Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
File: WHO1mFUN9b_byZp6HjlsNJW9qDs.mft (raw, json)
Hash identifier: 93+bSpGyQmPQG7rXCgsFH+vLSFU7f8G+cxmGrD3XqTg=
Subject key identifier: 4F:E8:2A:AB:8C:ED:72:98:D0:DB:88:69:2E:EF:00:E8:F2:55:7D:0C
Authority key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
Certificate issuer: /CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Certificate serial: 019DA340B89F9CDCC63F109613636925958B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
Manifest number: 18CA
Signing time: Sun 19 Apr 2026 01:00:20 +0000
Manifest this update: Sun 19 Apr 2026 01:00:20 +0000
Manifest next update: Mon 20 Apr 2026 01:00:20 +0000
Files and hashes: 1: MbmOe617Beb8ehTTf8MQ_smqn_o.roa (hash: 1oDwnPrpmz2JYgXg/Xbn/cWn31YRvP1U3oEbkfTev+U=)
2: WHO1mFUN9b_byZp6HjlsNJW9qDs.crl (hash: yT1aVQ3igFRpBRxzEfjKkyAb5kmAA57oeuk8e4Z/GGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:40:b8:9f:9c:dc:c6:3f:10:96:13:63:69:25:95:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Validity
Not Before: Apr 19 01:00:20 2026 GMT
Not After : Apr 20 01:00:20 2026 GMT
Subject: CN=4fe82aab8ced7298d0db88692eef00e8f2557d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:50:63:c7:b8:15:10:64:06:45:5b:5f:9b:
a7:dd:ca:27:45:3e:5d:e2:29:31:13:49:0a:82:49:
fd:9f:d0:8c:f4:b5:fa:b5:5d:2a:dc:a0:3e:7d:4b:
e3:8c:29:b0:48:6b:a2:f7:c4:02:31:49:76:d6:00:
36:4a:13:bc:24:43:ae:4f:8f:72:be:58:f3:14:1c:
35:ca:0c:16:8b:a7:49:9c:12:de:56:b7:46:c6:88:
b2:a5:46:da:d0:71:92:dd:b5:f6:88:43:ab:36:f5:
68:51:a6:fa:18:05:56:5a:fb:6d:14:ec:41:79:00:
b5:0d:71:63:ff:80:e3:38:9f:2e:e2:4c:2b:eb:1b:
dc:f0:ef:f5:0f:c7:44:80:0e:1d:0e:b4:07:65:d4:
b7:40:9e:f0:cc:57:ee:a7:7e:f4:e6:3f:7c:41:8c:
5c:02:50:83:ce:7b:db:b2:ed:d5:bd:96:31:f5:84:
3b:50:17:7e:0d:07:e0:79:f1:0d:f5:e2:63:83:9e:
73:67:8f:ea:1e:ab:bf:74:b5:a4:0c:3e:c7:90:50:
86:86:a7:68:8e:1a:71:73:bd:7f:9b:cb:9f:1e:6a:
0d:99:8a:a3:97:d1:cb:2a:2d:7c:cf:d4:fd:e1:37:
24:c2:51:e5:d3:a3:ad:64:a1:0b:b2:c9:6d:0a:4d:
c8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E8:2A:AB:8C:ED:72:98:D0:DB:88:69:2E:EF:00:E8:F2:55:7D:0C
X509v3 Authority Key Identifier:
keyid:58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d5:90:51:14:84:ea:8b:20:a0:0f:02:b0:73:b6:32:19:fd:
29:73:c1:75:8c:92:01:68:df:2e:8b:80:64:58:eb:5a:28:e3:
7d:0e:67:e3:63:63:76:c7:00:56:02:ad:d4:c1:51:8e:75:72:
df:b8:a8:42:fd:57:be:e0:ce:58:1b:23:f5:90:c2:be:42:46:
46:ee:a5:a8:06:90:30:d3:c0:98:c3:be:99:81:c4:6b:fe:b4:
c7:dc:a7:16:54:7a:40:6d:10:85:a3:0a:6b:db:6f:27:1d:a0:
a8:64:68:8b:c5:74:57:fb:88:37:b7:a4:69:98:18:91:02:1c:
71:20:99:30:35:9b:8f:d6:7f:7e:98:72:82:f1:ec:35:03:22:
94:d0:45:a9:7d:03:9b:8f:84:1a:9d:93:0c:ae:5c:3d:31:e7:
7d:76:d1:e3:a1:5e:83:5e:da:d2:2a:6b:18:c2:c2:e0:d7:72:
13:7c:46:14:c6:cb:51:cd:69:21:78:80:73:fe:5a:32:f9:33:
ca:f5:0b:67:d3:37:de:0f:e7:6d:dd:ae:c1:65:40:54:81:89:
66:29:fe:39:20:9c:c1:18:e7:6a:5d:cd:63:a7:69:57:21:c2:
18:7b:15:dc:62:06:c8:97:b7:46:c4:97:11:46:4d:bf:30:87:
a8:01:3b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:00 2026 by rpki-client