
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
File: WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft (raw, json)
Hash identifier: 6lCpC1geyVrDChFFYMms8BTc3nd0gDglxGqCV6aEJR4=
Subject key identifier: 0E:22:F6:33:F6:96:B9:79:0A:FA:33:3F:DB:69:4E:C7:CE:84:C0:1C
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 01A1A85D8A7CA24FE9F1A3C9C320D38C9E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
Manifest number: 1AEB
Signing time: Wed 04 Nov 2026 21:01:04 +0000
Manifest this update: Wed 04 Nov 2026 21:01:04 +0000
Manifest next update: Thu 05 Nov 2026 21:01:04 +0000
Files and hashes: 1: 0kbAZrj0KlIr6tTe_BrPv7Ou9Do.roa (hash: j8FCsH7KdJb2m1l6ogZ9wjzQrPPAwuq0Mi1PAn+gc3E=)
2: 9zo09ix2zYPkPjtRWCZtUQY7Hx8.roa (hash: 1YGiPxIeRO9HzGHWmN+x5SsxEkq0m2RwsZb+NYZ3A1U=)
3: BMHXoNqb9w8hGpmKpbza0EXvFx4.roa (hash: GAFHMPGGv6WbCFEAKXD/fdvXu0V9RH11YpVxeHI3Tgg=)
4: QQ4KxBaAki9JFj3Vc4-C08V1ydM.roa (hash: sU9ncWykONAWb2tj0sti+vKUahUUlRIsV/AFQ67WkR4=)
5: WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl (hash: hhAFWrqX6DE4xuBk0FoiYjMCdaDKbm9Njj6/RdhbmNc=)
6: WpRy_KPAxZKQEB_LsN9fBCkXol8.roa (hash: f3qEj6Yz1joliMM6YbG5U2guBbhW/iL/NGaA4Tk1ejo=)
7: aym4YZ7Ehm_KzkXD3V-QX01Qou4.roa (hash: QNBmXDOTHFhuiQC1mFg6H4twIsCe0r1/zgtBgEjdjlA=)
8: ttPcl3gpgQikkqNDHNv3FAV-nHQ.roa (hash: B0KgI8BvLZBPZBGXTpqu8AM7cdcZmvQ18YWeSHHi9Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:5d:8a:7c:a2:4f:e9:f1:a3:c9:c3:20:d3:8c:9e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Nov 4 21:01:04 2026 GMT
Not After : Nov 5 21:01:04 2026 GMT
Subject: CN=0e22f633f696b9790afa333fdb694ec7ce84c01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7c:d0:01:27:aa:c3:6c:8f:af:70:23:85:a7:
03:2e:0b:43:e4:1a:f2:04:e4:12:0f:dc:79:9e:ed:
e5:f5:72:5d:96:74:f1:91:d7:52:fe:87:48:8f:7b:
5b:1a:df:41:b8:6c:2f:63:de:ad:9a:5e:4e:aa:11:
0c:92:30:bd:0c:17:b3:82:55:99:ed:32:de:db:4a:
4c:67:e0:6c:d4:70:1e:ee:db:78:e0:d9:1e:1a:01:
54:90:3b:1c:c1:1a:fb:ed:b8:08:49:d4:95:46:50:
ca:8e:28:94:fd:20:cc:2a:9d:c5:72:10:87:83:fe:
b9:eb:8c:73:52:14:7b:3a:84:24:26:65:51:e5:a1:
72:aa:63:27:21:cb:69:5d:6a:88:5d:b8:4e:43:7d:
fd:5b:85:c5:2f:1e:fc:ba:79:99:10:aa:fa:55:e3:
79:15:66:d1:fb:20:db:23:60:fc:c4:9d:97:ae:1c:
f4:6c:5e:2a:03:6a:77:58:8c:c6:0a:dd:07:15:c6:
2b:47:58:c0:10:24:c1:c8:a0:4b:92:06:36:04:1b:
54:b0:7d:45:8a:f9:5c:bb:b1:82:a3:6f:0c:ee:d2:
34:6e:63:cd:29:60:9d:44:63:9c:96:bb:bf:97:64:
01:28:d0:a7:41:a8:be:1a:e0:22:c6:e9:01:e5:91:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:22:F6:33:F6:96:B9:79:0A:FA:33:3F:DB:69:4E:C7:CE:84:C0:1C
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b0:c8:62:f9:a2:2c:18:66:3b:f8:bf:36:5a:4e:5e:0b:93:
c6:4b:78:7a:94:11:7f:a2:d7:d4:cf:0a:f0:12:2f:e5:d8:6a:
ea:8a:a9:40:9f:82:41:39:b8:bf:21:40:be:85:ea:e6:42:1d:
e3:21:ba:59:ce:d5:3f:95:57:c1:b7:c6:f7:a6:65:60:13:59:
0e:87:ef:9d:8f:03:ea:b6:15:9e:56:da:4a:89:1b:05:51:87:
9e:30:c0:00:38:f7:d3:39:93:b8:57:64:8f:26:69:fc:ef:99:
cf:35:68:5a:8f:1d:be:7e:12:a6:eb:81:2f:12:e5:c0:eb:7f:
0a:41:72:7b:49:7c:5a:db:d3:53:ae:b8:61:1b:2d:5c:48:cf:
b4:34:bb:51:f1:9e:fe:42:2f:28:36:e8:53:b9:95:2e:9f:e1:
9e:ff:12:69:8d:ab:09:07:78:15:83:98:9f:93:09:6e:af:14:
ad:42:6e:f9:10:fe:8b:06:55:85:4d:25:56:12:86:17:d3:af:
04:64:11:0d:4a:65:90:aa:26:8e:77:6f:e8:b1:de:0a:51:75:
9b:e6:ab:70:fc:0b:59:15:bb:b7:61:dc:a8:3c:06:c2:6f:4a:
85:bd:6f:a0:d5:c5:3b:91:6a:b4:64:d4:ae:9a:e9:1a:cf:be:
ba:71:83:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:19:54 2026 by rpki-client