Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
File: wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft (raw, json)
Hash identifier: qbKH+6gPZ5ConemLYs4bVtw0kBE5Jaqpu5Qi/EIKK1E=
Subject key identifier: 1A:A8:4C:83:73:C3:8A:75:56:02:8A:68:C1:8E:A0:31:AC:F2:05:85
Authority key identifier: C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
Certificate issuer: /CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Certificate serial: 019D9C9A5C04FA8C10B6F78788FDBFD5FC76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
Manifest number: 0BE6
Signing time: Fri 17 Apr 2026 18:00:54 +0000
Manifest this update: Fri 17 Apr 2026 18:00:54 +0000
Manifest next update: Sat 18 Apr 2026 18:00:54 +0000
Files and hashes: 1: Y8cmMZQvMnJkziqHhszvZV_UjeQ.roa (hash: cYgGX/s9jr31rZGmmaEtyXpNrfjq8EGIHIKPU1pqwxk=)
2: wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl (hash: KzLqFKLOfIER63+8u68CimhpJ0BP1FX5oHx+Krq2RFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:5c:04:fa:8c:10:b6:f7:87:88:fd:bf:d5:fc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Validity
Not Before: Apr 17 18:00:54 2026 GMT
Not After : Apr 18 18:00:54 2026 GMT
Subject: CN=1aa84c8373c38a7556028a68c18ea031acf20585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:e1:64:ad:75:e9:69:f9:ff:64:3f:35:81:
08:aa:f6:ed:50:1c:4d:8c:60:d3:bb:3a:be:db:da:
68:09:f4:cb:0b:c3:10:c3:1e:a1:72:10:56:60:69:
11:0c:8e:f2:63:79:2d:40:7e:00:3d:e3:96:72:4d:
2f:5e:6a:b4:f0:1f:dd:3a:6b:a3:ca:13:20:b8:bf:
53:15:28:b5:19:ac:7e:b6:c1:8f:3d:d6:8f:c5:c1:
68:46:8a:28:77:f4:72:06:27:0a:a9:ad:4f:c5:54:
0d:f4:ad:2d:e2:2c:f8:3b:26:4e:85:21:68:80:d3:
b7:97:b4:01:3d:3b:69:7c:9e:e4:62:8e:de:04:cf:
b2:5e:c8:1e:2f:04:6e:a0:31:8d:b8:11:30:d6:d4:
b2:35:36:02:a4:ca:08:42:f8:73:04:6a:38:a9:d4:
47:3a:d6:c4:df:05:aa:ba:0e:3f:21:f1:03:0b:78:
35:1e:cf:30:d0:9a:39:fc:86:b1:26:25:67:f1:77:
e8:b8:ae:26:70:75:79:1c:16:08:99:8e:02:1c:64:
3f:ed:bd:ec:6f:30:bd:65:41:b9:2a:be:8b:62:89:
a9:3b:1c:9e:46:d8:0c:ac:ba:ca:36:7c:a9:40:de:
bd:4c:70:ac:8c:c5:72:b0:4a:97:8e:10:bd:04:62:
72:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A8:4C:83:73:C3:8A:75:56:02:8A:68:C1:8E:A0:31:AC:F2:05:85
X509v3 Authority Key Identifier:
keyid:C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:fc:36:9e:3b:56:3c:83:6b:8e:76:cc:83:29:7c:d7:4c:83:
50:6e:b7:5e:f0:4e:c1:8f:36:68:c3:6e:e8:f4:7c:c6:2d:3e:
80:d7:11:14:bd:a8:2c:a0:4d:1e:c3:8d:d1:b4:08:b1:fa:4b:
4f:09:33:77:24:73:c3:ea:5d:ef:00:79:a4:93:48:8c:99:ce:
a3:1c:7f:0d:e2:ee:01:4a:c5:1d:2c:50:0d:e8:22:4a:c7:3d:
10:eb:78:27:16:aa:55:cb:67:cc:29:f3:81:57:0e:f3:c9:b2:
fd:b3:eb:11:b1:ce:d2:ba:3d:a0:7f:89:1c:cb:da:2b:ee:b7:
c1:9a:67:23:97:3c:49:8d:f4:93:fc:5c:56:62:50:6c:08:2b:
1c:3f:03:ed:d2:84:a1:ec:ce:09:c4:3e:4a:7a:32:54:70:a5:
d6:c8:d5:08:61:a8:44:ba:91:ee:7f:27:4e:19:ea:9d:d6:60:
e8:b1:ed:60:68:e2:4e:1a:06:34:48:98:ba:1d:39:20:e1:e0:
a1:b7:a8:ef:4a:69:d9:4b:0a:a9:6c:d0:6a:47:4b:18:76:0e:
a7:59:ca:83:68:95:d1:2c:ec:cd:46:3a:2a:a5:ae:ce:24:3a:
64:b9:e9:cc:47:99:6e:9a:dd:52:fd:21:c5:d7:53:10:c3:11:
52:7d:e5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:36:00 2026 by rpki-client