Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
File: wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft (raw, json)
Hash identifier: kUxFBpPyfPRFasowbGw5cmF9G8NH3yh+3qMmnTPgMFQ=
Subject key identifier: 34:57:17:45:EC:68:0E:9F:33:B6:3C:45:38:84:1C:EB:20:CD:05:0A
Authority key identifier: C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
Certificate issuer: /CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Certificate serial: 019D9AABC08FA3042C96AB12C9D956F88682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
Manifest number: 0BE5
Signing time: Fri 17 Apr 2026 09:00:40 +0000
Manifest this update: Fri 17 Apr 2026 09:00:40 +0000
Manifest next update: Sat 18 Apr 2026 09:00:40 +0000
Files and hashes: 1: Y8cmMZQvMnJkziqHhszvZV_UjeQ.roa (hash: cYgGX/s9jr31rZGmmaEtyXpNrfjq8EGIHIKPU1pqwxk=)
2: wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl (hash: 1VI5TQeXKKXHFeK3JP15zcN9y0aTFiLGO3xabob9Ftc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:c0:8f:a3:04:2c:96:ab:12:c9:d9:56:f8:86:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Validity
Not Before: Apr 17 09:00:40 2026 GMT
Not After : Apr 18 09:00:40 2026 GMT
Subject: CN=34571745ec680e9f33b63c4538841ceb20cd050a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d3:4f:fe:03:9a:4e:20:1c:37:a6:28:b6:19:
5d:a7:63:ea:c0:34:e5:c0:b1:bb:b3:67:e9:33:1d:
0d:57:15:28:d3:4b:90:57:d7:3a:51:1d:1b:87:30:
d3:84:87:21:67:2a:9d:c2:09:60:7a:64:60:f6:19:
0e:23:32:62:1e:84:16:b4:3b:30:e5:40:37:08:bb:
54:6c:7b:fe:50:6e:cb:11:93:0b:24:81:ef:cf:54:
e2:c5:33:c7:26:33:1a:49:b2:7a:b1:ee:e4:16:fa:
bf:bc:35:ff:cf:f3:0c:03:de:7e:30:69:90:d3:dd:
01:32:63:ac:96:fa:10:ce:fb:00:db:6e:8e:95:b9:
2f:01:40:f4:8c:36:52:fc:87:ac:4a:22:5e:12:34:
06:dd:eb:55:be:a8:7e:cb:bc:79:ad:fd:6a:51:4e:
5d:3f:e8:de:64:7f:88:e1:3b:ca:74:06:17:f1:03:
51:79:60:22:09:01:87:61:4b:cd:f3:bd:a7:a8:03:
40:f2:5a:d5:9f:04:83:38:ba:1a:eb:6c:c6:d0:59:
6a:40:6f:01:ae:a9:86:8e:c9:7b:73:e7:3a:6f:e2:
df:b1:00:04:19:d7:86:af:ea:62:75:9c:93:a1:fa:
65:40:96:14:3e:f0:2b:e4:c1:a7:58:f0:f6:f0:f0:
f8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:57:17:45:EC:68:0E:9F:33:B6:3C:45:38:84:1C:EB:20:CD:05:0A
X509v3 Authority Key Identifier:
keyid:C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8d:bd:6d:c0:5c:a9:2e:77:54:af:d2:75:6c:c5:bd:12:65:
02:cc:64:29:06:28:2b:5b:1b:be:9c:23:4e:72:ed:cb:b2:7a:
43:9a:a6:00:85:41:85:40:39:e4:c0:ff:ab:3a:c6:02:68:71:
b8:02:5f:d3:fa:b0:8b:53:e6:56:e8:7e:8f:93:cb:75:4c:2c:
b6:bc:38:5c:e4:67:a9:c3:11:e2:14:2c:e2:ba:06:25:a8:16:
21:23:d8:00:3c:67:dc:31:0c:70:05:41:1b:3d:f7:7e:1d:a5:
b5:dc:e7:5d:21:24:ad:df:e2:d2:60:6b:6c:8a:47:d0:91:89:
8f:42:60:c4:4f:25:1c:dd:d2:03:e2:c1:53:fc:f1:8e:27:74:
83:1d:d4:27:45:c0:af:8f:f3:f1:73:9c:94:08:fe:b7:e6:44:
36:ef:2b:ab:2b:d7:d1:ec:90:72:51:b5:47:68:73:7f:d2:9e:
ed:e6:54:f1:f4:2b:bc:37:f2:8d:91:54:0b:25:b1:ca:0f:35:
cd:71:14:05:e0:65:16:4f:c4:88:74:c3:2c:db:a6:c2:43:47:
5d:48:05:1c:a7:12:ce:65:fd:80:15:30:c2:14:c7:c6:34:14:
8a:a4:47:b9:7d:73:1b:fa:90:0c:6e:19:c5:c5:21:d5:ac:c5:
7c:2f:ff:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:13:30 2026 by rpki-client