Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
File: weQCeuBg1zewpjVowez5sfsZ6yg.mft (raw, json)
Hash identifier: 6JWLe8AJY3qNRo/80se6SGIEchA/5QqNyk9r2hXwVgg=
Subject key identifier: CE:6C:D3:02:5A:89:34:AB:43:9F:CF:3E:C0:09:F1:8C:3A:90:81:98
Authority key identifier: C1:E4:02:7A:E0:60:D7:37:B0:A6:35:68:C1:EC:F9:B1:FB:19:EB:28
Certificate issuer: /CN=c1e4027ae060d737b0a63568c1ecf9b1fb19eb28
Certificate serial: 019FA906C0A54673ADB14B4F4865309CA30A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weQCeuBg1zewpjVowez5sfsZ6yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
Manifest number: 0119
Signing time: Tue 28 Jul 2026 14:00:19 +0000
Manifest this update: Tue 28 Jul 2026 14:00:19 +0000
Manifest next update: Wed 29 Jul 2026 14:00:19 +0000
Files and hashes: 1: haZE82qyvwkubicw8jZzK_nrWDg.roa (hash: Idp2fSofKC2T4SKeZni0D1Lp8tt7purU0xOSY8SYiLQ=)
2: kXkxGFHeY_rO_dE44fGA4-5ivi8.asa (hash: Q67lhcVwdmIACBqhtRCGyCyqmS0Y6rcNKM6JD9PVHUM=)
3: weQCeuBg1zewpjVowez5sfsZ6yg.crl (hash: bTinvT/56BZiPmfuoQYlHB6XcIwH5JpZl0YtAW79th4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/weQCeuBg1zewpjVowez5sfsZ6yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:c0:a5:46:73:ad:b1:4b:4f:48:65:30:9c:a3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e4027ae060d737b0a63568c1ecf9b1fb19eb28
Validity
Not Before: Jul 28 14:00:19 2026 GMT
Not After : Jul 29 14:00:19 2026 GMT
Subject: CN=ce6cd3025a8934ab439fcf3ec009f18c3a908198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:46:eb:e3:66:90:f8:2c:b7:fa:88:6a:e5:
aa:1f:52:97:9a:b0:a2:ff:a8:61:60:9e:c9:6d:86:
de:6f:f5:59:de:86:aa:9c:11:78:46:12:9a:c3:5d:
16:9a:2c:7e:6b:aa:22:a7:e9:07:4b:04:76:47:e2:
8f:6d:b5:45:83:17:75:eb:6d:2c:c3:09:e5:c8:5c:
ea:47:af:b6:9d:12:9b:85:58:d3:44:58:05:83:ec:
d5:ea:63:bf:37:8b:4f:d4:94:5a:fe:f8:fa:c4:ff:
1f:3c:55:fc:c9:9c:61:e7:0f:33:b3:ee:50:6e:4a:
1c:ed:b1:76:7a:5c:08:31:66:c2:c6:55:6a:e7:c9:
1a:02:b4:10:1c:2b:6a:ca:6c:b0:a2:d8:55:c5:83:
c1:31:fb:b3:af:c5:d5:80:db:81:e0:e1:cf:c0:6e:
a6:db:63:92:ee:90:6b:cd:de:74:4d:d9:44:47:93:
79:35:56:e5:4c:ce:bb:be:9c:ad:66:92:82:fe:f3:
24:5a:e1:b9:70:f3:4e:16:fa:cf:72:af:0d:73:ec:
01:8d:63:28:56:37:65:f6:c7:54:ac:17:74:77:40:
a9:46:43:a9:d1:00:77:69:1d:dc:65:56:be:a9:d6:
46:fb:2a:cf:8e:94:e5:c6:cc:87:0f:27:26:f8:07:
ac:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6C:D3:02:5A:89:34:AB:43:9F:CF:3E:C0:09:F1:8C:3A:90:81:98
X509v3 Authority Key Identifier:
keyid:C1:E4:02:7A:E0:60:D7:37:B0:A6:35:68:C1:EC:F9:B1:FB:19:EB:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weQCeuBg1zewpjVowez5sfsZ6yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:41:99:07:5d:21:58:31:87:4f:fe:9e:6e:81:4b:c9:3e:f7:
5a:5b:06:54:7a:d4:23:05:17:d3:36:63:55:fd:29:36:a6:11:
43:a6:6a:0a:f4:d9:00:34:4f:76:06:93:03:c1:cc:96:21:8c:
1f:81:f4:65:bc:0c:2a:13:8a:27:5c:75:48:d2:93:9f:b8:00:
ed:59:07:98:d0:2c:70:e8:89:37:36:6e:1d:df:66:65:9a:25:
bd:83:83:13:57:7e:cf:b5:b3:82:87:bb:72:92:b1:2b:04:a4:
b2:a3:aa:d5:f0:00:22:8e:99:96:f3:4a:5d:2c:95:8b:bf:e5:
ff:57:34:35:5a:12:34:9f:ab:2b:7a:37:94:17:13:d6:76:d9:
4f:83:05:bb:ce:a8:6c:2a:8c:14:ad:c8:06:d1:61:94:a1:04:
63:a5:2d:9e:11:96:60:3f:bb:3c:d5:b6:e2:3d:8e:a1:17:e4:
0f:13:f9:72:d4:d9:f3:37:17:a9:9c:d8:09:09:45:af:d1:db:
ad:77:78:ab:ff:90:e2:94:f0:5a:4d:8a:59:c4:92:1d:ed:f6:
8f:c1:58:f2:18:f6:3e:fe:ea:6c:da:e6:e5:35:fa:7b:e8:7c:
e2:38:1b:d4:08:81:db:c7:18:3d:65:f6:ae:36:c8:87:8b:66:
54:07:d8:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pBsClRnOtsUtPSGUwnKMKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZTQwMjdhZTA2MGQ3MzdiMGE2MzU2OGMxZWNmOWIxZmIx
OWViMjgwHhcNMjYwNzI4MTQwMDE5WhcNMjYwNzI5MTQwMDE5WjAzMTEwLwYDVQQD
EyhjZTZjZDMwMjVhODkzNGFiNDM5ZmNmM2VjMDA5ZjE4YzNhOTA4MTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW9G6+NmkPgst/qIauWqH1KXmrCi
/6hhYJ7JbYbeb/VZ3oaqnBF4RhKaw10Wmix+a6oip+kHSwR2R+KPbbVFgxd1620s
wwnlyFzqR6+2nRKbhVjTRFgFg+zV6mO/N4tP1JRa/vj6xP8fPFX8yZxh5w8zs+5Q
bkoc7bF2elwIMWbCxlVq58kaArQQHCtqymywothVxYPBMfuzr8XVgNuB4OHPwG6m
22OS7pBrzd50TdlER5N5NVblTM67vpytZpKC/vMkWuG5cPNOFvrPcq8Nc+wBjWMo
Vjdl9sdUrBd0d0CpRkOp0QB3aR3cZVa+qdZG+yrPjpTlxsyHDycm+AesjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5s0wJaiTSrQ5/PPsAJ8Yw6kIGYMB8GA1UdIwQY
MBaAFMHkAnrgYNc3sKY1aMHs+bH7GesoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2VRQ2V1QmcxemV3cGpWb3dlejVzZnNaNnlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8wM2Y0ODctMGNjZC00ZjM5LWFlZGEt
ZmZmNWZlYWEzYjY0LzEvd2VRQ2V1QmcxemV3cGpWb3dlejVzZnNaNnlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8wM2Y0ODctMGNjZC00ZjM5LWFlZGEtZmZmNWZlYWEzYjY0
LzEvd2VRQ2V1QmcxemV3cGpWb3dlejVzZnNaNnlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL0GZB10h
WDGHT/6eboFLyT73WlsGVHrUIwUX0zZjVf0pNqYRQ6ZqCvTZADRPdgaTA8HMliGM
H4H0ZbwMKhOKJ1x1SNKTn7gA7VkHmNAscOiJNzZuHd9mZZolvYODE1d+z7Wzgoe7
cpKxKwSksqOq1fAAIo6ZlvNKXSyVi7/l/1c0NVoSNJ+rK3o3lBcT1nbZT4MFu86o
bCqMFK3IBtFhlKEEY6UtnhGWYD+7PNW24j2OoRfkDxP5ctTZ8zcXqZzYCQlFr9Hb
rXd4q/+Q4pTwWk2KWcSSHe32j8FY8hj2Pv7qbNrm5TX6e+h84jgb1AiB28cYPWX2
rjbIh4tmVAfYkg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:12:03 2026 by rpki-client