Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
File: we5gO3itcrp4VWgsorgGrA5-mP0.mft (raw, json)
Hash identifier: RsoU0ILpn5iLdVYFeJ5Lsaj787jpBqsKLHWoVw2cXvA=
Subject key identifier: E5:A6:9F:17:1D:CE:B6:3A:43:A4:00:12:60:3E:FE:87:72:95:23:93
Authority key identifier: C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD
Certificate issuer: /CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
Certificate serial: 019D38D37957C8AB3B4AE5AB645363FEE538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:01:16 +0000
Manifest this update: Sun 29 Mar 2026 09:01:16 +0000
Manifest next update: Mon 30 Mar 2026 09:01:16 +0000
Files and hashes: 1: WhlF3-97zeKA9zwTPV4rysNOYtc.roa (hash: PZrfxCb0Q8TjoglsmZhLZgPlBsJLljiY6Rncu+AWpPI=)
2: we5gO3itcrp4VWgsorgGrA5-mP0.crl (hash: 38EVr5iWHdH8ncMEceq4Skl6z5xHt6mhcpxFMQdUWFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:79:57:c8:ab:3b:4a:e5:ab:64:53:63:fe:e5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
Validity
Not Before: Mar 29 09:01:16 2026 GMT
Not After : Mar 30 09:01:16 2026 GMT
Subject: CN=e5a69f171dceb63a43a40012603efe8772952393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:da:3b:2d:24:ca:dd:f9:70:64:96:08:20:
d8:b3:96:b3:1a:c0:23:c3:3f:4e:d6:22:3f:80:7b:
58:fe:25:d0:f5:a8:c5:01:f5:b6:20:f2:a7:d0:62:
b8:fe:41:00:90:7d:84:28:55:b4:26:8a:46:24:1b:
84:29:52:68:c1:b8:d8:96:ed:78:d2:1f:4c:98:d3:
33:7c:be:33:43:8f:f2:ec:dd:86:f0:b7:f9:ac:41:
e8:d5:12:c4:4e:60:70:65:de:8e:2b:c4:fc:92:9a:
37:4f:f2:b7:a9:e2:4e:da:11:2d:c7:2f:4f:84:53:
16:f7:8d:2a:2d:3e:16:fe:72:f9:1a:0a:6b:09:79:
e1:0c:37:09:96:4f:cb:d9:3d:92:0c:d5:aa:b4:08:
42:0d:ce:f1:d8:42:ed:f2:9d:c9:bc:ac:32:d8:b2:
c7:11:e8:fe:6a:58:b3:d1:a2:18:7b:73:95:8c:19:
c6:ce:e0:8a:7f:ba:a6:36:58:9e:22:5f:49:58:be:
92:d3:27:7f:3d:50:77:05:06:00:50:2b:2a:c8:96:
24:7f:55:55:93:19:de:ad:f0:07:cb:c8:62:ac:00:
41:f9:95:32:08:c3:8f:2e:97:4f:da:da:d8:23:6b:
0b:b7:66:ff:b5:e5:60:38:e2:db:01:25:bc:f5:a2:
1a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A6:9F:17:1D:CE:B6:3A:43:A4:00:12:60:3E:FE:87:72:95:23:93
X509v3 Authority Key Identifier:
keyid:C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:3c:a2:bf:d4:e9:ff:bf:71:59:44:97:46:9f:df:db:b6:1b:
f5:74:2c:19:e5:e2:be:2b:2e:bf:d9:21:2a:4e:d9:94:bb:1f:
1b:07:5b:74:d0:a4:03:ff:e3:5c:a4:6c:87:a1:e2:3f:20:91:
7c:86:e4:42:ec:df:e3:f0:1a:ec:c5:8b:23:c9:9e:d9:20:10:
82:b4:08:9a:a6:17:2f:ab:31:a2:23:5f:ad:37:ea:b6:6b:45:
2f:b7:a7:52:91:98:7b:4a:15:10:4a:62:97:16:33:8a:68:78:
29:a8:cc:00:ed:86:86:6d:f6:13:cc:16:37:2f:1e:3e:8a:c1:
ca:0a:a2:bc:bf:7d:9d:ec:6d:88:62:39:e4:66:45:e6:2e:1e:
d7:54:ff:8b:c7:70:46:b7:48:d5:e7:bf:ab:57:97:86:b7:15:
c6:eb:15:24:52:d4:21:4e:ed:ab:8c:a3:ec:90:b7:1b:40:20:
64:82:d0:b1:f3:b5:06:65:36:6e:27:fc:ed:80:28:ba:2a:c3:
41:dc:74:10:bb:e6:b4:54:99:9d:13:75:f4:1e:44:c3:b6:b2:
3b:99:e2:82:f4:76:aa:c6:92:7c:17:13:b9:0f:ad:fa:af:72:
1a:ac:fd:34:fb:f2:25:23:a3:e5:de:d6:40:57:63:26:fa:f4:
c0:79:fa:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:37 2026 by rpki-client