Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
File: we7iyrhrXuQPwncMqMtcUMYrdVs.mft (raw, json)
Hash identifier: 6lK7Ts1daMXRJZln0sxS9GOQ9J8e+AlYLo/SXMYF8zY=
Subject key identifier: 00:0D:EA:B5:09:C0:47:C3:81:D2:8B:A5:6A:3D:C3:FC:76:E0:66:5F
Authority key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
Certificate issuer: /CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Certificate serial: 01A0CAEBD7615D93296E86F892D0104F4D72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
Manifest number: 16E3
Signing time: Tue 22 Sep 2026 21:00:48 +0000
Manifest this update: Tue 22 Sep 2026 21:00:48 +0000
Manifest next update: Wed 23 Sep 2026 21:00:48 +0000
Files and hashes: 1: HadOHOP9GZgkMpWJH9CTmgirjks.roa (hash: iMPB2p7JTsdMOVem1W2GUgD445+oUnE8KP8HJy7laSM=)
2: we7iyrhrXuQPwncMqMtcUMYrdVs.crl (hash: a7jVUOgMXhaIqcBxjU2G2PMfce5hQVCTeNTL6AYaxLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:d7:61:5d:93:29:6e:86:f8:92:d0:10:4f:4d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Validity
Not Before: Sep 22 21:00:48 2026 GMT
Not After : Sep 23 21:00:48 2026 GMT
Subject: CN=000deab509c047c381d28ba56a3dc3fc76e0665f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:0e:42:55:ad:c2:55:bc:72:c9:c5:26:e9:
56:e5:18:ea:a8:be:aa:f1:24:77:c7:6e:20:88:67:
ee:fd:1b:71:a5:e7:b0:8c:ce:fc:ba:b3:c3:c1:36:
3a:83:13:6f:d4:a3:db:34:11:3d:0f:9f:c6:ac:34:
ad:89:99:03:bd:93:ff:57:0e:32:77:25:7a:91:f6:
da:09:86:a2:dc:94:3c:bb:2c:08:0e:22:bf:9a:d8:
e3:28:c8:89:33:22:fb:11:51:cf:3d:c4:e6:31:bd:
77:fd:e6:c5:8f:4a:bd:34:75:0c:5b:16:c5:b7:b6:
83:f2:26:f8:31:7f:3c:95:a9:02:47:a8:1c:d3:86:
79:d6:5c:49:fe:6a:f5:19:e8:63:0b:a6:fe:35:c2:
a5:25:e6:df:c1:2e:77:5e:30:a5:ee:b2:f6:81:76:
9a:1d:09:ec:db:36:84:4a:31:ac:86:84:c3:67:21:
ee:5c:fa:cb:52:c4:21:af:08:e3:c7:f0:01:64:60:
08:85:a2:47:b3:ea:d5:22:03:2e:18:8f:c6:e3:c1:
7d:9d:05:54:75:10:97:60:6d:cf:de:38:8b:fc:3e:
b1:6e:16:a3:86:95:8e:3f:98:a3:d5:1b:07:5a:25:
13:7d:2b:9c:5e:5b:bd:9d:d0:06:8d:80:1e:f9:f9:
52:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0D:EA:B5:09:C0:47:C3:81:D2:8B:A5:6A:3D:C3:FC:76:E0:66:5F
X509v3 Authority Key Identifier:
keyid:C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:79:25:93:cc:ba:30:64:75:70:2c:46:2c:51:f1:f1:81:ae:
da:b3:64:46:ab:94:41:b0:7f:e0:4a:3f:45:cc:73:be:1e:51:
1c:21:cb:b6:92:36:e5:4d:31:f8:c8:9e:29:16:67:98:19:fd:
16:9e:9c:52:95:1a:e6:c5:2e:1d:37:34:43:57:58:fa:f8:42:
77:01:d2:51:fc:fc:dd:80:9b:67:04:12:ae:9c:8c:b1:5f:ec:
e7:da:f3:f7:08:c6:f2:9a:aa:ea:c9:3b:4c:37:8b:e6:0f:c6:
ef:fd:78:74:2d:d9:56:20:db:1c:6b:12:f3:a8:ac:8d:29:13:
96:46:d8:82:06:90:5a:50:ae:75:8c:8c:a7:fe:54:6f:b4:78:
55:9d:eb:72:04:ef:53:d6:45:fb:32:2d:11:b7:bf:e7:21:c6:
7c:b9:99:7a:12:cd:6e:9c:ff:40:57:3d:da:df:41:a9:4f:5a:
17:4f:70:33:48:f5:6f:1d:01:2e:d9:34:10:29:c5:41:4f:0b:
2b:fc:98:93:39:3f:ca:93:0c:ed:cb:d2:80:8a:a2:7d:e1:36:
22:3c:8c:7e:ce:da:68:08:be:03:7a:6d:7d:db:86:0d:00:62:
a5:cc:6c:b6:59:e4:0f:ca:c0:aa:9d:5d:31:65:47:12:df:c1:
a2:c3:ad:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:37:39 2026 by rpki-client