
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
File: we6wu7y21HqENM9BEVHy4kh4CBU.mft (raw, json)
Hash identifier: AjaJfftoNDGt3HvianAqL2Z4Kpj0JPRL+snqvkm35Pk=
Subject key identifier: FA:37:23:81:2A:27:B9:F5:42:B3:D9:52:37:1A:AA:0B:17:1F:01:27
Authority key identifier: C1:EE:B0:BB:BC:B6:D4:7A:84:34:CF:41:11:51:F2:E2:48:78:08:15
Certificate issuer: /CN=c1eeb0bbbcb6d47a8434cf411151f2e248780815
Certificate serial: 01A140828DBEEDD515C04E76E2E29F870FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
Manifest number: 0686
Signing time: Thu 15 Oct 2026 17:01:00 +0000
Manifest this update: Thu 15 Oct 2026 17:01:00 +0000
Manifest next update: Fri 16 Oct 2026 17:01:00 +0000
Files and hashes: 1: nIGAZPIZq75kgcrqj-kuogdN73s.roa (hash: GHrH41oLr6pmMoS8h9CBSc1ZDtrVCueBn8VEhwJj8mA=)
2: we6wu7y21HqENM9BEVHy4kh4CBU.crl (hash: kqMEXElCj3lZdTF35MrE+OzuRm1VZPOitq1Nb7PCjMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:82:8d:be:ed:d5:15:c0:4e:76:e2:e2:9f:87:0f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eeb0bbbcb6d47a8434cf411151f2e248780815
Validity
Not Before: Oct 15 17:01:00 2026 GMT
Not After : Oct 16 17:01:00 2026 GMT
Subject: CN=fa3723812a27b9f542b3d952371aaa0b171f0127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:d6:22:a9:b7:d8:d4:f7:4a:87:46:d0:62:
be:cb:70:f1:e7:b9:03:ee:50:bd:46:3f:d0:7f:9c:
0e:48:dd:3b:f3:45:9f:fe:45:a8:7d:ef:95:12:b8:
7a:0a:97:01:fd:5f:b4:bc:d0:8f:ec:6e:da:9b:55:
a3:b7:ee:25:d8:6b:70:f3:76:fa:3b:15:34:04:12:
8e:d7:7b:43:3b:56:c3:db:a3:08:d7:e5:84:11:ff:
33:71:b0:48:ba:37:9c:09:64:d5:d0:8d:bf:c2:e3:
b2:d5:1c:eb:9d:1a:29:01:48:e4:55:3b:67:61:65:
f4:0b:46:fa:dc:1e:ab:21:b9:50:4c:af:05:c7:e8:
fb:28:1a:82:04:36:a6:25:75:5e:d1:a1:2e:f3:e0:
db:6e:55:a1:1a:c1:4b:fb:42:05:fe:97:d7:83:fe:
b5:47:96:8b:4f:b6:38:40:e4:7b:33:00:c9:75:ae:
e1:f6:67:9f:4d:48:96:1b:60:ab:b3:8d:cd:89:d2:
5e:41:14:b1:66:54:0b:8d:af:94:29:ff:a2:61:0c:
e2:f0:2f:4d:6a:57:00:37:fc:b6:de:4b:dd:76:0a:
c0:0e:cc:d1:7d:ba:47:1f:e0:95:1d:59:e1:c7:80:
d6:99:3e:ab:67:62:40:19:58:e4:5e:7f:9c:60:ae:
d9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:37:23:81:2A:27:B9:F5:42:B3:D9:52:37:1A:AA:0B:17:1F:01:27
X509v3 Authority Key Identifier:
keyid:C1:EE:B0:BB:BC:B6:D4:7A:84:34:CF:41:11:51:F2:E2:48:78:08:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5a:d5:54:cc:75:c4:f9:8a:88:7b:e4:40:78:9a:36:4c:d9:
ac:e0:2f:61:bb:a7:ee:aa:6f:93:a3:7b:e3:4d:72:9d:e2:88:
29:ac:c2:6e:25:f0:fe:f0:1f:61:30:66:05:99:34:81:64:18:
c3:a1:f7:5d:d7:86:2b:69:a9:02:32:e7:b2:8b:62:fe:e7:0d:
93:81:dd:06:7a:f6:c1:e6:c4:e2:d0:0d:45:05:bd:4f:f4:58:
d2:bd:f5:36:55:59:a0:70:f7:33:6f:b7:ae:00:87:02:85:6e:
87:7b:76:ca:ce:56:1d:cb:dc:d5:4d:f9:e9:c6:1b:b9:15:9e:
6d:fb:b4:cb:12:d2:c5:54:bb:d9:50:34:83:5d:a1:c7:0d:29:
06:cb:b9:2e:48:43:d2:cb:c2:6d:8f:39:8a:9f:d2:79:1c:d7:
58:5d:8b:e6:f7:c8:c7:c3:22:f9:19:f7:3f:99:64:68:71:bf:
c0:47:fe:ae:52:20:37:a0:dc:a0:50:cd:b8:9c:bc:93:7b:e5:
a7:0e:4e:60:f4:1d:f8:0e:1c:49:7b:b7:6c:2c:63:d3:47:80:
a3:57:c5:4c:fd:7a:1e:ec:a5:7a:2e:5e:c5:96:f2:d5:f0:c4:
08:e1:b3:e6:4a:98:1a:14:15:06:c8:e8:6b:a6:b4:05:15:0a:
9d:81:b3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:53:47 2026 by rpki-client