Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
File: weQCeuBg1zewpjVowez5sfsZ6yg.mft (raw, json)
Hash identifier: +gX8xOZMrdbszlCuRXUwg+tbjtRpno190DkdGJgea38=
Subject key identifier: EC:67:23:05:19:97:2C:19:2A:D6:01:F8:4E:92:7B:69:14:5D:34:53
Authority key identifier: C1:E4:02:7A:E0:60:D7:37:B0:A6:35:68:C1:EC:F9:B1:FB:19:EB:28
Certificate issuer: /CN=c1e4027ae060d737b0a63568c1ecf9b1fb19eb28
Certificate serial: 019DDD68E6B9E51D3980B8F41D3CF413B129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weQCeuBg1zewpjVowez5sfsZ6yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
Manifest number: 2B
Signing time: Thu 30 Apr 2026 08:02:12 +0000
Manifest this update: Thu 30 Apr 2026 08:02:12 +0000
Manifest next update: Fri 01 May 2026 08:02:12 +0000
Files and hashes: 1: haZE82qyvwkubicw8jZzK_nrWDg.roa (hash: Idp2fSofKC2T4SKeZni0D1Lp8tt7purU0xOSY8SYiLQ=)
2: kXkxGFHeY_rO_dE44fGA4-5ivi8.asa (hash: Q67lhcVwdmIACBqhtRCGyCyqmS0Y6rcNKM6JD9PVHUM=)
3: weQCeuBg1zewpjVowez5sfsZ6yg.crl (hash: ztNB9Ui6Su0QD+11f6qXqHb/aPEid/+tPKFt6i+qrT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/weQCeuBg1zewpjVowez5sfsZ6yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:68:e6:b9:e5:1d:39:80:b8:f4:1d:3c:f4:13:b1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e4027ae060d737b0a63568c1ecf9b1fb19eb28
Validity
Not Before: Apr 30 08:02:12 2026 GMT
Not After : May 1 08:02:12 2026 GMT
Subject: CN=ec67230519972c192ad601f84e927b69145d3453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6c:dc:28:e2:2f:55:e8:7e:95:a2:cb:8a:d8:
63:59:2d:63:06:33:38:84:83:a0:6e:a2:9d:09:23:
da:7b:1a:95:67:29:80:47:b2:4e:3e:ac:6c:51:a9:
63:be:33:f0:85:31:5b:88:3c:e4:f7:05:13:57:fe:
3f:71:0f:a2:68:6b:9c:8b:7b:6a:29:85:81:d9:7b:
4a:cb:c9:61:25:da:35:27:f7:00:f4:ad:1a:41:d4:
b3:5b:00:a0:ca:1a:93:df:99:e7:23:a0:de:c5:67:
95:32:da:b4:61:e6:87:e2:a7:b6:df:e5:fb:57:a4:
ee:36:9a:61:29:8b:e7:da:0b:9e:26:41:17:14:16:
b1:40:0a:a8:d2:8b:31:10:4e:fb:d5:74:ca:ad:aa:
52:99:4e:17:8c:0e:f6:e3:74:1b:a5:99:fa:cf:46:
f5:75:14:6a:78:8d:ec:31:d4:18:b8:3c:fb:91:2d:
69:8c:44:2f:34:a7:53:0b:76:45:a3:87:41:e7:7b:
db:da:83:6f:09:33:59:26:5a:12:a7:36:a1:72:7b:
c4:d6:ea:6c:ec:54:3e:9f:d9:e7:0b:31:95:6e:77:
fc:04:f9:68:7f:47:20:fc:53:50:c9:30:e3:bc:0d:
5e:49:89:85:a4:ca:f6:e2:48:e3:59:70:d1:c1:fd:
47:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:67:23:05:19:97:2C:19:2A:D6:01:F8:4E:92:7B:69:14:5D:34:53
X509v3 Authority Key Identifier:
keyid:C1:E4:02:7A:E0:60:D7:37:B0:A6:35:68:C1:EC:F9:B1:FB:19:EB:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weQCeuBg1zewpjVowez5sfsZ6yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d0:93:d3:41:f7:97:b1:cd:2a:47:22:f7:5a:96:34:a5:44:
c2:c0:bb:b0:a0:1b:10:ac:5b:a7:8c:66:6b:03:54:b9:23:e1:
45:28:43:af:25:e6:5d:61:fa:17:38:18:2a:c0:bd:3d:7e:74:
84:5c:72:fc:ad:6c:8e:6c:a6:4d:58:42:0e:a4:d1:7f:77:f5:
6c:ce:52:17:fb:8d:72:41:61:64:c0:1f:10:a6:f9:09:f6:42:
46:2e:81:f3:da:e8:77:67:ec:7c:38:5c:ae:5a:1e:5b:75:43:
2c:26:66:54:19:e6:c1:ac:87:07:ad:4c:3e:e0:79:ba:db:a8:
35:1d:a3:eb:5f:d5:3b:74:2a:0e:20:19:20:8f:f9:6d:26:b0:
9f:53:48:ac:a8:a7:bf:96:7a:fc:7c:4a:3c:b1:2e:a1:7b:a4:
f9:5a:c2:ae:2a:32:27:13:5e:f9:9f:84:2c:d6:d2:e3:4c:c5:
df:78:73:2d:2e:2e:7c:97:8c:58:f3:dc:b6:eb:1e:0d:21:d7:
79:8f:28:d4:d3:9f:24:8b:59:f4:17:6c:4d:2b:00:1e:b9:16:
f5:24:64:15:64:ce:f4:16:cc:be:06:70:33:14:73:5c:82:85:
fe:3f:08:41:17:4f:22:ee:12:f3:0a:95:bd:54:3d:10:4e:ae:
65:91:57:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3daOa55R05gLj0HTz0E7EpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZTQwMjdhZTA2MGQ3MzdiMGE2MzU2OGMxZWNmOWIxZmIx
OWViMjgwHhcNMjYwNDMwMDgwMjEyWhcNMjYwNTAxMDgwMjEyWjAzMTEwLwYDVQQD
EyhlYzY3MjMwNTE5OTcyYzE5MmFkNjAxZjg0ZTkyN2I2OTE0NWQzNDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmzcKOIvVeh+laLLithjWS1jBjM4
hIOgbqKdCSPaexqVZymAR7JOPqxsUaljvjPwhTFbiDzk9wUTV/4/cQ+iaGuci3tq
KYWB2XtKy8lhJdo1J/cA9K0aQdSzWwCgyhqT35nnI6DexWeVMtq0YeaH4qe23+X7
V6TuNpphKYvn2gueJkEXFBaxQAqo0osxEE771XTKrapSmU4XjA7243QbpZn6z0b1
dRRqeI3sMdQYuDz7kS1pjEQvNKdTC3ZFo4dB53vb2oNvCTNZJloSpzahcnvE1ups
7FQ+n9nnCzGVbnf8BPlof0cg/FNQyTDjvA1eSYmFpMr24kjjWXDRwf1HcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxnIwUZlywZKtYB+E6Se2kUXTRTMB8GA1UdIwQY
MBaAFMHkAnrgYNc3sKY1aMHs+bH7GesoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2VRQ2V1QmcxemV3cGpWb3dlejVzZnNaNnlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8wM2Y0ODctMGNjZC00ZjM5LWFlZGEt
ZmZmNWZlYWEzYjY0LzEvd2VRQ2V1QmcxemV3cGpWb3dlejVzZnNaNnlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8wM2Y0ODctMGNjZC00ZjM5LWFlZGEtZmZmNWZlYWEzYjY0
LzEvd2VRQ2V1QmcxemV3cGpWb3dlejVzZnNaNnlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtCT00H3
l7HNKkci91qWNKVEwsC7sKAbEKxbp4xmawNUuSPhRShDryXmXWH6FzgYKsC9PX50
hFxy/K1sjmymTVhCDqTRf3f1bM5SF/uNckFhZMAfEKb5CfZCRi6B89rod2fsfDhc
rloeW3VDLCZmVBnmwayHB61MPuB5utuoNR2j61/VO3QqDiAZII/5bSawn1NIrKin
v5Z6/HxKPLEuoXuk+VrCrioyJxNe+Z+ELNbS40zF33hzLS4ufJeMWPPctuseDSHX
eY8o1NOfJItZ9BdsTSsAHrkW9SRkFWTO9BbMvgZwMxRzXIKF/j8IQRdPIu4S8wqV
vVQ9EE6uZZFX2g==
-----END CERTIFICATE-----
Generated at Thu Apr 30 12:40:15 2026 by rpki-client