Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
File: WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft (raw, json)
Hash identifier: x/0gmWD+1mglIvB3LqLMDWvUKRXDRc2Zwen8q8188Ik=
Subject key identifier: A7:0F:8C:3D:51:A2:1D:95:91:33:EF:E5:6B:5E:55:34:D7:33:AB:97
Authority key identifier: 5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
Certificate issuer: /CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Certificate serial: 019CAC4734915DF6135A4D1794095AA38D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
Manifest number: 14A4
Signing time: Mon 02 Mar 2026 02:01:13 +0000
Manifest this update: Mon 02 Mar 2026 02:01:13 +0000
Manifest next update: Tue 03 Mar 2026 02:01:13 +0000
Files and hashes: 1: WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl (hash: fu5DfK+MCK9nafc2TNAMOeQSdQor/sK22V/WY2rwXT0=)
2: seNSk84li2dZlctJAUeZ_r6fQdk.roa (hash: AtzT2v2IabnE0tR+Z9io8DEcEd219tuxCpUpZJ+4AzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:34:91:5d:f6:13:5a:4d:17:94:09:5a:a3:8d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Validity
Not Before: Mar 2 02:01:13 2026 GMT
Not After : Mar 3 02:01:13 2026 GMT
Subject: CN=a70f8c3d51a21d959133efe56b5e5534d733ab97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:12:16:8f:11:d6:1d:dc:5d:2f:d0:96:1a:
5b:d9:b8:25:1a:ad:8f:c0:0a:fa:51:4e:1d:04:69:
9d:5d:13:68:7f:df:8a:a3:8c:e3:2b:1c:89:87:71:
30:47:83:79:84:fa:89:8d:41:6f:b4:1a:4e:6e:80:
dd:94:2d:9c:c5:2b:db:e1:0a:91:c7:26:cb:3e:1a:
e0:5e:e9:df:48:de:3a:19:00:9b:2c:5e:0d:f5:42:
16:0f:b0:42:b9:9a:3d:c1:ca:13:60:13:a7:3a:20:
9c:f8:ca:a0:f2:52:6b:6b:3a:d8:ba:3a:2c:5c:ae:
8e:13:ac:db:84:9e:77:9b:8d:e7:3e:19:c7:62:a1:
c9:0a:25:21:81:dc:42:68:20:f6:47:4a:89:af:7c:
bd:3e:3a:ca:28:63:c7:ac:2a:86:51:e8:40:97:dd:
72:34:0e:d9:1f:86:48:cb:0f:cc:be:0f:e0:d6:c9:
ed:23:d5:27:8f:43:84:29:a1:5d:9a:3b:79:94:83:
21:fd:4e:b8:e7:c0:39:81:d3:8a:b9:a1:f3:63:d5:
8a:fa:4c:04:ed:ed:cf:cf:0c:fe:cf:da:d0:a6:68:
75:99:04:15:e0:43:b8:da:0b:b6:e4:c5:3a:52:dd:
13:d7:ef:1f:2d:09:87:b7:0a:49:2c:69:9f:08:0f:
de:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0F:8C:3D:51:A2:1D:95:91:33:EF:E5:6B:5E:55:34:D7:33:AB:97
X509v3 Authority Key Identifier:
keyid:5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:31:79:a4:f7:3c:7b:45:d0:01:c0:03:98:c3:7c:f2:a4:69:
3f:0d:c2:61:fd:a3:b1:34:81:98:d6:e5:06:12:ca:fe:e7:42:
a7:eb:77:3a:10:30:b3:0b:04:ec:a6:05:02:f2:61:61:22:8c:
9c:97:ca:9b:b3:5c:ae:78:27:ff:0d:1f:4c:c2:c1:58:20:63:
45:eb:35:a7:6d:ef:c0:1e:5d:4b:4c:f6:cc:6c:d6:b5:08:f1:
5c:40:e7:a1:47:02:64:14:d4:07:0a:b4:2f:88:2c:4e:5c:1d:
44:9a:f9:a8:e8:90:11:69:17:30:0f:ef:0f:cf:13:9b:09:8e:
ec:ae:3a:04:3d:ba:88:de:7e:3f:82:9f:82:44:1c:86:b9:11:
06:6b:d3:56:db:41:74:60:12:18:26:10:86:e1:82:aa:47:95:
22:b3:48:f0:fa:bf:85:54:5a:b4:0f:b6:23:ed:71:dd:46:4e:
40:6b:43:d5:ef:6b:53:a1:ca:69:5c:54:b4:b7:d2:c3:1b:5b:
75:7b:f7:04:c3:dc:78:d5:78:05:d1:d9:7e:c9:65:11:dc:79:
b6:4a:22:ba:a5:77:30:a0:4a:75:f0:9a:81:79:43:3f:8a:40:
e7:6f:47:7f:47:c4:04:5d:77:76:e7:f7:7d:1c:f6:77:82:e8:
5b:37:f5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:27 2026 by rpki-client