Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
File: weJGTdbQQjCVFffltk6mXAibRhY.mft (raw, json)
Hash identifier: JLIGjbxlrR659PhCZCaf2jKr1H+FbtRFTpXb4FXZ+gk=
Subject key identifier: 2A:42:44:2E:D6:42:68:19:46:31:1A:DF:1D:39:1F:41:CD:5E:65:2B
Authority key identifier: C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16
Certificate issuer: /CN=c1e2464dd6d042309515f7e5b64ea65c089b4616
Certificate serial: 019D3909C11F9E0D28F034DD61C1BEBCF46A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:00:33 +0000
Manifest this update: Sun 29 Mar 2026 10:00:33 +0000
Manifest next update: Mon 30 Mar 2026 10:00:33 +0000
Files and hashes: 1: gHtegaN7OLgHtHHu51zbCeqQFDA.roa (hash: EPs8IaltzukwrBtIywNQ/0TYt3CUA+5rJ4ySK++dqCU=)
2: weJGTdbQQjCVFffltk6mXAibRhY.crl (hash: T71/WD+4JOOLrzuOghOteqFz1qU6bhKx6pZlT/UqECw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c1:1f:9e:0d:28:f0:34:dd:61:c1:be:bc:f4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e2464dd6d042309515f7e5b64ea65c089b4616
Validity
Not Before: Mar 29 10:00:33 2026 GMT
Not After : Mar 30 10:00:33 2026 GMT
Subject: CN=2a42442ed642681946311adf1d391f41cd5e652b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:82:02:6c:45:6b:b6:db:9a:ea:37:14:dc:
4b:83:13:f1:5a:63:bd:73:3d:f6:81:a9:b9:64:0b:
a8:f9:5c:7b:f2:f3:00:d5:f0:21:94:84:a2:bf:89:
c4:df:06:93:d2:75:90:9e:1e:f6:a0:55:0a:60:3b:
71:89:5f:8c:4e:47:13:94:b4:db:fe:0a:d3:78:ee:
0c:26:fa:89:b4:76:8d:b8:fe:9e:42:fb:e9:6e:4c:
be:ce:2a:16:3d:5a:aa:75:6a:ec:ee:d1:11:93:74:
63:85:70:b8:34:75:9b:16:5d:e2:45:e6:94:0e:e5:
7a:c1:9f:1f:0f:a4:39:1b:ab:43:f5:12:a5:d5:58:
5e:07:6e:98:19:6f:7a:89:7a:a2:81:50:da:11:11:
56:5b:30:28:13:c9:b8:b4:da:df:2a:e1:0d:28:8c:
24:ea:f7:08:cd:83:6c:f2:2f:fb:1a:21:d6:b1:fd:
fe:cd:13:af:e3:57:35:94:77:e0:d0:7e:65:cc:6e:
e5:6d:7f:08:32:ae:46:3c:64:98:2e:70:0d:53:65:
8f:66:ce:a5:b8:67:6a:60:05:2b:24:c6:a3:02:8e:
6f:ba:bb:3b:cd:07:98:c3:81:2a:88:05:46:79:80:
fd:10:b6:87:49:e5:d1:55:d5:7b:2f:96:93:1f:6c:
fb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:42:44:2E:D6:42:68:19:46:31:1A:DF:1D:39:1F:41:CD:5E:65:2B
X509v3 Authority Key Identifier:
keyid:C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1e:51:95:87:90:2c:8c:66:a4:56:94:50:3b:5e:39:4b:50:
ad:a4:68:ca:b8:36:4f:f4:a9:3b:6a:bd:8e:29:86:be:0c:3d:
dc:2b:75:92:0a:fe:3f:94:8f:56:25:7e:90:ad:1d:33:9a:b7:
65:31:84:65:be:36:58:41:56:a6:f8:7e:b1:19:36:31:e8:7e:
d1:8d:46:e5:9e:5d:df:dd:86:c3:63:6c:33:f9:92:72:cf:a3:
c0:8b:c5:0c:27:47:31:70:93:25:ce:56:ae:67:2d:f1:dc:08:
b3:a0:47:cd:8a:53:16:9b:ed:f6:cb:8b:c4:e2:00:e6:e7:ae:
74:fd:72:27:b0:5f:9b:57:39:33:da:1c:99:ce:33:34:66:95:
a2:e8:9e:1d:4d:54:65:99:e1:70:b9:73:b9:70:9c:4d:6d:3c:
85:18:17:27:b8:c3:af:8b:18:d0:42:f6:05:f2:98:c8:6b:b1:
6d:d2:c8:a7:80:d3:3c:32:af:2d:46:4f:96:f3:c5:37:27:71:
73:d5:f5:df:2d:a2:58:1a:d7:0d:a2:2b:1a:c9:ea:44:ae:7b:
b2:6d:73:ba:e6:68:cf:97:9a:74:2a:63:e3:6a:57:38:dc:15:
38:95:42:7f:7d:13:c3:00:a7:da:d4:ca:35:16:e3:82:4f:1a:
7f:49:cf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:20:54 2026 by rpki-client