Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
File: WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft (raw, json)
Hash identifier: tBiHR7h8vSAT072MEhMKcvd8Ed3rmnnpwK9MkbfgjYY=
Subject key identifier: AB:4C:11:DC:35:31:08:89:CF:3D:B9:56:68:22:99:29:40:AC:49:A7
Authority key identifier: 5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A
Certificate issuer: /CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
Certificate serial: 019CAC0FB9AD7603DE98C876829AB52C3AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
Manifest number: 143A
Signing time: Mon 02 Mar 2026 01:00:37 +0000
Manifest this update: Mon 02 Mar 2026 01:00:37 +0000
Manifest next update: Tue 03 Mar 2026 01:00:37 +0000
Files and hashes: 1: 7A_oUuwZOHP7qCqGIUn186LfEF4.roa (hash: eOQFJRSGBCHPkAX8J9zFheW30UxAoTGKrY+SsoDxPV4=)
2: WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl (hash: o7FcvrtT67LH/W/J3q2JxxjLv9vzkCsP8gJEyNpbFFo=)
3: Xx2Olifw7gOhhQp_hVway2OYq0E.roa (hash: FwU2QD1K2hMPUXQG6G1Z4ns3e0WuMr2QexzlmgdbQwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:b9:ad:76:03:de:98:c8:76:82:9a:b5:2c:3a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
Validity
Not Before: Mar 2 01:00:37 2026 GMT
Not After : Mar 3 01:00:37 2026 GMT
Subject: CN=ab4c11dc35310889cf3db9566822992940ac49a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:78:0c:f7:2f:0f:d7:ce:98:d1:fb:47:16:cf:
5c:cb:dd:99:8f:07:1c:c7:47:d2:cb:b6:ef:85:27:
f6:62:7a:41:28:15:a2:20:2d:f9:34:d7:2d:82:8d:
06:cd:2d:f2:6b:31:34:fa:c1:c5:9e:42:3f:f6:0b:
df:ec:8f:a2:c0:76:75:80:33:fd:b0:ea:17:1c:7b:
b6:76:47:9b:48:58:e7:e9:73:0f:b9:69:77:0a:43:
d7:7c:e5:02:43:51:22:f4:51:b2:48:8a:d0:3a:8f:
17:27:04:36:27:20:a3:ad:31:47:0c:df:de:d1:a4:
aa:e6:a2:bd:9b:e5:97:4a:c6:20:08:d3:bf:a3:5c:
16:b5:33:7b:20:89:b4:9c:67:7b:30:f0:ae:ee:e0:
2e:17:e7:f3:31:5b:26:db:55:9b:1e:29:6f:48:e8:
07:58:e0:d7:6e:c7:96:6f:55:a5:5a:86:11:47:1a:
45:56:5a:34:7f:2b:a3:85:e5:86:1c:8e:75:19:1a:
b2:0d:82:fa:20:7a:ed:37:16:96:ae:30:fb:9c:78:
49:31:e7:ea:a3:e1:67:50:a3:d2:1d:87:d1:c1:3f:
23:92:b2:8a:bb:a6:59:b8:53:d2:d9:24:33:70:c1:
96:8a:e8:ae:8f:21:71:0b:9a:0d:84:fa:b8:66:02:
db:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4C:11:DC:35:31:08:89:CF:3D:B9:56:68:22:99:29:40:AC:49:A7
X509v3 Authority Key Identifier:
keyid:5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:70:4b:ff:89:5d:aa:58:7c:95:5e:8d:ef:79:4e:6a:0b:3b:
f6:95:bd:e6:9f:d1:90:37:05:5f:c6:76:52:06:ca:36:ae:9b:
06:17:bd:4d:97:9d:84:c6:d3:65:f7:79:a2:30:ba:2e:8a:83:
6c:2f:c8:77:7a:55:c9:99:c7:f9:4a:64:b3:72:e6:0e:cf:9e:
5f:cc:8e:19:5a:c2:ae:9c:1f:3f:7e:11:8b:48:c7:31:7c:4c:
4d:f1:36:e3:8d:23:24:89:87:99:21:57:a1:92:15:c5:ee:aa:
d9:50:c6:b6:ef:5e:22:75:2a:97:ea:50:b0:d2:54:fc:45:3f:
c4:eb:1a:cf:62:e9:1e:83:01:00:17:0b:d3:eb:69:d1:73:be:
5e:6a:03:ab:9d:1f:6f:f5:06:6a:10:75:1e:8f:69:16:0e:7f:
1d:dc:0c:00:b4:ac:bf:65:5e:b9:17:10:8b:61:fc:80:eb:5a:
f2:4a:06:80:74:5d:96:2f:a3:0d:52:fd:17:26:92:c3:8a:9f:
fb:50:18:e8:b3:89:d7:53:32:6d:65:07:ef:c6:86:e0:5c:aa:
14:f4:2e:53:00:04:15:b7:c8:22:a4:76:21:c1:6c:88:3c:f6:
aa:76:68:c5:a5:67:21:ea:ff:93:36:c7:b8:36:ed:8f:79:32:
8d:5d:f4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:39:57 2026 by rpki-client