Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
File: WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft (raw, json)
Hash identifier: zmdpP++XfFDRUWrMdEaxpY8+Phr+X/BZ7YCY7wi6/5U=
Subject key identifier: 1A:2A:CF:B4:6C:C0:E6:8F:28:BC:2E:2A:C8:3D:C9:08:B2:05:D3:1B
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 01A0BEB043FD7525C2C494E45DF08829257E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
Manifest number: 1A72
Signing time: Sun 20 Sep 2026 12:00:17 +0000
Manifest this update: Sun 20 Sep 2026 12:00:17 +0000
Manifest next update: Mon 21 Sep 2026 12:00:17 +0000
Files and hashes: 1: 0kbAZrj0KlIr6tTe_BrPv7Ou9Do.roa (hash: j8FCsH7KdJb2m1l6ogZ9wjzQrPPAwuq0Mi1PAn+gc3E=)
2: 9zo09ix2zYPkPjtRWCZtUQY7Hx8.roa (hash: 1YGiPxIeRO9HzGHWmN+x5SsxEkq0m2RwsZb+NYZ3A1U=)
3: BMHXoNqb9w8hGpmKpbza0EXvFx4.roa (hash: GAFHMPGGv6WbCFEAKXD/fdvXu0V9RH11YpVxeHI3Tgg=)
4: QQ4KxBaAki9JFj3Vc4-C08V1ydM.roa (hash: sU9ncWykONAWb2tj0sti+vKUahUUlRIsV/AFQ67WkR4=)
5: WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl (hash: HMolTp4MZxfBgLt8Sfs6bGUyChq/Wzj0GCZnSrcePmA=)
6: WpRy_KPAxZKQEB_LsN9fBCkXol8.roa (hash: f3qEj6Yz1joliMM6YbG5U2guBbhW/iL/NGaA4Tk1ejo=)
7: aym4YZ7Ehm_KzkXD3V-QX01Qou4.roa (hash: QNBmXDOTHFhuiQC1mFg6H4twIsCe0r1/zgtBgEjdjlA=)
8: ttPcl3gpgQikkqNDHNv3FAV-nHQ.roa (hash: B0KgI8BvLZBPZBGXTpqu8AM7cdcZmvQ18YWeSHHi9Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:43:fd:75:25:c2:c4:94:e4:5d:f0:88:29:25:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Sep 20 12:00:17 2026 GMT
Not After : Sep 21 12:00:17 2026 GMT
Subject: CN=1a2acfb46cc0e68f28bc2e2ac83dc908b205d31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:44:bf:b7:41:49:83:c6:f6:39:ba:ff:ff:ae:
e0:35:2c:f6:89:19:a3:43:05:77:de:c5:e8:57:6e:
3e:cb:c4:0a:a1:59:db:0d:28:84:7b:3d:d2:a8:98:
d9:f4:c2:1e:8f:b8:46:d8:dd:e3:ce:25:5e:d5:d4:
be:3f:b7:06:db:9c:46:0e:b2:07:94:22:0b:5d:91:
c9:4c:85:26:72:ad:7c:50:6e:41:b0:69:08:d8:ee:
76:28:c0:e0:2b:0f:f2:bb:cb:0b:0c:bb:b2:c5:e6:
02:13:0f:83:91:90:3e:75:00:e8:e1:92:73:f1:c9:
0f:fc:fa:b3:02:57:fa:3b:f1:96:8a:3e:ac:ff:2d:
33:e5:0d:8c:b9:4a:18:4f:d1:f6:b0:8b:b5:0b:0a:
c8:5d:66:a7:31:41:41:e9:05:97:f7:0a:09:38:45:
7e:5f:cb:89:ef:1f:80:99:e6:18:12:d8:93:49:41:
ea:ec:58:6a:60:e3:06:d6:0a:e0:a5:f0:cc:1d:34:
f5:21:57:d6:b9:9b:90:08:93:82:f2:36:5d:85:42:
04:ba:45:fe:19:75:c5:00:a9:6d:70:a1:94:21:0f:
97:6e:58:c7:36:14:33:52:22:a3:df:eb:32:5a:af:
5f:54:61:f7:c2:cf:2e:9c:4f:04:42:c9:9e:6b:74:
35:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2A:CF:B4:6C:C0:E6:8F:28:BC:2E:2A:C8:3D:C9:08:B2:05:D3:1B
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:dc:51:ca:06:83:98:93:90:a2:6d:7f:a6:01:1f:50:4e:aa:
f1:45:04:28:cd:d4:ea:07:a5:76:76:cd:67:25:fb:29:d1:d0:
b9:ea:65:1f:97:e2:c4:23:ed:16:3a:8c:5b:1a:ef:72:9b:77:
dc:de:9a:2a:48:82:3e:d1:50:03:92:a1:bc:b1:4f:f7:f5:1d:
4e:32:d0:3f:02:6c:04:40:29:db:1c:04:5c:a9:2d:29:f0:8a:
14:b2:6e:b7:cf:b7:22:41:9f:41:15:be:a8:83:ad:cc:8f:eb:
e7:4d:a4:fd:ce:53:c3:ce:c5:77:dc:6e:9e:be:70:a2:fb:8a:
e1:fd:3c:51:fe:80:9b:cd:91:50:74:26:1e:37:8f:14:06:7d:
fb:34:b0:11:1c:4c:7e:5f:90:7d:1b:77:7b:ca:b3:d6:28:eb:
f1:a0:4d:6e:af:3d:d0:53:2a:95:50:51:4c:44:7d:40:1a:11:
59:4c:ed:41:ce:6b:88:f7:14:6c:92:ad:99:aa:26:42:f4:b2:
fb:c4:86:67:fa:99:af:7c:f8:38:4d:0d:ce:f5:b5:f8:d9:10:
5c:78:c0:21:6c:51:0f:a3:1d:8c:ed:67:f3:75:82:59:f1:07:
2e:16:b6:d2:d0:98:86:58:dd:07:08:9f:55:bd:ac:35:03:04:
6f:42:1c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:34:39 2026 by rpki-client