Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
File: WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft (raw, json)
Hash identifier: ztnhzcVaM/3GJQPqRReMXJ5S4/e2uIcv5ScX67PBHG4=
Subject key identifier: 8B:F4:C8:A5:F7:1A:F3:61:45:60:F8:93:0C:A2:7F:CF:BF:E3:A4:C8
Authority key identifier: 58:4D:44:AD:55:C2:62:D8:4E:FD:44:2D:C8:76:7B:04:13:E1:B1:62
Certificate issuer: /CN=584d44ad55c262d84efd442dc8767b0413e1b162
Certificate serial: 019DCFE3210F5A2A2EF63CE0305B6EED53B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
Manifest number: 0501
Signing time: Mon 27 Apr 2026 17:01:01 +0000
Manifest this update: Mon 27 Apr 2026 17:01:01 +0000
Manifest next update: Tue 28 Apr 2026 17:01:01 +0000
Files and hashes: 1: WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl (hash: f5hnWyP8UoKr8HckTyub3STonAAMITIg41bDCj6xSys=)
2: rm6gBchORJ-jpmu9RaApbnzR-8w.roa (hash: lte7WLkbI36lJ+4fiNF1yu19eeqodaTXa0g3tAj6qk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:21:0f:5a:2a:2e:f6:3c:e0:30:5b:6e:ed:53:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=584d44ad55c262d84efd442dc8767b0413e1b162
Validity
Not Before: Apr 27 17:01:01 2026 GMT
Not After : Apr 28 17:01:01 2026 GMT
Subject: CN=8bf4c8a5f71af3614560f8930ca27fcfbfe3a4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:27:57:39:2a:5b:73:3c:3b:db:d8:70:d3:
28:44:19:be:61:bc:f7:55:19:2a:d7:fa:e0:99:88:
62:17:64:b6:f5:75:d1:78:fe:2b:88:f3:93:ef:57:
bf:06:8f:a1:0b:6c:ec:7b:1c:15:c8:50:69:40:72:
d7:1b:8a:c0:30:bc:3e:7b:0b:27:1e:5d:8a:e9:fa:
5f:0b:00:38:75:f4:79:e0:18:71:d4:1c:bb:f9:8a:
c5:cd:c6:5c:b9:8e:16:38:e1:87:99:f4:b5:8d:90:
ec:2a:b7:f3:6a:9d:62:97:54:dd:b8:65:44:27:e3:
f8:a1:eb:f3:3c:2a:bb:7c:69:10:62:00:14:48:ba:
a2:49:66:41:18:f8:dd:d2:29:9f:43:97:c7:3f:72:
9a:7d:1c:3a:8b:7e:cb:f6:11:d5:e7:1c:a4:8f:0c:
f1:3b:30:00:e7:f1:a8:cf:3b:ad:0a:49:00:f8:31:
69:a9:f3:3e:ec:fb:e8:e8:d9:cc:f6:0e:a5:4a:5b:
a1:b1:4a:ea:5e:6f:a3:25:35:10:14:5f:19:d7:63:
cd:a1:96:ea:84:87:71:cb:18:0b:02:f4:5f:2d:af:
e1:64:30:0e:94:7d:64:09:99:38:e6:f3:ce:b7:8b:
8d:b5:b4:10:fe:15:d6:b9:77:a2:59:b3:94:3e:8d:
6a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F4:C8:A5:F7:1A:F3:61:45:60:F8:93:0C:A2:7F:CF:BF:E3:A4:C8
X509v3 Authority Key Identifier:
keyid:58:4D:44:AD:55:C2:62:D8:4E:FD:44:2D:C8:76:7B:04:13:E1:B1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ce:1a:13:87:a3:b3:57:58:63:10:0a:5d:a5:a5:27:cb:86:
81:19:32:05:0a:8a:15:09:c6:9b:50:46:4e:cc:9d:f4:35:d7:
38:6d:5d:49:a1:d2:e9:9f:cf:8c:1f:6d:59:e8:6f:27:dd:70:
85:cf:1a:ff:01:96:5b:d7:28:ad:c4:e4:5d:4d:34:dd:93:6c:
a0:95:23:d1:35:a4:11:fa:03:4a:45:f6:10:0a:d1:76:eb:09:
cb:c3:55:71:c7:c4:32:1c:04:f6:00:3a:10:65:9e:40:5a:82:
17:50:4d:c7:4b:d8:d3:d5:f3:7a:cc:84:0c:16:82:18:23:d1:
ef:7d:b3:62:f3:d1:d0:ba:f1:68:30:f1:0b:a2:fd:2a:7c:63:
ec:9d:f6:2e:40:d9:33:8d:50:be:fb:d4:77:78:08:8d:74:a4:
4d:e7:86:5d:fa:42:d5:d1:07:1c:20:10:66:7e:d0:98:0b:6c:
a6:93:23:9b:24:c9:7a:5f:f7:09:0a:a9:1f:a1:e8:38:4b:bb:
78:e3:21:c7:71:8c:22:32:eb:05:bb:2f:7d:ff:24:e1:21:13:
d1:06:b7:8c:cd:ac:d6:b7:e1:c8:94:ab:99:3a:8f:ca:4c:3d:
16:7b:b6:19:32:69:f0:77:84:45:c6:94:a2:80:b8:6d:72:f3:
1e:de:c2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:29:18 2026 by rpki-client