC7D01E161D54C05A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
Manifest number: 0248
Signing time: Tue 04 Nov 2025 16:00:47 +0000
Manifest this update: Tue 04 Nov 2025 16:00:47 +0000
Manifest next update: Wed 05 Nov 2025 16:00:47 +0000
Files and hashes: 1: JYHlFaw4wOmIWR_77ywpgSBNK2k.roa (hash: OvZXgWODCQ+eoxv2l2YqNiIKjAuMYd6ZKeSQVCi/uJE=)
2: WH9UeNHpTyQHBXIsN4kHba9VN1c.crl (hash: AbdcSJdSWRm89HvBaY7I4TRr9qi45Ppr2y1ut0aCYiY=)
3: d9EPdccRI9fe31r8YXiF11dbuAE.roa (hash: Mn6la1cNZ2lvlxnLvxs6dnBmU/hxdiSINwGaH327vug=)
4: g1OClMd_E4NQ7EkPx7bidts26wA.roa (hash: CeqCEmByjs4N40bd+Z4KEPz6ASh9HSswP/ltMk2hKeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:74:1b:fa:9b:8d:cc:7d:01:e1:61:d5:4c:05:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587f5478d1e94f240705722c3789076daf553757
Validity
Not Before: Nov 4 16:00:47 2025 GMT
Not After : Nov 5 16:00:47 2025 GMT
Subject: CN=0353f2962ea6984d4040db1dc00431d24e9cd379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:ef:c9:3d:2a:4d:5d:88:79:fb:9b:c1:7c:
e3:3f:02:e3:2e:a5:92:52:fb:28:1e:eb:cc:0d:4e:
d6:29:96:5e:4b:57:c0:f1:bd:6a:d6:ff:f3:92:95:
07:50:75:90:69:50:df:db:67:f0:85:cb:54:f8:c7:
3c:3f:82:1b:60:4d:2f:e3:f6:8a:de:61:aa:7f:a8:
98:21:64:00:36:b3:d1:81:50:a0:29:02:02:d0:95:
12:9a:6b:ab:f4:01:91:18:bd:6b:7f:0c:53:d4:a1:
a4:14:e2:07:ac:98:e7:0f:f4:fd:cb:6f:72:3a:8c:
9c:a5:05:46:39:62:7d:ce:28:45:d9:72:0c:b4:9d:
e3:9a:62:55:d1:26:d0:6b:ad:74:e3:c0:fd:1f:09:
8d:c5:be:52:e7:7f:88:26:29:5b:ce:67:d1:8b:c6:
a2:66:d9:a7:a1:34:3e:e1:5d:e3:35:37:ce:5d:98:
96:f9:9b:5c:6a:67:2b:a0:bb:76:4a:9b:2a:aa:c9:
e7:93:6c:9a:9b:8a:dd:02:31:5b:83:15:cf:ce:96:
21:b5:80:a1:6a:d5:df:37:6d:de:2f:a5:df:07:75:
25:3b:80:4c:b0:9b:49:f0:a7:7f:a9:3c:06:0b:bf:
b3:a5:99:8b:4b:74:1a:16:6a:69:2d:5c:39:28:a5:
77:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:53:F2:96:2E:A6:98:4D:40:40:DB:1D:C0:04:31:D2:4E:9C:D3:79
X509v3 Authority Key Identifier:
keyid:58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ad:b1:fd:8c:55:85:b0:0c:8a:ef:49:a9:c1:ba:61:5e:e2:
a3:d4:f9:e1:ea:90:37:e4:6c:58:df:18:4a:78:ba:1d:70:3d:
b8:40:e0:c1:ba:21:3b:31:3d:b0:e2:93:58:0b:1e:12:d8:f3:
77:74:09:4a:d9:27:da:86:b7:46:fb:9d:5f:e2:e2:8c:de:e2:
99:24:65:a1:8a:0a:b6:26:e1:2f:90:18:d1:d2:1e:e6:8e:b2:
67:63:ba:36:57:ac:14:04:d5:26:37:9a:59:11:a9:db:5c:8d:
8a:2d:83:27:b3:35:a5:c4:08:25:ae:0c:9b:61:85:ea:b9:ba:
64:00:61:b6:74:5e:d4:ba:c0:6b:f9:eb:3f:34:51:af:53:67:
15:0b:2f:49:b1:65:fa:63:03:2c:40:38:46:1f:22:fe:63:07:
ae:63:f1:c9:17:be:27:0d:34:d0:b4:b7:e7:3e:72:cc:2e:dc:
ed:90:32:96:ce:16:86:03:55:34:64:4c:55:d6:b3:8f:ef:ba:
81:32:cb:77:74:c1:88:08:11:0d:5c:4b:e8:51:1f:0f:e2:11:
17:70:79:3a:d4:95:32:61:cc:11:d3:7b:b8:9d:b7:f4:a3:a6:
20:65:09:bb:12:6a:00:99:56:56:6c:e2:51:e7:7c:0c:47:0b:
b1:f0:ae:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmXQb+puNzH0B4WHVTAWnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4N2Y1NDc4ZDFlOTRmMjQwNzA1NzIyYzM3ODkwNzZkYWY1
NTM3NTcwHhcNMjUxMTA0MTYwMDQ3WhcNMjUxMTA1MTYwMDQ3WjAzMTEwLwYDVQQD
EygwMzUzZjI5NjJlYTY5ODRkNDA0MGRiMWRjMDA0MzFkMjRlOWNkMzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumjvyT0qTV2IefubwXzjPwLjLqWS
UvsoHuvMDU7WKZZeS1fA8b1q1v/zkpUHUHWQaVDf22fwhctU+Mc8P4IbYE0v4/aK
3mGqf6iYIWQANrPRgVCgKQIC0JUSmmur9AGRGL1rfwxT1KGkFOIHrJjnD/T9y29y
OoycpQVGOWJ9zihF2XIMtJ3jmmJV0SbQa61048D9HwmNxb5S53+IJilbzmfRi8ai
ZtmnoTQ+4V3jNTfOXZiW+ZtcamcroLt2Spsqqsnnk2yam4rdAjFbgxXPzpYhtYCh
atXfN23eL6XfB3UlO4BMsJtJ8Kd/qTwGC7+zpZmLS3QaFmppLVw5KKV3yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANT8pYupphNQEDbHcAEMdJOnNN5MB8GA1UdIwQY
MBaAFFh/VHjR6U8kBwVyLDeJB22vVTdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0g5VWVOSHBUeVFIQlhJc040a0hiYTlWTjFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xNTMyNmYtYzE3NC00OTNhLTk5OWMt
Y2YwMDk5ZTA3MmMzLzEvV0g5VWVOSHBUeVFIQlhJc040a0hiYTlWTjFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8xNTMyNmYtYzE3NC00OTNhLTk5OWMtY2YwMDk5ZTA3MmMz
LzEvV0g5VWVOSHBUeVFIQlhJc040a0hiYTlWTjFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWa2x/YxV
hbAMiu9JqcG6YV7io9T54eqQN+RsWN8YSni6HXA9uEDgwbohOzE9sOKTWAseEtjz
d3QJStkn2oa3RvudX+LijN7imSRloYoKtibhL5AY0dIe5o6yZ2O6NlesFATVJjea
WRGp21yNii2DJ7M1pcQIJa4Mm2GF6rm6ZABhtnRe1LrAa/nrPzRRr1NnFQsvSbFl
+mMDLEA4Rh8i/mMHrmPxyRe+Jw000LS35z5yzC7c7ZAyls4WhgNVNGRMVdazj++6
gTLLd3TBiAgRDVxL6FEfD+IRF3B5OtSVMmHMEdN7uJ239KOmIGUJuxJqAJlWVmzi
Ued8DEcLsfCu6g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:44:59 2025 by rpki-client