Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
File: WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft (raw, json)
Hash identifier: /QQkpvUpqE8uGCChdcANext7VQ+Gwa0w+Aoltpn6tJ8=
Subject key identifier: ED:D7:57:B1:C0:B2:2E:64:4D:22:64:08:EB:87:85:66:2B:83:3C:70
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 019CA9EB8D6986E8154C3D807BE7D42AE462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
Manifest number: 1855
Signing time: Sun 01 Mar 2026 15:01:52 +0000
Manifest this update: Sun 01 Mar 2026 15:01:52 +0000
Manifest next update: Mon 02 Mar 2026 15:01:52 +0000
Files and hashes: 1: 0kbAZrj0KlIr6tTe_BrPv7Ou9Do.roa (hash: j8FCsH7KdJb2m1l6ogZ9wjzQrPPAwuq0Mi1PAn+gc3E=)
2: 9zo09ix2zYPkPjtRWCZtUQY7Hx8.roa (hash: 1YGiPxIeRO9HzGHWmN+x5SsxEkq0m2RwsZb+NYZ3A1U=)
3: BMHXoNqb9w8hGpmKpbza0EXvFx4.roa (hash: GAFHMPGGv6WbCFEAKXD/fdvXu0V9RH11YpVxeHI3Tgg=)
4: QQ4KxBaAki9JFj3Vc4-C08V1ydM.roa (hash: sU9ncWykONAWb2tj0sti+vKUahUUlRIsV/AFQ67WkR4=)
5: WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl (hash: 6Tcrt4abuYB+nxkVxVy8ksMxZocb5exUP9Bid8H0TBw=)
6: WpRy_KPAxZKQEB_LsN9fBCkXol8.roa (hash: f3qEj6Yz1joliMM6YbG5U2guBbhW/iL/NGaA4Tk1ejo=)
7: aym4YZ7Ehm_KzkXD3V-QX01Qou4.roa (hash: QNBmXDOTHFhuiQC1mFg6H4twIsCe0r1/zgtBgEjdjlA=)
8: ttPcl3gpgQikkqNDHNv3FAV-nHQ.roa (hash: B0KgI8BvLZBPZBGXTpqu8AM7cdcZmvQ18YWeSHHi9Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:8d:69:86:e8:15:4c:3d:80:7b:e7:d4:2a:e4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Mar 1 15:01:52 2026 GMT
Not After : Mar 2 15:01:52 2026 GMT
Subject: CN=edd757b1c0b22e644d226408eb8785662b833c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:78:e1:26:dd:23:30:df:f3:00:a9:47:2b:
f9:61:e3:30:c7:a3:2d:da:1b:ea:01:23:fd:46:56:
4a:4b:17:01:43:70:ba:82:cf:9b:73:43:c5:91:0d:
b4:56:55:b3:42:bf:1c:e1:bf:b6:4b:25:be:1b:ab:
07:b8:85:f0:7a:97:1d:a4:b5:27:be:00:20:78:fd:
51:7e:10:57:95:38:c2:92:56:e1:cf:6e:3e:00:db:
94:94:83:43:93:97:b0:39:81:5f:a9:29:58:fc:8d:
68:b8:48:fa:4b:30:4a:83:81:dc:02:29:15:d9:75:
be:42:c9:8f:b4:8a:d9:64:c1:b2:89:11:17:4e:96:
f9:c1:41:cf:b0:00:8b:bb:b4:01:bb:bd:94:e1:2a:
ab:bc:b0:81:8b:a2:6c:df:fd:32:31:43:a5:68:10:
e5:03:06:4e:b6:17:e9:9e:51:ee:c1:fe:c1:37:ab:
3e:3a:de:a3:43:54:0b:81:13:7a:0b:95:a8:7d:aa:
34:b4:a4:10:d4:26:ef:91:e4:4d:b8:00:16:d1:88:
1f:70:32:28:a7:3a:45:ec:dc:51:c0:88:4e:d9:17:
e1:8d:fa:62:73:8e:58:b5:54:39:bf:7a:52:8d:4a:
91:4c:c8:a7:bd:65:a1:8a:a7:9d:1b:06:a9:55:be:
ec:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D7:57:B1:C0:B2:2E:64:4D:22:64:08:EB:87:85:66:2B:83:3C:70
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:98:69:f1:2d:61:47:3f:a9:22:19:c8:1d:39:38:09:02:c6:
22:6a:01:e7:2f:14:ee:b9:da:ef:bd:2d:1f:75:d7:8e:b2:69:
c8:ab:8b:8e:e4:d2:8b:df:ee:d4:16:f1:ba:9a:75:fd:8e:ff:
28:63:b1:ae:95:bf:66:50:af:5a:9b:81:23:7b:71:77:93:0d:
6b:5d:67:c9:98:7f:ac:3f:42:80:5f:49:d5:af:3c:8f:d3:b6:
09:d1:59:a2:22:cd:eb:67:ab:6d:aa:b2:00:9c:b4:be:1a:3c:
79:0b:a9:96:94:ce:cf:a3:2e:32:f7:7c:49:cc:c9:64:e7:fa:
58:b1:de:89:2a:60:35:11:4a:f7:6e:3b:68:92:3e:b3:11:41:
34:5b:83:77:67:1c:04:c7:8f:c9:cc:8c:2f:51:78:37:22:ad:
84:42:f1:b9:98:bc:4c:1d:92:ef:a1:2f:8e:17:78:fc:31:64:
ca:44:ef:a0:c4:f3:74:9e:45:bd:bf:31:9e:22:3a:80:a9:db:
87:31:ef:12:de:57:a3:41:31:ff:c0:f2:45:96:7d:a4:c4:0e:
6c:67:10:3a:11:3a:6c:09:6c:e2:83:94:ec:0e:45:c1:bc:66:
55:60:60:25:9e:74:33:97:7a:5b:22:59:d7:87:ba:61:b0:69:
59:16:83:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp641phugVTD2Ae+fUKuRiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMTQxYzUwOTA4MjRkMGExN2MyOWVjNDA1MGUyMTAwNzEx
M2ZiZGEwHhcNMjYwMzAxMTUwMTUyWhcNMjYwMzAyMTUwMTUyWjAzMTEwLwYDVQQD
EyhlZGQ3NTdiMWMwYjIyZTY0NGQyMjY0MDhlYjg3ODU2NjJiODMzYzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrp44SbdIzDf8wCpRyv5YeMwx6Mt
2hvqASP9RlZKSxcBQ3C6gs+bc0PFkQ20VlWzQr8c4b+2SyW+G6sHuIXwepcdpLUn
vgAgeP1RfhBXlTjCklbhz24+ANuUlINDk5ewOYFfqSlY/I1ouEj6SzBKg4HcAikV
2XW+QsmPtIrZZMGyiREXTpb5wUHPsACLu7QBu72U4SqrvLCBi6Js3/0yMUOlaBDl
AwZOthfpnlHuwf7BN6s+Ot6jQ1QLgRN6C5Wofao0tKQQ1CbvkeRNuAAW0YgfcDIo
pzpF7NxRwIhO2Rfhjfpic45YtVQ5v3pSjUqRTMinvWWhiqedGwapVb7sTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3XV7HAsi5kTSJkCOuHhWYrgzxwMB8GA1UdIwQY
MBaAFFoUHFCQgk0KF8KexAUOIQBxE/vaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUt
ZWNlZWZmOGU4NGUwLzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUtZWNlZWZmOGU4NGUw
LzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwphp8S1h
Rz+pIhnIHTk4CQLGImoB5y8U7rna770tH3XXjrJpyKuLjuTSi9/u1Bbxupp1/Y7/
KGOxrpW/ZlCvWpuBI3txd5MNa11nyZh/rD9CgF9J1a88j9O2CdFZoiLN62erbaqy
AJy0vho8eQuplpTOz6MuMvd8SczJZOf6WLHeiSpgNRFK9247aJI+sxFBNFuDd2cc
BMePycyML1F4NyKthELxuZi8TB2S76Evjhd4/DFkykTvoMTzdJ5Fvb8xniI6gKnb
hzHvEt5Xo0Ex/8DyRZZ9pMQObGcQOhE6bAls4oOU7A5FwbxmVWBgJZ50M5d6WyJZ
14e6YbBpWRaDIg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:14:00 2026 by rpki-client