Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
File: Wh1F7dft3pqLhipzmtqOeLfcgrk.mft (raw, json)
Hash identifier: lLcueuOU9LqNfn6sW/9jJzC3C9lEbzf6oA6cYYIV+cE=
Subject key identifier: BE:82:58:49:0D:29:39:90:54:20:E6:9D:CE:7C:A9:1C:93:FF:3C:07
Authority key identifier: 5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
Certificate issuer: /CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Certificate serial: 01A0C58E022AE785BA77B177D15BB1E24DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
Manifest number: 0ACE
Signing time: Mon 21 Sep 2026 20:00:13 +0000
Manifest this update: Mon 21 Sep 2026 20:00:13 +0000
Manifest next update: Tue 22 Sep 2026 20:00:13 +0000
Files and hashes: 1: AS-oysEqUI5CVvE948att4Xq6JI.asa (hash: 77TWGfYwUVUPd2n4D+6kjGiOa/YM7yw2cUJ1Rc0SYHQ=)
2: Wh1F7dft3pqLhipzmtqOeLfcgrk.crl (hash: WvHGXU6CZJRI5RSIcU7GJpanGRkf/C8oQRaxPnd/abk=)
3: s8m3AyH2NlTDR3fTgsQPhcOlx7E.roa (hash: Kh2PCRdzGOujvxuGu8QsoDuJDZuroFKBTb7iTvPyMic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:02:2a:e7:85:ba:77:b1:77:d1:5b:b1:e2:4d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Validity
Not Before: Sep 21 20:00:13 2026 GMT
Not After : Sep 22 20:00:13 2026 GMT
Subject: CN=be8258490d2939905420e69dce7ca91c93ff3c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:6f:7b:1d:82:1c:85:f8:70:8b:69:bf:03:65:
0f:9d:13:2e:89:ad:0d:48:6b:fa:73:14:15:a8:29:
e9:67:e3:c8:23:2d:86:00:f6:d9:3b:8e:0d:85:98:
d3:76:ef:37:28:2c:0f:e0:9a:b2:e6:06:b0:fd:17:
7d:c2:34:c0:72:9a:2f:24:d0:8b:b9:d5:7c:f6:05:
57:27:7f:0a:f9:52:7d:eb:72:48:aa:34:74:29:cc:
7b:8e:fc:89:59:7c:1c:21:41:1c:34:d8:1c:d7:35:
ac:42:b1:13:b9:f1:85:9c:f1:67:73:2d:bf:af:5b:
a3:f5:d5:36:74:6b:d4:d6:8b:1f:32:f2:f5:8b:51:
d6:ab:54:a7:d9:43:26:a3:db:20:c8:d6:8b:f5:83:
e1:03:87:58:04:7b:b3:ca:cc:89:d8:cb:0a:ec:77:
65:d8:14:b3:9d:3b:26:b0:10:5a:11:7a:d0:84:44:
0f:9f:e4:c6:de:e9:ac:92:d4:da:8a:28:d7:59:f5:
e7:31:a3:46:70:eb:4b:0e:64:5d:96:94:b7:90:9e:
14:14:a6:d7:44:04:43:4d:f0:b5:71:67:7f:2b:99:
48:ec:52:26:ce:32:26:b3:10:5b:99:1e:d2:23:94:
7d:07:92:6e:41:34:f9:03:a0:06:c6:7f:db:d5:e6:
8d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:82:58:49:0D:29:39:90:54:20:E6:9D:CE:7C:A9:1C:93:FF:3C:07
X509v3 Authority Key Identifier:
keyid:5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:0a:b6:61:f2:34:9b:87:e5:20:51:40:a0:87:a5:7c:60:05:
f5:28:7e:86:c9:96:c6:9a:e1:9f:55:08:26:f8:9c:ff:15:cc:
b3:8a:44:72:f6:ad:5b:9b:92:43:c7:bb:d7:84:4b:60:e8:16:
02:23:ff:21:98:36:91:67:cf:19:94:77:d0:8f:aa:1c:f0:fd:
93:c8:6a:c1:ad:35:0e:4c:f2:e0:1f:af:4f:2f:61:cc:91:d4:
1d:f3:ef:6f:92:33:69:98:57:38:51:67:be:0f:f8:76:a6:e6:
41:ca:26:bc:6b:0d:c0:2c:b3:cd:c2:b5:69:cc:62:04:e2:ba:
7a:9c:59:6a:0d:8b:b7:88:10:1d:b1:f0:42:95:d6:e3:10:8c:
e8:04:93:37:fb:f7:a4:60:da:13:12:a2:88:76:99:ea:7f:08:
fc:de:ce:5d:46:0b:bd:01:d1:f3:96:9c:89:61:fe:5b:d7:3d:
3e:aa:21:57:43:fe:6f:06:74:98:8c:d6:bc:88:59:cb:cc:02:
f2:27:31:f4:58:ad:dd:0f:9e:f2:8e:fd:45:21:10:39:99:90:
36:4e:ac:25:59:ca:ab:3b:35:d1:ed:db:6d:bb:6e:1b:f1:84:
b2:27:6b:ca:1c:b1:c0:e5:56:b7:0f:b3:7c:b6:2c:8e:67:57:
f0:2d:62:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:43:21 2026 by rpki-client