Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
File: WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft (raw, json)
Hash identifier: RaXOQVpPDppPEHULi5vn+BjkGrkIZkRmukmTkE6FS74=
Subject key identifier: 8F:08:73:0C:25:03:06:5C:FE:96:05:07:88:D9:D8:A4:BD:BE:35:C4
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 019D99629E9311D1D9C1141321BF3EF9ECEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
Manifest number: 18D1
Signing time: Fri 17 Apr 2026 03:01:10 +0000
Manifest this update: Fri 17 Apr 2026 03:01:10 +0000
Manifest next update: Sat 18 Apr 2026 03:01:10 +0000
Files and hashes: 1: 0kbAZrj0KlIr6tTe_BrPv7Ou9Do.roa (hash: j8FCsH7KdJb2m1l6ogZ9wjzQrPPAwuq0Mi1PAn+gc3E=)
2: 9zo09ix2zYPkPjtRWCZtUQY7Hx8.roa (hash: 1YGiPxIeRO9HzGHWmN+x5SsxEkq0m2RwsZb+NYZ3A1U=)
3: BMHXoNqb9w8hGpmKpbza0EXvFx4.roa (hash: GAFHMPGGv6WbCFEAKXD/fdvXu0V9RH11YpVxeHI3Tgg=)
4: QQ4KxBaAki9JFj3Vc4-C08V1ydM.roa (hash: sU9ncWykONAWb2tj0sti+vKUahUUlRIsV/AFQ67WkR4=)
5: WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl (hash: vTmyjT5WoGBTN7zIADX8zKz32iZwflpRO6xxIvX+Dz8=)
6: WpRy_KPAxZKQEB_LsN9fBCkXol8.roa (hash: f3qEj6Yz1joliMM6YbG5U2guBbhW/iL/NGaA4Tk1ejo=)
7: aym4YZ7Ehm_KzkXD3V-QX01Qou4.roa (hash: QNBmXDOTHFhuiQC1mFg6H4twIsCe0r1/zgtBgEjdjlA=)
8: ttPcl3gpgQikkqNDHNv3FAV-nHQ.roa (hash: B0KgI8BvLZBPZBGXTpqu8AM7cdcZmvQ18YWeSHHi9Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:9e:93:11:d1:d9:c1:14:13:21:bf:3e:f9:ec:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Apr 17 03:01:10 2026 GMT
Not After : Apr 18 03:01:10 2026 GMT
Subject: CN=8f08730c2503065cfe96050788d9d8a4bdbe35c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:f8:d3:ee:3a:bc:41:ec:ac:db:1b:8a:77:
20:48:7e:0b:b2:75:6a:82:ed:90:41:a1:10:f4:fa:
59:f5:f1:ec:54:9e:b8:0c:dc:c0:de:fb:15:4b:e5:
7b:fc:9b:82:4d:6f:fa:4a:fb:ab:8b:10:b6:c9:3f:
65:9e:45:25:a7:62:f1:e0:ea:e2:c6:75:57:6a:1b:
91:c5:e5:2b:71:17:f5:f3:f2:1f:69:0b:82:58:a2:
c5:40:6b:f5:de:7a:7d:59:6e:7e:b8:bd:5f:42:c2:
46:10:9a:c5:fa:8d:41:70:ad:9a:b1:3e:38:4d:23:
41:c6:1a:cc:c4:5a:a7:a4:c6:11:b6:45:34:00:50:
92:89:65:03:74:57:c3:bd:d5:42:aa:3d:dc:e0:d5:
e6:5d:74:7c:42:00:41:7c:50:b7:82:9b:1f:82:8c:
b1:2b:97:3a:db:5e:b2:95:71:4f:af:2f:b9:06:f6:
3c:99:c1:66:98:43:d1:1a:1a:81:34:2b:4a:4b:1c:
01:f5:64:90:48:7c:58:4b:ae:8f:c1:25:47:08:11:
84:eb:b2:2d:90:de:b9:9e:4c:4b:5e:68:84:df:f9:
4a:25:7a:a7:6a:66:92:0f:cb:9b:25:6d:3c:e9:34:
59:36:b1:85:cb:3b:9f:fd:a1:97:3c:89:7a:11:ec:
e1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:08:73:0C:25:03:06:5C:FE:96:05:07:88:D9:D8:A4:BD:BE:35:C4
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4b:c0:95:66:91:9f:39:59:c3:64:03:53:ba:f8:a5:b9:fc:
c4:17:5d:ae:e3:36:e1:35:83:32:03:88:43:de:3c:2e:5e:c3:
0e:30:48:a0:97:a7:14:13:f7:41:26:35:d9:e8:bf:6a:63:23:
45:2c:5e:ee:a5:29:6d:69:2d:7b:55:16:3d:83:2d:bb:df:ca:
cc:52:09:af:94:46:09:c7:a5:e5:76:f4:cb:9d:bd:86:ba:bb:
e9:db:b2:0a:bf:b1:88:af:93:55:fd:ec:ef:16:56:69:99:5f:
61:d2:c7:e7:72:4d:94:cf:25:59:c5:77:53:ca:b2:80:32:59:
ee:17:28:21:62:74:7e:12:5f:94:57:cf:a7:4a:c8:c9:35:e2:
1e:4d:3a:29:ff:7f:1b:16:07:67:2f:da:6f:23:0a:c5:9c:e3:
5c:0c:4e:ea:ec:80:90:33:21:8a:1a:14:de:fe:79:bc:95:45:
41:2b:11:8b:e2:25:1b:2d:93:6f:0e:60:02:78:22:7d:5d:bd:
6e:d5:20:fa:a2:10:8f:55:7d:b9:93:e7:4c:4e:0d:2f:53:69:
07:09:25:97:34:b7:b0:d6:11:09:f8:c8:f1:3e:7a:e2:ba:5a:
73:37:28:27:eb:bc:92:b9:71:ad:4f:92:d0:56:6f:d3:7a:73:
a4:76:f7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:11:13 2026 by rpki-client