Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
File: we7iyrhrXuQPwncMqMtcUMYrdVs.mft (raw, json)
Hash identifier: WTuaVscJrZPT8ABCLbSAfexAgBuEY1DufZMl+EEWk+Q=
Subject key identifier: 4F:0D:8A:14:52:95:4B:71:CD:91:44:63:4C:27:83:61:43:99:23:9A
Authority key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
Certificate issuer: /CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Certificate serial: 019FAD1A90AD377A122EF88D1774ECAAFB89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
Manifest number: 164F
Signing time: Wed 29 Jul 2026 09:00:26 +0000
Manifest this update: Wed 29 Jul 2026 09:00:26 +0000
Manifest next update: Thu 30 Jul 2026 09:00:26 +0000
Files and hashes: 1: HadOHOP9GZgkMpWJH9CTmgirjks.roa (hash: iMPB2p7JTsdMOVem1W2GUgD445+oUnE8KP8HJy7laSM=)
2: we7iyrhrXuQPwncMqMtcUMYrdVs.crl (hash: xtxXtZlFZYcaVO0tOAyKLcnOMkVqZQnzaaMAXR0P/OA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:90:ad:37:7a:12:2e:f8:8d:17:74:ec:aa:fb:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Validity
Not Before: Jul 29 09:00:26 2026 GMT
Not After : Jul 30 09:00:26 2026 GMT
Subject: CN=4f0d8a1452954b71cd9144634c2783614399239a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:df:9a:ea:c5:a4:30:cc:6b:ee:30:a7:61:
e9:da:50:15:80:18:ae:b9:52:46:a7:4d:4e:96:4a:
de:15:32:97:86:87:49:d8:97:c9:17:74:b0:e7:02:
c0:36:d8:57:f5:d7:a9:70:83:ee:79:36:f4:84:07:
1c:35:74:82:88:bf:33:f6:d2:a4:2b:b1:2e:2a:16:
d7:d2:4b:ad:bb:e5:08:d5:5a:5a:d8:a1:32:2d:ca:
3d:c0:f2:7b:aa:ba:a8:93:17:c4:e5:55:20:fb:b6:
f1:d7:7c:e8:9f:a7:0b:42:93:81:5f:f6:29:f5:03:
ff:12:15:4f:5c:47:72:f5:d4:f5:94:4c:37:f8:2c:
c0:b3:e5:b5:e7:14:12:5c:ff:3b:4d:b3:d5:21:66:
06:c4:8a:a1:ef:96:ac:ce:14:61:9b:f3:87:03:cc:
36:09:c0:95:78:6b:41:98:86:c8:cf:85:34:14:d2:
11:93:0d:09:d9:b3:15:fb:96:0b:de:0b:a7:6c:75:
bb:f8:ea:f7:ba:be:64:b1:fc:47:e8:08:db:bc:3a:
49:ea:c2:77:77:fb:05:3b:3f:7b:49:2f:be:96:5f:
1a:37:a4:d8:e2:e4:67:52:21:24:a1:01:c7:9c:ff:
40:e7:0e:f8:f8:23:49:4c:40:bb:59:13:49:ef:6b:
a9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0D:8A:14:52:95:4B:71:CD:91:44:63:4C:27:83:61:43:99:23:9A
X509v3 Authority Key Identifier:
keyid:C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:27:aa:b6:cb:dc:26:03:e4:12:1d:db:a2:07:35:71:1c:8d:
90:52:96:46:e1:74:fe:6e:91:f6:f6:d8:01:b6:10:1a:f4:b2:
f0:e1:25:28:d4:fa:4d:e6:ca:37:f1:8e:8b:6a:3a:75:4f:77:
4a:a4:e9:e3:6d:84:10:26:f0:c1:89:b0:1e:b2:be:35:53:18:
f4:7b:db:dc:eb:33:11:31:4f:1c:a9:1a:73:d6:51:c4:06:a0:
b2:f8:e5:2e:f7:78:8c:bc:1d:5e:69:5a:fa:73:64:bf:9f:c7:
5b:64:0b:72:6f:c7:50:41:30:12:36:5e:9b:80:1e:01:11:f0:
66:ec:61:38:e8:47:6c:fe:86:f1:8b:09:14:89:8d:ad:ce:47:
7d:45:ab:33:2c:97:ac:88:7b:81:6f:e4:d6:ae:28:1b:64:97:
2e:df:50:d7:97:48:22:31:04:89:3a:49:86:0f:cd:26:76:29:
2c:c0:0c:15:6c:2e:90:93:1b:a0:18:4a:b7:b8:6c:10:8f:59:
f1:a4:92:dd:d5:de:fe:3a:18:0e:eb:77:04:27:16:2b:88:ee:
1d:97:9d:39:22:1a:da:2a:b2:1a:6e:25:b8:6a:e2:aa:2d:50:
3e:d4:bf:fd:93:d3:a0:2d:c4:f8:13:8e:90:dd:aa:72:ba:9d:
b8:df:ea:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:17:21 2026 by rpki-client