Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
File: M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft (raw, json)
Hash identifier: Y/FGK3KWWdUfEVVujYYoeFWsQiflqn0xrQV0hsN9xRM=
Subject key identifier: DD:9E:D3:5C:2A:35:CE:35:20:12:9B:AC:C8:BD:20:3B:B5:6E:E1:B3
Authority key identifier: 33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
Certificate issuer: /CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Certificate serial: 01A15DB12D705B4736BF25FF919DC1422C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
Manifest number: 1AB8
Signing time: Wed 21 Oct 2026 09:00:54 +0000
Manifest this update: Wed 21 Oct 2026 09:00:54 +0000
Manifest next update: Thu 22 Oct 2026 09:00:54 +0000
Files and hashes: 1: 0hykFI2nzIfKw5O60HOpHI0FUF8.roa (hash: 654t5jHQdvrRaEAnKER11GB5whwJk06cO3f07OUyXdo=)
2: M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl (hash: VkzIMW1PGaA5zF3cAePd+HfLhIcD5h3iEOd/RKek/lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:b1:2d:70:5b:47:36:bf:25:ff:91:9d:c1:42:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Validity
Not Before: Oct 21 09:00:54 2026 GMT
Not After : Oct 22 09:00:54 2026 GMT
Subject: CN=dd9ed35c2a35ce3520129bacc8bd203bb56ee1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:07:0e:3e:f4:a2:22:e9:22:32:b7:1a:32:8f:
ea:83:f3:a0:b5:38:8e:06:28:18:fa:c8:97:0e:ac:
95:89:53:e5:6c:c7:a0:6c:e9:70:9b:94:70:9c:84:
57:b2:a9:0a:ad:ae:cc:2e:5b:dc:dc:c0:62:33:d4:
73:4e:86:e7:d9:92:8e:d6:15:70:ca:2a:2f:70:47:
30:b7:85:42:09:d4:4e:fd:1b:f9:d4:10:98:b7:50:
49:17:f6:f4:fc:70:a0:d3:5b:5b:d8:50:5a:e1:20:
78:87:d0:c3:11:49:35:bf:c6:29:e0:a2:df:84:d1:
01:7a:b2:e2:99:0d:c6:5f:4c:8a:f6:c4:c9:62:aa:
6b:04:75:fb:6a:04:2f:c8:e3:5a:cc:57:54:71:68:
72:27:47:a4:90:a8:e9:07:d7:c1:73:62:10:34:ba:
48:af:bd:4e:31:69:ca:8a:65:71:e9:d2:62:f6:7d:
d5:a5:df:84:88:46:83:90:02:b5:c9:3f:94:ee:d6:
02:d9:ff:cf:8b:69:69:c6:92:35:7a:04:ec:b9:a3:
31:7d:29:5c:db:c4:f6:f7:85:a9:80:b2:62:3b:a7:
a7:f8:b4:1f:42:a6:27:d2:d6:a7:c2:0c:72:9f:56:
d1:20:6d:64:8b:9c:a6:d6:fa:24:82:82:33:98:b0:
28:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9E:D3:5C:2A:35:CE:35:20:12:9B:AC:C8:BD:20:3B:B5:6E:E1:B3
X509v3 Authority Key Identifier:
keyid:33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:69:64:fe:28:67:07:cc:fc:e8:36:03:e1:58:36:c9:6b:96:
e6:49:44:6a:5e:80:6e:70:2c:cf:c4:35:4e:c1:9c:7f:77:ef:
b7:15:41:61:e8:47:d8:2b:57:f4:21:d4:75:51:0b:df:93:54:
7d:25:22:3c:d2:85:b3:80:5e:87:39:43:31:3c:fd:29:e1:59:
2a:a8:3f:44:14:cc:49:cd:91:85:df:c1:67:3b:a8:76:29:2f:
3f:4d:f4:96:60:aa:95:f4:1d:45:91:0c:3a:f5:53:5b:a6:f5:
58:02:96:37:74:26:c6:c2:e9:8c:e7:6d:81:48:fc:9f:cf:6f:
3b:8c:8d:94:d4:72:b3:e2:5a:7c:a1:4e:d2:d4:75:99:bc:2f:
73:5a:7d:65:bb:b3:34:5b:3d:9f:bf:22:a7:f8:21:75:af:d2:
6b:d3:6f:f6:e1:63:29:c5:05:18:be:64:03:a4:13:8c:ad:ba:
28:14:51:b5:9f:6c:3a:50:a8:05:38:69:7a:cb:38:2b:79:78:
27:94:5d:e9:be:ee:4e:07:13:44:e8:47:8b:54:f7:5b:7f:87:
31:92:a1:48:15:d2:05:49:d8:fa:cd:a3:01:85:61:3a:5e:4b:
3c:b3:98:ec:ac:78:7c:31:b3:fe:b5:16:29:8c:12:ee:fd:c7:
03:1d:71:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 14:16:59 2026 by rpki-client