Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
File: we7iyrhrXuQPwncMqMtcUMYrdVs.mft (raw, json)
Hash identifier: FOLSOSvt6Am/TVJp3njWpmHfjBEzRe43IqbglP/bKyw=
Subject key identifier: 22:0B:EC:5E:E0:BE:25:21:62:4A:92:4B:2B:09:DF:44:A9:1E:BD:4E
Authority key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
Certificate issuer: /CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Certificate serial: 019DA3AF5391F01C7FAE2D8B70975D1DF78A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
Manifest number: 1541
Signing time: Sun 19 Apr 2026 03:01:09 +0000
Manifest this update: Sun 19 Apr 2026 03:01:09 +0000
Manifest next update: Mon 20 Apr 2026 03:01:09 +0000
Files and hashes: 1: HadOHOP9GZgkMpWJH9CTmgirjks.roa (hash: iMPB2p7JTsdMOVem1W2GUgD445+oUnE8KP8HJy7laSM=)
2: we7iyrhrXuQPwncMqMtcUMYrdVs.crl (hash: 2Y8kftTjk3JS6fzv8VY97Xcf+Bp8fPXX9jHFjky/q5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:53:91:f0:1c:7f:ae:2d:8b:70:97:5d:1d:f7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Validity
Not Before: Apr 19 03:01:09 2026 GMT
Not After : Apr 20 03:01:09 2026 GMT
Subject: CN=220bec5ee0be2521624a924b2b09df44a91ebd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:8f:ab:01:a4:83:cd:e2:02:8a:96:66:36:
db:21:d1:2c:71:0c:71:00:d2:38:c7:ce:88:7e:c3:
82:2a:12:01:2d:9b:b1:8b:69:b2:97:3f:59:e2:d3:
08:2b:0a:a3:76:01:fb:3a:d5:08:1f:4e:c7:03:b0:
8a:31:00:34:ec:d8:ff:b5:48:88:3f:fd:92:07:16:
1c:5e:3d:1d:6e:e6:e3:a7:58:a6:1d:a2:af:24:4d:
ba:1d:7d:1b:a7:de:60:bf:a7:49:a9:86:0a:9b:ea:
6e:73:d1:55:df:83:0f:04:d6:88:a4:4c:1c:47:81:
69:f2:5b:17:20:fc:04:11:77:83:67:65:56:69:68:
5a:71:5e:4c:76:2d:df:ff:e7:0c:56:d0:df:e4:8c:
18:d1:f8:b8:8f:c0:7d:fb:c9:9d:97:49:50:18:32:
87:17:39:a5:97:51:17:c2:4e:64:c1:d8:aa:7b:30:
81:6b:c8:73:92:47:8a:86:36:c7:2b:33:94:c3:bc:
7a:28:8c:b3:ea:c8:54:9c:64:2b:5c:86:67:68:95:
3e:43:5d:5f:5a:b4:06:6a:ad:60:69:5b:13:8d:3d:
85:4a:37:55:26:a7:85:62:7f:cb:26:dd:f7:c0:b6:
a7:1f:f4:ed:4f:49:2e:64:3b:72:0a:b1:67:ee:7e:
ba:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0B:EC:5E:E0:BE:25:21:62:4A:92:4B:2B:09:DF:44:A9:1E:BD:4E
X509v3 Authority Key Identifier:
keyid:C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d7:1d:f4:8d:83:02:00:09:db:46:9d:d8:85:e7:56:3f:7c:
5b:a5:cc:16:f4:6d:cb:fb:69:da:69:14:67:84:6b:32:19:dc:
b7:2d:bd:17:e5:77:38:2f:b9:98:d0:e7:0e:f5:89:94:06:45:
8b:a9:aa:dc:99:a9:ff:51:67:c5:90:a8:f9:43:64:1d:fc:cf:
e5:2a:9e:62:35:f4:ba:41:aa:7f:05:37:8f:1d:6f:17:f1:26:
53:e2:f9:1d:71:4b:d0:33:b3:2d:b3:bc:c0:2b:42:45:76:3e:
7c:5e:54:58:9a:6d:85:9a:50:a1:fe:98:f5:9f:fc:84:b3:78:
f1:af:cf:01:7e:fe:3b:66:ef:a4:85:40:2f:ea:23:9c:3d:a7:
c8:ba:b4:d2:39:20:bb:da:36:18:51:38:85:55:5a:72:a0:1e:
fe:2d:dd:fa:90:b6:c6:5d:71:52:ad:d5:74:d1:f8:d2:a4:32:
bf:a2:de:89:2a:e1:55:60:2a:82:1b:d6:99:f9:0d:cf:7b:5d:
4a:21:36:99:a4:7d:42:42:b1:46:c5:d4:54:b0:0d:a3:7a:5f:
0e:68:8c:38:73:9c:09:24:69:8b:28:9f:de:e0:f7:09:f7:83:
e2:04:a1:26:e0:cb:67:30:02:a4:b5:b7:e9:df:d1:31:1e:38:
be:48:0a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:09 2026 by rpki-client