Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
File: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft (raw, json)
Hash identifier: eEWEXML1nRmb0CVUJ2r9v032prwPRYjP9NW4n97RA3o=
Subject key identifier: 98:B7:73:51:1C:F2:EC:35:19:7B:60:E5:47:C0:19:0D:81:FA:98:CC
Authority key identifier: 5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
Certificate issuer: /CN=5a1a31909780e81734af6607272d18525db7657d
Certificate serial: 019D9B51026D322A28B280DB3828DF5DC9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
Manifest number: 0D95
Signing time: Fri 17 Apr 2026 12:01:10 +0000
Manifest this update: Fri 17 Apr 2026 12:01:10 +0000
Manifest next update: Sat 18 Apr 2026 12:01:10 +0000
Files and hashes: 1: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl (hash: nZaWKi4hkXmtPmlEZvfKjGOQQublEYm7cBmdTQshtXc=)
2: a3Lzw_FUmbYwiAPLTEPryzUOYTE.roa (hash: UT3xazFEWgxD4QE0HTQ3reWyQqUTm3ksXZVs3NOwPPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:02:6d:32:2a:28:b2:80:db:38:28:df:5d:c9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1a31909780e81734af6607272d18525db7657d
Validity
Not Before: Apr 17 12:01:10 2026 GMT
Not After : Apr 18 12:01:10 2026 GMT
Subject: CN=98b773511cf2ec35197b60e547c0190d81fa98cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:91:d7:7e:60:48:ee:a4:19:d0:f2:0f:40:
19:0f:14:e3:e8:99:11:16:2e:8c:26:22:90:9b:8a:
c8:6a:75:43:5d:2e:38:ad:74:c4:5c:69:5a:bf:39:
60:cb:a0:18:4f:02:f7:12:91:32:c3:f1:d0:fb:da:
5a:14:b0:08:6d:ef:3a:eb:53:46:fb:66:4e:dd:4a:
af:31:49:80:54:90:26:09:68:b4:ec:fd:d3:6d:8d:
5d:0a:a7:e2:af:31:33:e9:99:b7:61:c5:d2:44:67:
9a:41:c5:36:fe:95:19:61:af:8f:72:f9:f4:69:fe:
b7:ea:63:6b:ae:45:20:55:fd:d6:dd:98:ce:bf:8f:
6f:34:8f:4d:ce:0c:d4:38:ff:15:e5:bf:24:93:9d:
cc:5e:f1:56:91:91:2c:61:64:8d:09:69:51:9a:4e:
99:41:ee:ed:fa:64:9c:78:fb:32:f1:88:bc:aa:1f:
d3:cb:a9:f2:49:bb:b0:9e:40:68:a6:b0:c1:5a:ae:
eb:ac:64:fa:b8:ad:d4:b0:68:f3:46:a6:b8:89:e4:
cc:7f:a5:33:bc:64:e2:a8:d2:e5:97:d9:7f:77:e1:
c7:f8:f1:4d:03:a0:33:38:41:27:06:0a:7f:36:37:
d9:42:e8:16:8a:c1:63:45:9d:23:33:20:f2:13:49:
34:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B7:73:51:1C:F2:EC:35:19:7B:60:E5:47:C0:19:0D:81:FA:98:CC
X509v3 Authority Key Identifier:
keyid:5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:60:54:9a:7f:05:8d:db:bc:57:1c:25:0e:14:b1:48:7a:0c:
73:c4:d9:6e:83:2b:08:26:3b:87:95:76:d3:b0:12:cb:4f:fc:
09:82:da:24:52:ae:df:05:b7:ac:4e:d2:33:e6:09:b8:b4:ec:
ba:10:66:a9:ce:98:86:14:c5:b5:73:f6:4f:83:af:f7:ba:67:
c7:1d:07:e8:b3:d6:55:46:ac:85:07:4e:70:55:89:13:10:8a:
57:9b:f6:ce:ae:6e:be:df:4f:bc:71:aa:14:2b:48:b9:94:ec:
c4:64:8b:c7:0f:a8:1f:f7:1d:a2:84:c7:f6:20:c3:bd:43:75:
0e:19:5a:e8:89:ba:a5:72:66:9e:b9:2b:44:70:c8:d3:e5:8f:
87:38:1d:d7:5f:18:b1:bf:2f:58:dc:e1:db:8d:10:07:a8:b6:
3c:50:f5:9c:0e:c8:7b:06:65:25:74:8f:53:bc:23:55:ea:08:
df:ba:29:cd:d9:a9:54:98:e8:52:30:1c:2b:97:77:cb:db:61:
a4:61:41:d2:2e:bd:3b:09:e4:08:6e:f8:69:a9:0f:56:ae:3a:
c2:b7:87:e8:d7:ee:51:e1:97:28:47:a6:fe:a1:da:c3:03:d9:
b0:9b:13:45:85:a5:f0:d7:42:3f:09:77:12:08:f5:a2:13:56:
90:12:20:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUQJtMioosoDbOCjfXcmzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMWEzMTkwOTc4MGU4MTczNGFmNjYwNzI3MmQxODUyNWRi
NzY1N2QwHhcNMjYwNDE3MTIwMTEwWhcNMjYwNDE4MTIwMTEwWjAzMTEwLwYDVQQD
Eyg5OGI3NzM1MTFjZjJlYzM1MTk3YjYwZTU0N2MwMTkwZDgxZmE5OGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTCR135gSO6kGdDyD0AZDxTj6JkR
Fi6MJiKQm4rIanVDXS44rXTEXGlavzlgy6AYTwL3EpEyw/HQ+9paFLAIbe8661NG
+2ZO3UqvMUmAVJAmCWi07P3TbY1dCqfirzEz6Zm3YcXSRGeaQcU2/pUZYa+Pcvn0
af636mNrrkUgVf3W3ZjOv49vNI9NzgzUOP8V5b8kk53MXvFWkZEsYWSNCWlRmk6Z
Qe7t+mScePsy8Yi8qh/Ty6nySbuwnkBoprDBWq7rrGT6uK3UsGjzRqa4ieTMf6Uz
vGTiqNLll9l/d+HH+PFNA6AzOEEnBgp/NjfZQugWisFjRZ0jMyDyE0k0XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJi3c1Ec8uw1GXtg5UfAGQ2B+pjMMB8GA1UdIwQY
MBaAFFoaMZCXgOgXNK9mByctGFJdt2V9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hveGtKZUE2QmMwcjJZSEp5MFlVbDIzWlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9lMTAwNTctOTliYi00NGY5LTk3NzQt
Mjc1MmIzNzU5MDY2LzEvV2hveGtKZUE2QmMwcjJZSEp5MFlVbDIzWlgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9lMTAwNTctOTliYi00NGY5LTk3NzQtMjc1MmIzNzU5MDY2
LzEvV2hveGtKZUE2QmMwcjJZSEp5MFlVbDIzWlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGBUmn8F
jdu8VxwlDhSxSHoMc8TZboMrCCY7h5V207ASy0/8CYLaJFKu3wW3rE7SM+YJuLTs
uhBmqc6YhhTFtXP2T4Ov97pnxx0H6LPWVUashQdOcFWJExCKV5v2zq5uvt9PvHGq
FCtIuZTsxGSLxw+oH/cdooTH9iDDvUN1Dhla6Im6pXJmnrkrRHDI0+WPhzgd118Y
sb8vWNzh240QB6i2PFD1nA7IewZlJXSPU7wjVeoI37opzdmpVJjoUjAcK5d3y9th
pGFB0i69OwnkCG74aakPVq46wreH6NfuUeGXKEem/qHawwPZsJsTRYWl8NdCPwl3
Egj1ohNWkBIgHw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:26:02 2026 by rpki-client