Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
File: M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft (raw, json)
Hash identifier: T/ycKo/MmE4hbarA7UhlgncuuLzqUAE2cJZ5GuiNekE=
Subject key identifier: 8E:F3:1D:4B:6E:CD:33:C2:8B:E8:26:75:4F:A2:76:75:63:9E:F2:2F
Authority key identifier: 33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
Certificate issuer: /CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Certificate serial: 019F867B2F0737F439A7A67428700CEF2E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
Manifest number: 19C4
Signing time: Tue 21 Jul 2026 21:00:47 +0000
Manifest this update: Tue 21 Jul 2026 21:00:47 +0000
Manifest next update: Wed 22 Jul 2026 21:00:47 +0000
Files and hashes: 1: 0hykFI2nzIfKw5O60HOpHI0FUF8.roa (hash: 654t5jHQdvrRaEAnKER11GB5whwJk06cO3f07OUyXdo=)
2: M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl (hash: f3HX/qqOhcmonqUfK8cSCKn4nv2TEwzMJwU9Q6xoCXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:7b:2f:07:37:f4:39:a7:a6:74:28:70:0c:ef:2e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Validity
Not Before: Jul 21 21:00:47 2026 GMT
Not After : Jul 22 21:00:47 2026 GMT
Subject: CN=8ef31d4b6ecd33c28be826754fa27675639ef22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:66:68:94:77:13:4b:8a:fa:94:35:b5:3e:81:
0b:e0:6e:5e:ca:1e:b5:dd:3c:22:b2:11:28:91:cc:
d6:c9:92:af:9b:53:8b:de:0e:9f:0b:5b:e1:f2:2f:
fe:1c:8d:72:5f:83:a9:52:1f:b3:99:86:61:d9:e0:
91:ff:14:07:69:a7:4f:5c:9b:b2:41:20:cb:29:4e:
88:28:16:53:3c:51:95:92:12:16:c2:ac:04:69:b3:
77:ad:4a:e8:80:cb:69:72:90:21:d7:ad:b9:96:f7:
56:45:8f:43:a7:1e:ab:64:0b:95:e6:67:1c:d9:7a:
df:fe:ce:3f:d8:29:86:9e:5f:4c:46:c9:62:aa:7d:
30:c1:a0:40:14:17:9a:35:0c:d1:2e:18:3a:b4:fe:
f6:35:ae:1b:be:d7:6d:0f:bf:f7:e5:d8:b1:b6:c3:
b6:e1:f2:0b:b6:99:de:a3:f7:29:a7:d4:10:81:3b:
5b:cb:a1:f0:59:5c:e7:d5:3a:89:25:7f:6a:d6:d9:
5d:24:34:3f:51:0a:cc:0c:87:23:de:8e:3f:d2:4b:
22:ac:64:d2:f9:d4:d0:1c:6c:6c:76:3b:d5:6a:33:
dd:b1:66:0d:09:8c:c8:d3:07:e0:69:38:69:1f:cd:
ec:6b:30:4c:45:cd:d9:fe:d9:c2:22:42:38:90:64:
27:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F3:1D:4B:6E:CD:33:C2:8B:E8:26:75:4F:A2:76:75:63:9E:F2:2F
X509v3 Authority Key Identifier:
keyid:33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d7:a9:b8:09:9e:af:1d:97:43:81:ad:bd:b7:b3:2b:72:98:
ae:3b:c5:e4:2b:3a:a9:c1:fc:9a:66:a1:81:e2:b1:ea:00:65:
51:0b:db:86:b1:3b:8b:f9:b2:8f:d1:c8:b8:a7:3f:28:ef:d3:
8b:7e:43:80:9c:cf:5a:ed:e0:f8:1a:28:9e:78:2e:57:98:5a:
b8:96:56:53:b3:67:93:a2:ed:64:ff:c2:b2:86:71:87:70:dd:
34:60:62:4c:a7:a8:e2:4f:cb:12:d7:71:18:2a:13:60:4a:01:
e9:d2:16:dd:7d:1d:dd:16:80:bc:fa:92:a1:9e:d8:95:aa:07:
7a:38:f0:32:cf:7a:13:c3:45:be:8a:bb:7b:3d:6e:88:80:70:
b1:c8:20:24:77:2e:ec:85:81:53:e4:e3:c8:fd:dd:d4:1b:69:
34:03:df:7b:95:b5:63:c3:17:de:73:16:aa:6c:fe:e9:48:36:
19:d1:1a:c6:1e:5b:c5:1d:db:b4:d9:f2:92:3e:8e:c7:ea:cd:
41:73:e0:ee:15:13:49:fb:a0:e7:43:74:a0:5f:8e:83:47:f3:
1f:dd:5b:63:c1:86:4d:ed:34:28:ce:a0:57:66:80:b4:63:fa:
74:2e:d0:17:a1:eb:63:bf:22:4b:61:d0:3c:8d:f1:1b:d4:c4:
10:34:6b:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Gey8HN/Q5p6Z0KHAM7y5/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZmMxZTViNmM3ODhmYWY4ZmU5MzMxOTgxZDY1YjVmODY0
YjgwZjcwHhcNMjYwNzIxMjEwMDQ3WhcNMjYwNzIyMjEwMDQ3WjAzMTEwLwYDVQQD
Eyg4ZWYzMWQ0YjZlY2QzM2MyOGJlODI2NzU0ZmEyNzY3NTYzOWVmMjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2ZolHcTS4r6lDW1PoEL4G5eyh61
3TwishEokczWyZKvm1OL3g6fC1vh8i/+HI1yX4OpUh+zmYZh2eCR/xQHaadPXJuy
QSDLKU6IKBZTPFGVkhIWwqwEabN3rUrogMtpcpAh1625lvdWRY9Dpx6rZAuV5mcc
2Xrf/s4/2CmGnl9MRsliqn0wwaBAFBeaNQzRLhg6tP72Na4bvtdtD7/35dixtsO2
4fILtpneo/cpp9QQgTtby6HwWVzn1TqJJX9q1tldJDQ/UQrMDIcj3o4/0ksirGTS
+dTQHGxsdjvVajPdsWYNCYzI0wfgaThpH83sazBMRc3Z/tnCIkI4kGQnOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7zHUtuzTPCi+gmdU+idnVjnvIvMB8GA1UdIwQY
MBaAFDP8HltseI+vj+kzGYHWW1+GS4D3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTV93ZVcyeDRqNi1QNlRNWmdkWmJYNFpMZ1BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81ZGNhOWQtNzNkZC00N2RjLTg1NDkt
YjFjNGRlODRlNzBlLzEvTV93ZVcyeDRqNi1QNlRNWmdkWmJYNFpMZ1BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC81ZGNhOWQtNzNkZC00N2RjLTg1NDktYjFjNGRlODRlNzBl
LzEvTV93ZVcyeDRqNi1QNlRNWmdkWmJYNFpMZ1BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtepuAme
rx2XQ4GtvbezK3KYrjvF5Cs6qcH8mmahgeKx6gBlUQvbhrE7i/myj9HIuKc/KO/T
i35DgJzPWu3g+BoonnguV5hauJZWU7Nnk6LtZP/CsoZxh3DdNGBiTKeo4k/LEtdx
GCoTYEoB6dIW3X0d3RaAvPqSoZ7YlaoHejjwMs96E8NFvoq7ez1uiIBwscggJHcu
7IWBU+TjyP3d1BtpNAPfe5W1Y8MX3nMWqmz+6Ug2GdEaxh5bxR3btNnykj6Ox+rN
QXPg7hUTSfug50N0oF+Og0fzH91bY8GGTe00KM6gV2aAtGP6dC7QF6HrY78iS2HQ
PI3xG9TEEDRr2Q==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:15:31 2026 by rpki-client