Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
File: weQCeuBg1zewpjVowez5sfsZ6yg.mft (raw, json)
Hash identifier: +oFl88WC1dWAKEvr9uwBT2RXp0wdwBRta5hfUpKZQeQ=
Subject key identifier: 66:67:96:9E:8B:99:1A:8D:0A:A0:D3:36:0D:FD:23:A0:7A:67:08:8E
Authority key identifier: C1:E4:02:7A:E0:60:D7:37:B0:A6:35:68:C1:EC:F9:B1:FB:19:EB:28
Certificate issuer: /CN=c1e4027ae060d737b0a63568c1ecf9b1fb19eb28
Certificate serial: 019DA566F4455B8564C0060EF3B5465F1884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weQCeuBg1zewpjVowez5sfsZ6yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
Manifest number: 0E
Signing time: Sun 19 Apr 2026 11:01:20 +0000
Manifest this update: Sun 19 Apr 2026 11:01:20 +0000
Manifest next update: Mon 20 Apr 2026 11:01:20 +0000
Files and hashes: 1: haZE82qyvwkubicw8jZzK_nrWDg.roa (hash: Idp2fSofKC2T4SKeZni0D1Lp8tt7purU0xOSY8SYiLQ=)
2: kXkxGFHeY_rO_dE44fGA4-5ivi8.asa (hash: Q67lhcVwdmIACBqhtRCGyCyqmS0Y6rcNKM6JD9PVHUM=)
3: weQCeuBg1zewpjVowez5sfsZ6yg.crl (hash: aIqNKAW0Lq1cHmwY3o17hA9waFSfJJSuFlCmGmrx7UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/weQCeuBg1zewpjVowez5sfsZ6yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:f4:45:5b:85:64:c0:06:0e:f3:b5:46:5f:18:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e4027ae060d737b0a63568c1ecf9b1fb19eb28
Validity
Not Before: Apr 19 11:01:20 2026 GMT
Not After : Apr 20 11:01:20 2026 GMT
Subject: CN=6667969e8b991a8d0aa0d3360dfd23a07a67088e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:81:db:6f:10:7f:1c:77:26:46:86:a6:b6:75:
7b:de:95:1f:02:a3:79:14:09:59:a0:0f:dc:03:3d:
3a:9b:2d:e9:ce:53:a4:a6:72:e3:d7:3a:5e:60:e7:
f8:e7:23:ab:66:fa:90:7a:09:e5:1b:1a:41:e7:09:
b1:fe:31:7e:56:8b:69:2d:23:7b:10:5e:81:47:3d:
5f:97:ae:c5:ac:3c:6b:7a:92:cf:8b:1f:0b:99:12:
04:21:79:46:63:c2:a7:60:23:6e:0f:cc:94:c5:b1:
62:f6:2a:05:a7:a7:1a:81:c1:b6:b0:b3:f7:31:7e:
79:44:0c:08:86:00:db:5d:bd:92:01:b1:94:fc:b7:
8a:0b:f6:d3:ae:54:e1:2d:85:c5:b7:74:90:42:ec:
6f:23:05:7b:fb:34:13:b0:20:f2:0a:1d:ac:f4:5e:
b9:1c:46:5e:86:0d:6e:65:08:22:8f:da:80:e7:0c:
6c:25:c9:3b:d1:98:05:cb:87:ff:96:ce:5e:44:91:
9b:60:ba:f7:9b:84:51:a5:a4:f5:c9:25:11:4c:76:
00:b5:09:82:e3:5c:36:40:23:44:98:29:a1:6e:66:
20:71:3e:87:b3:de:fd:ef:f1:e3:06:65:f5:df:97:
54:09:39:ea:bb:ac:32:4b:06:9c:4d:11:5d:03:63:
04:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:67:96:9E:8B:99:1A:8D:0A:A0:D3:36:0D:FD:23:A0:7A:67:08:8E
X509v3 Authority Key Identifier:
keyid:C1:E4:02:7A:E0:60:D7:37:B0:A6:35:68:C1:EC:F9:B1:FB:19:EB:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weQCeuBg1zewpjVowez5sfsZ6yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7c:fa:38:30:18:eb:72:ad:14:ff:70:9e:c2:1a:71:ca:9c:
d7:7e:33:02:4b:b6:ed:5c:18:65:7c:c4:2f:47:98:40:68:68:
d1:19:56:0c:52:f5:bf:8d:5e:50:b7:86:2c:6b:5f:43:15:00:
7a:f5:1b:8c:3f:4f:ff:ce:fc:83:71:2f:63:22:f9:a3:1b:d5:
6e:0b:eb:5e:30:95:1d:07:10:31:f6:3f:85:fb:e8:32:fb:d4:
6b:4a:5f:d3:75:84:db:8c:f5:a8:ab:61:c0:69:df:e4:78:72:
4a:c2:b2:4d:22:91:68:22:c0:41:66:89:09:d2:04:b1:b3:bd:
e8:2d:49:07:10:4c:5b:d0:98:45:20:e3:41:2b:17:23:35:50:
de:97:4f:59:e4:f1:d6:95:b7:e3:b2:e2:7b:d9:b8:b0:66:ab:
cf:24:2e:97:2d:5b:dd:94:76:cb:82:35:1f:ae:e8:e5:92:ac:
15:6c:b0:94:91:78:9d:75:4d:a8:ca:5d:8d:98:e0:88:07:42:
19:ae:1f:8a:ca:bd:90:ce:7a:7e:d7:81:22:3f:1b:f7:c3:3a:
3c:bf:cf:95:fd:bd:3f:48:21:3b:6d:19:28:05:90:88:28:8f:
f5:b7:fe:0d:c5:5d:58:c2:e9:4e:16:26:25:55:54:d3:43:eb:
3b:6e:26:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:40:33 2026 by rpki-client