Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
File: we7iyrhrXuQPwncMqMtcUMYrdVs.mft (raw, json)
Hash identifier: BE0yi5COhUSWSc9hjBl43W04EIbB7SLLcWOp3XGn/Zs=
Subject key identifier: AF:75:CD:3F:C9:3A:FC:A0:A4:68:C6:A9:FB:38:49:8D:6A:73:5B:67
Authority key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
Certificate issuer: /CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Certificate serial: 019CAC7DC531CD909788AAA55167AC947DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
Manifest number: 14C1
Signing time: Mon 02 Mar 2026 03:00:49 +0000
Manifest this update: Mon 02 Mar 2026 03:00:49 +0000
Manifest next update: Tue 03 Mar 2026 03:00:49 +0000
Files and hashes: 1: HadOHOP9GZgkMpWJH9CTmgirjks.roa (hash: iMPB2p7JTsdMOVem1W2GUgD445+oUnE8KP8HJy7laSM=)
2: we7iyrhrXuQPwncMqMtcUMYrdVs.crl (hash: c37ps4QwimGjC5/hYdB3TQn5SvMy3VYUK7ptXLe2EME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:c5:31:cd:90:97:88:aa:a5:51:67:ac:94:7d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Validity
Not Before: Mar 2 03:00:49 2026 GMT
Not After : Mar 3 03:00:49 2026 GMT
Subject: CN=af75cd3fc93afca0a468c6a9fb38498d6a735b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:49:63:45:a3:60:10:70:dd:ee:42:c0:d7:
bc:48:00:c9:f0:82:16:e4:d1:55:e1:7f:eb:ab:41:
ea:b7:94:d5:c4:ae:4a:c4:87:85:f0:ce:0d:7e:9e:
c8:b8:1d:47:0b:4d:0a:f4:fe:c3:9a:df:c1:4c:68:
0a:a3:35:56:41:3f:27:15:40:21:60:45:3f:c6:3f:
39:a2:8f:ed:4f:e8:84:5d:f1:16:aa:84:19:67:24:
c5:d7:2c:b3:a4:d8:6e:87:aa:d2:53:a7:dd:16:23:
1a:f4:94:51:0e:4b:1e:4e:b0:e4:71:16:1b:c8:e4:
1b:9d:79:22:cd:ec:88:66:ce:15:de:a9:5c:cf:8a:
fe:43:7d:d6:25:23:1d:b4:d0:a8:d7:3b:3e:e2:ab:
e1:8d:1c:82:d2:b0:45:5e:ff:55:87:1d:ad:28:22:
70:14:b4:28:e9:49:0b:54:5d:40:0b:82:6c:fa:2b:
f1:f4:a5:ae:6e:d9:2d:23:05:ee:05:95:ba:9e:59:
cc:92:1c:f0:7f:86:b7:42:cb:4b:c5:7c:74:a9:c4:
87:7e:ed:a7:8d:ad:26:50:6b:e7:df:76:ad:6a:e2:
cd:18:06:98:59:7f:6b:0e:39:62:e2:dd:f1:9f:ba:
01:93:66:e7:c7:d0:fc:ad:8a:4e:c2:77:f8:6f:0c:
48:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:75:CD:3F:C9:3A:FC:A0:A4:68:C6:A9:FB:38:49:8D:6A:73:5B:67
X509v3 Authority Key Identifier:
keyid:C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f5:67:9f:16:15:29:f7:80:0a:84:cf:43:32:e4:5e:5e:19:
db:7f:87:5a:2f:1d:de:ea:d7:ce:80:fe:a1:9c:65:ae:d5:da:
0f:13:cd:67:4d:00:a7:78:bd:c8:59:ea:58:79:30:f3:7e:5c:
01:c6:51:58:ef:e6:e3:d9:19:f8:46:f8:8d:c0:6d:47:95:9d:
ef:7c:08:c6:89:67:55:72:6d:6f:b0:34:f7:b1:ba:32:1b:57:
c6:74:91:89:b2:a0:0d:9d:6d:6e:67:cb:76:53:8c:e7:52:b2:
e2:4f:b3:82:21:c8:87:0b:b0:f9:cb:bc:cd:cb:fb:19:43:ab:
cb:b8:3a:19:62:e9:c5:0d:50:8b:0c:ac:54:90:9d:7a:06:d7:
ca:3e:9c:cc:dc:a4:4e:2f:85:ec:75:ff:9d:67:a1:ee:54:d3:
85:a7:b7:1c:80:1f:f4:d6:61:00:28:d8:4a:9d:d4:dc:ed:9d:
6a:76:ba:b0:aa:41:f7:01:fb:d5:61:9c:08:5d:22:6d:91:49:
20:c8:a5:1f:c7:b7:8d:59:b6:b3:98:df:a7:d1:b9:8c:fc:15:
da:bb:2a:c4:64:24:f9:2c:98:0d:a0:d7:f8:38:e1:33:7f:1e:
93:79:ae:e5:8b:1d:0d:1d:ea:6d:9b:25:dc:2a:02:a8:c4:33:
08:18:09:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfcUxzZCXiKqlUWeslH24MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZWVlMmNhYjg2YjVlZTQwZmMyNzcwY2E4Y2I1YzUwYzYy
Yjc1NWIwHhcNMjYwMzAyMDMwMDQ5WhcNMjYwMzAzMDMwMDQ5WjAzMTEwLwYDVQQD
EyhhZjc1Y2QzZmM5M2FmY2EwYTQ2OGM2YTlmYjM4NDk4ZDZhNzM1YjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSZJY0WjYBBw3e5CwNe8SADJ8IIW
5NFV4X/rq0Hqt5TVxK5KxIeF8M4Nfp7IuB1HC00K9P7Dmt/BTGgKozVWQT8nFUAh
YEU/xj85oo/tT+iEXfEWqoQZZyTF1yyzpNhuh6rSU6fdFiMa9JRRDkseTrDkcRYb
yOQbnXkizeyIZs4V3qlcz4r+Q33WJSMdtNCo1zs+4qvhjRyC0rBFXv9Vhx2tKCJw
FLQo6UkLVF1AC4Js+ivx9KWubtktIwXuBZW6nlnMkhzwf4a3QstLxXx0qcSHfu2n
ja0mUGvn33atauLNGAaYWX9rDjli4t3xn7oBk2bnx9D8rYpOwnf4bwxIOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK91zT/JOvygpGjGqfs4SY1qc1tnMB8GA1UdIwQY
MBaAFMHu4sq4a17kD8J3DKjLXFDGK3VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2U3aXlyaHJYdVFQd25jTXFNdGNVTVlyZFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82MWYzZDgtMWEyNC00NDZmLWEyYjIt
MGQwNzY1MmU0Y2FiLzEvd2U3aXlyaHJYdVFQd25jTXFNdGNVTVlyZFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny82MWYzZDgtMWEyNC00NDZmLWEyYjItMGQwNzY1MmU0Y2Fi
LzEvd2U3aXlyaHJYdVFQd25jTXFNdGNVTVlyZFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvVnnxYV
KfeACoTPQzLkXl4Z23+HWi8d3urXzoD+oZxlrtXaDxPNZ00Ap3i9yFnqWHkw835c
AcZRWO/m49kZ+Eb4jcBtR5Wd73wIxolnVXJtb7A097G6MhtXxnSRibKgDZ1tbmfL
dlOM51Ky4k+zgiHIhwuw+cu8zcv7GUOry7g6GWLpxQ1QiwysVJCdegbXyj6czNyk
Ti+F7HX/nWeh7lTThae3HIAf9NZhACjYSp3U3O2dana6sKpB9wH71WGcCF0ibZFJ
IMilH8e3jVm2s5jfp9G5jPwV2rsqxGQk+SyYDaDX+DjhM38ek3mu5YsdDR3qbZsl
3CoCqMQzCBgJBA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:55:16 2026 by rpki-client