Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
File: weQCeuBg1zewpjVowez5sfsZ6yg.mft (raw, json)
Hash identifier: jo25O0t4guA8c+7HQu9/uQMwZFDJjVN3iJyGt9LKeo8=
Subject key identifier: 24:12:EB:A5:74:4A:56:08:A9:74:53:05:D1:74:7D:22:3A:34:6C:26
Authority key identifier: C1:E4:02:7A:E0:60:D7:37:B0:A6:35:68:C1:EC:F9:B1:FB:19:EB:28
Certificate issuer: /CN=c1e4027ae060d737b0a63568c1ecf9b1fb19eb28
Certificate serial: 01A0BF1E906054254C0D0EE0AF18EE1BCB77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weQCeuBg1zewpjVowez5sfsZ6yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
Manifest number: 01A9
Signing time: Sun 20 Sep 2026 14:00:46 +0000
Manifest this update: Sun 20 Sep 2026 14:00:46 +0000
Manifest next update: Mon 21 Sep 2026 14:00:46 +0000
Files and hashes: 1: haZE82qyvwkubicw8jZzK_nrWDg.roa (hash: Idp2fSofKC2T4SKeZni0D1Lp8tt7purU0xOSY8SYiLQ=)
2: kXkxGFHeY_rO_dE44fGA4-5ivi8.asa (hash: Q67lhcVwdmIACBqhtRCGyCyqmS0Y6rcNKM6JD9PVHUM=)
3: weQCeuBg1zewpjVowez5sfsZ6yg.crl (hash: b97/aZwmC70jKF8Ivu2ldWVCy7jU4bbzdn0gx6Om7N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/weQCeuBg1zewpjVowez5sfsZ6yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:1e:90:60:54:25:4c:0d:0e:e0:af:18:ee:1b:cb:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e4027ae060d737b0a63568c1ecf9b1fb19eb28
Validity
Not Before: Sep 20 14:00:46 2026 GMT
Not After : Sep 21 14:00:46 2026 GMT
Subject: CN=2412eba5744a5608a9745305d1747d223a346c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:33:eb:be:6c:d6:ee:34:d9:06:20:15:7e:
4a:07:2f:b1:ee:59:20:1f:a9:e5:ed:5a:64:02:b0:
7a:58:ef:ca:74:82:a9:58:17:44:56:6b:fb:95:17:
00:90:a2:1f:87:7e:4e:13:14:20:e8:31:66:09:19:
98:a8:9d:19:c6:35:0b:33:f4:de:44:a9:8d:e3:43:
5c:62:6f:5a:4a:e7:c1:76:15:60:3a:1b:a4:9d:4d:
ed:d7:ab:17:c5:9c:d3:e2:da:13:10:67:68:96:89:
ee:c0:6a:cf:a0:d4:fa:7a:b9:5d:24:17:06:59:df:
95:0c:8b:02:39:be:4f:19:04:f8:d2:2e:52:9e:9b:
61:f4:1d:fc:cf:83:1c:a8:49:7c:74:2d:59:fb:a6:
55:2a:79:52:e3:a9:b4:43:53:41:31:2e:f3:47:e7:
1e:36:39:59:f8:e2:4d:1a:66:5d:e7:29:da:c9:60:
94:09:d3:92:48:e1:25:6d:49:89:43:5e:00:10:de:
18:ec:29:43:7a:ba:e8:ea:f5:79:43:70:ae:12:2a:
b2:13:c3:c3:35:27:f5:67:da:da:53:10:8f:f5:d7:
8c:e9:23:b6:bb:b9:79:70:42:80:ef:cd:b1:aa:63:
de:aa:2c:d7:b2:3e:48:5b:37:98:95:f9:46:4d:2a:
1c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:12:EB:A5:74:4A:56:08:A9:74:53:05:D1:74:7D:22:3A:34:6C:26
X509v3 Authority Key Identifier:
keyid:C1:E4:02:7A:E0:60:D7:37:B0:A6:35:68:C1:EC:F9:B1:FB:19:EB:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weQCeuBg1zewpjVowez5sfsZ6yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a8:f5:a8:69:c9:92:c3:5d:3b:b6:0d:ac:d9:aa:83:6a:ff:
48:ed:a9:22:ef:3b:b6:a0:80:56:1e:5c:95:35:f9:30:54:50:
fa:c4:07:51:1b:18:2a:9e:b4:54:b3:f6:53:07:63:6d:d8:4b:
7f:86:46:02:1c:b6:01:d3:a1:33:be:7b:90:3a:65:ee:7e:ea:
c0:fa:06:41:cb:ac:80:49:23:61:4b:9c:49:65:cf:76:b9:aa:
0b:d9:95:b9:78:be:6b:66:4a:63:91:dd:b8:ed:ab:e8:ad:00:
37:c4:cc:da:d6:78:25:7c:06:e0:53:e8:08:24:fc:d1:3f:ce:
ce:9f:fb:a8:79:4f:33:32:56:a2:78:ac:23:aa:13:3d:f5:8e:
99:d5:e9:11:cf:d4:52:0e:90:95:15:42:54:e0:8c:63:79:94:
35:ba:96:fc:0c:62:48:e6:67:b7:af:41:87:f5:ce:7a:11:bd:
51:d2:14:1a:e9:ca:12:ac:cb:f7:dd:2a:e3:a5:5f:72:4b:69:
40:62:81:cd:ef:56:27:1f:cb:6e:b0:47:6b:15:bf:3b:ee:36:
51:67:95:a2:18:ba:88:9e:ef:ef:3c:ef:e5:cc:4d:c5:c6:66:
16:01:55:02:12:03:b9:13:0f:d0:6c:d3:c6:da:76:f2:5a:3c:
3d:51:c9:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC/HpBgVCVMDQ7grxjuG8t3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZTQwMjdhZTA2MGQ3MzdiMGE2MzU2OGMxZWNmOWIxZmIx
OWViMjgwHhcNMjYwOTIwMTQwMDQ2WhcNMjYwOTIxMTQwMDQ2WjAzMTEwLwYDVQQD
EygyNDEyZWJhNTc0NGE1NjA4YTk3NDUzMDVkMTc0N2QyMjNhMzQ2YzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7Iz675s1u402QYgFX5KBy+x7lkg
H6nl7VpkArB6WO/KdIKpWBdEVmv7lRcAkKIfh35OExQg6DFmCRmYqJ0ZxjULM/Te
RKmN40NcYm9aSufBdhVgOhuknU3t16sXxZzT4toTEGdolonuwGrPoNT6erldJBcG
Wd+VDIsCOb5PGQT40i5Snpth9B38z4McqEl8dC1Z+6ZVKnlS46m0Q1NBMS7zR+ce
NjlZ+OJNGmZd5ynayWCUCdOSSOElbUmJQ14AEN4Y7ClDerro6vV5Q3CuEiqyE8PD
NSf1Z9raUxCP9deM6SO2u7l5cEKA782xqmPeqizXsj5IWzeYlflGTSocTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQS66V0SlYIqXRTBdF0fSI6NGwmMB8GA1UdIwQY
MBaAFMHkAnrgYNc3sKY1aMHs+bH7GesoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2VRQ2V1QmcxemV3cGpWb3dlejVzZnNaNnlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8wM2Y0ODctMGNjZC00ZjM5LWFlZGEt
ZmZmNWZlYWEzYjY0LzEvd2VRQ2V1QmcxemV3cGpWb3dlejVzZnNaNnlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8wM2Y0ODctMGNjZC00ZjM5LWFlZGEtZmZmNWZlYWEzYjY0
LzEvd2VRQ2V1QmcxemV3cGpWb3dlejVzZnNaNnlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqj1qGnJ
ksNdO7YNrNmqg2r/SO2pIu87tqCAVh5clTX5MFRQ+sQHURsYKp60VLP2UwdjbdhL
f4ZGAhy2AdOhM757kDpl7n7qwPoGQcusgEkjYUucSWXPdrmqC9mVuXi+a2ZKY5Hd
uO2r6K0AN8TM2tZ4JXwG4FPoCCT80T/Ozp/7qHlPMzJWonisI6oTPfWOmdXpEc/U
Ug6QlRVCVOCMY3mUNbqW/AxiSOZnt69Bh/XOehG9UdIUGunKEqzL990q46Vfcktp
QGKBze9WJx/LbrBHaxW/O+42UWeVohi6iJ7v7zzv5cxNxcZmFgFVAhIDuRMP0GzT
xtp28lo8PVHJ+g==
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:14:54 2026 by rpki-client