Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
File: WhsazyJvPC_8McHrK2pRlLULUvQ.mft (raw, json)
Hash identifier: M4DptxxEgXiwwrvin/FsSPuQZP9qrUlEVDopG2EC3Qk=
Subject key identifier: 85:44:01:E5:9A:80:F5:67:72:76:F2:23:08:E5:F7:78:84:82:1D:B5
Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
Certificate issuer: /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Certificate serial: 019CABD937622DC5AE3408CAEBE8F1DF3760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
Manifest number: 17D9
Signing time: Mon 02 Mar 2026 00:01:05 +0000
Manifest this update: Mon 02 Mar 2026 00:01:05 +0000
Manifest next update: Tue 03 Mar 2026 00:01:05 +0000
Files and hashes: 1: A-mJzajm6R6rc_fte01cBrdlwGQ.roa (hash: 2mDVxsRPuzcsX8IUNaU5b3fh5ELHeC7iXnOXAAz5DwA=)
2: WhsazyJvPC_8McHrK2pRlLULUvQ.crl (hash: SiFBOpCcXSrvWc8WAdaezo5ehB+IRqGtVKZU+Om88zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:37:62:2d:c5:ae:34:08:ca:eb:e8:f1:df:37:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Validity
Not Before: Mar 2 00:01:05 2026 GMT
Not After : Mar 3 00:01:05 2026 GMT
Subject: CN=854401e59a80f5677276f22308e5f77884821db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e4:49:fd:38:b7:ec:1f:bb:f5:a3:8b:48:e5:
51:ba:0a:63:36:d7:05:71:15:21:ea:ff:e8:a2:d8:
42:91:3c:c4:67:8f:7f:d1:34:31:06:15:03:37:85:
bd:2b:6a:99:af:bd:f8:8e:46:63:e2:93:39:eb:4c:
25:ce:8f:55:59:ff:37:65:69:25:f8:03:14:e2:50:
4e:3d:53:24:3b:b2:44:12:05:54:16:5a:30:b2:d6:
4f:72:5e:af:7c:68:d0:72:1c:69:18:01:2a:61:44:
6f:32:f8:fd:de:6b:2e:53:e2:68:af:b4:18:69:9e:
26:5c:73:52:7b:fc:b0:84:d8:58:e5:e3:8b:68:4f:
59:75:af:5b:dd:ff:ab:c4:ef:52:fb:12:f7:45:36:
2c:ce:01:5c:2d:f7:53:dd:b2:09:d7:cf:2c:06:cc:
a9:51:f3:69:af:82:58:1b:26:f1:cb:70:11:15:d0:
c6:9b:3b:16:a3:c9:23:d9:6a:33:c6:46:00:4c:05:
2c:1e:59:62:56:99:1d:90:ba:2e:6e:3f:99:bf:11:
58:ac:9d:4c:8c:05:02:d8:5a:39:04:01:91:37:52:
19:cd:58:4d:43:0e:bc:7f:2b:51:7c:c9:63:04:fe:
de:7c:85:d0:3d:99:54:9b:cb:57:ac:5a:b7:5f:35:
59:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:44:01:E5:9A:80:F5:67:72:76:F2:23:08:E5:F7:78:84:82:1D:B5
X509v3 Authority Key Identifier:
keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8b:24:e8:5c:54:7c:68:21:06:f7:e3:0f:62:97:df:24:6e:
f4:a9:a2:3e:80:85:60:ee:3d:93:94:e6:66:b6:cf:7d:02:31:
c8:8b:c4:01:08:7c:e3:eb:c0:33:7d:cc:10:01:15:44:a5:ad:
de:e4:9e:ea:a5:56:c7:0e:56:a8:cd:a8:aa:16:76:ee:1d:25:
43:a5:b0:dc:4c:cc:12:2f:a4:4f:9e:83:d2:e1:7c:d7:8b:bf:
c3:f0:a8:58:61:fe:ba:56:d9:69:08:6f:f5:c7:a1:35:74:51:
0e:3f:70:d4:75:d3:ed:22:03:1a:fe:8a:bc:92:c9:c2:c6:36:
75:2a:dc:f4:80:60:4f:2a:2d:71:36:10:cf:6e:50:17:8f:d8:
da:c2:4f:31:9c:bc:b1:0b:59:ca:a3:73:75:ab:0e:3e:ec:23:
7c:6d:78:1c:90:81:2f:53:96:22:fd:1c:c0:7c:42:80:2c:9d:
7b:fb:e6:e6:fb:8b:0f:fd:be:8d:e0:2e:ef:fd:ea:14:83:24:
d7:c2:e2:9b:d6:b6:16:1d:48:79:fb:49:f1:1e:d8:fb:9e:9a:
1f:20:3a:f9:9e:aa:0c:a5:dd:1c:96:35:b0:cc:18:a0:68:d2:
66:9f:db:ec:6d:4c:33:16:e5:16:0b:77:69:82:c6:0f:28:82:
90:d6:d4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:35:05 2026 by rpki-client