Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
File: we5gO3itcrp4VWgsorgGrA5-mP0.mft (raw, json)
Hash identifier: kxLZ82fYzeKUEFwtDAFMSH8XPl7tgVyrVqMmUe/LubI=
Subject key identifier: 71:2D:A4:53:A8:18:4C:79:B6:B2:01:E9:0A:9F:51:97:50:07:2D:99
Authority key identifier: C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD
Certificate issuer: /CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
Certificate serial: 019D29612A4BCF45A065B68DF4BE67F24A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 09:02:06 +0000
Manifest this update: Thu 26 Mar 2026 09:02:06 +0000
Manifest next update: Fri 27 Mar 2026 09:02:06 +0000
Files and hashes: 1: WhlF3-97zeKA9zwTPV4rysNOYtc.roa (hash: PZrfxCb0Q8TjoglsmZhLZgPlBsJLljiY6Rncu+AWpPI=)
2: we5gO3itcrp4VWgsorgGrA5-mP0.crl (hash: qRtbNME0jo8affOVLAmgzhpkqDsIDBL1p/IZjNUub0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:2a:4b:cf:45:a0:65:b6:8d:f4:be:67:f2:4a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
Validity
Not Before: Mar 26 09:02:06 2026 GMT
Not After : Mar 27 09:02:06 2026 GMT
Subject: CN=712da453a8184c79b6b201e90a9f519750072d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f7:f7:bb:9d:d0:94:4b:9d:0a:25:42:86:97:
c2:f3:25:80:0f:30:a3:35:ed:f5:0d:32:88:69:f7:
cc:dc:86:c0:05:e5:28:66:a2:84:4e:91:11:33:f8:
a7:c6:89:4b:7f:23:79:5b:b7:0b:8c:28:64:89:44:
0a:3e:27:fe:71:a2:49:b3:e5:f2:53:69:a2:a9:4c:
23:72:3d:62:3d:8e:7c:17:9b:f1:0a:17:80:92:35:
83:24:fe:11:8f:58:43:92:c2:6e:5a:27:0c:ff:48:
d6:d6:22:09:c2:31:3f:0d:e4:2b:85:f4:f9:4d:5c:
18:e8:a1:45:92:00:61:d3:36:ca:55:aa:7d:3b:2a:
2a:f7:2b:e8:e9:6e:b6:36:df:62:e1:6e:30:ad:66:
ea:11:c4:54:98:2a:55:36:a2:2c:b7:dd:27:bc:7f:
e1:89:a0:2e:68:b8:7d:44:ed:42:90:c4:c2:ef:bb:
6f:96:f7:bd:94:48:2d:c6:b4:48:0f:6d:be:61:bc:
17:3f:45:ee:e4:26:f6:c0:78:74:91:d3:0c:ba:e5:
fc:39:0f:a1:2f:bd:69:0c:0e:47:c6:96:28:07:73:
0e:43:57:69:6b:19:26:12:80:8f:e6:81:b4:64:db:
4c:3d:18:51:04:57:4c:b5:ea:a3:c4:a5:5c:a6:34:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2D:A4:53:A8:18:4C:79:B6:B2:01:E9:0A:9F:51:97:50:07:2D:99
X509v3 Authority Key Identifier:
keyid:C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b5:82:65:a2:6a:1c:da:3b:9f:c0:ac:a5:e0:7f:e6:13:75:
ae:30:38:09:34:cc:fe:a1:31:e9:df:36:e0:b0:43:87:cf:de:
03:ef:8c:63:5b:07:0a:a0:fa:30:89:0d:ef:0e:89:b5:91:e8:
1c:99:6b:c9:d5:b9:e3:fc:0e:db:be:53:b2:e6:cb:d0:d1:7f:
42:b0:1c:9d:3b:0f:61:b5:7d:d9:b7:7d:6f:3e:33:7d:05:0b:
84:3d:89:a6:6e:f1:f1:7b:4c:10:71:f2:31:1a:69:78:47:5c:
85:34:4d:82:7d:6f:53:04:6d:e6:2d:c4:be:48:1f:e7:eb:4c:
34:06:24:21:c4:3c:1d:46:65:86:2c:86:72:b6:95:2c:0f:8c:
e6:5a:0d:6f:95:b3:d9:f7:56:37:b2:1e:af:14:48:ec:99:98:
cd:f3:61:04:f7:71:16:73:e7:50:cd:12:93:34:77:dd:eb:18:
77:5c:02:9d:bb:6d:03:b1:e6:cc:78:a4:8d:85:62:57:38:1c:
a0:a7:5c:4e:b4:51:da:5f:b4:cb:5c:49:95:82:35:a5:73:23:
70:99:08:3d:3a:c5:51:29:25:4c:69:f4:49:4a:c1:96:ad:6d:
bd:37:94:ea:c3:dc:bc:18:ba:21:d0:76:67:5d:53:e9:1a:9b:
82:b5:89:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYSpLz0WgZbaN9L5n8koiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZWU2MDNiNzhhZDcyYmE3ODU1NjgyY2EyYjgwNmFjMGU3
ZTk4ZmQwHhcNMjYwMzI2MDkwMjA2WhcNMjYwMzI3MDkwMjA2WjAzMTEwLwYDVQQD
Eyg3MTJkYTQ1M2E4MTg0Yzc5YjZiMjAxZTkwYTlmNTE5NzUwMDcyZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPf3u53QlEudCiVChpfC8yWADzCj
Ne31DTKIaffM3IbABeUoZqKETpERM/inxolLfyN5W7cLjChkiUQKPif+caJJs+Xy
U2miqUwjcj1iPY58F5vxCheAkjWDJP4Rj1hDksJuWicM/0jW1iIJwjE/DeQrhfT5
TVwY6KFFkgBh0zbKVap9Oyoq9yvo6W62Nt9i4W4wrWbqEcRUmCpVNqIst90nvH/h
iaAuaLh9RO1CkMTC77tvlve9lEgtxrRID22+YbwXP0Xu5Cb2wHh0kdMMuuX8OQ+h
L71pDA5HxpYoB3MOQ1dpaxkmEoCP5oG0ZNtMPRhRBFdMteqjxKVcpjQSOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEtpFOoGEx5trIB6QqfUZdQBy2ZMB8GA1UdIwQY
MBaAFMHuYDt4rXK6eFVoLKK4BqwOfpj9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2U1Z08zaXRjcnA0Vldnc29yZ0dyQTUtbVAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85YjZkOWItODU0MS00NGJjLTk2MWEt
Y2VlNWJlODdhNDZiLzEvd2U1Z08zaXRjcnA0Vldnc29yZ0dyQTUtbVAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy85YjZkOWItODU0MS00NGJjLTk2MWEtY2VlNWJlODdhNDZi
LzEvd2U1Z08zaXRjcnA0Vldnc29yZ0dyQTUtbVAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAobWCZaJq
HNo7n8CspeB/5hN1rjA4CTTM/qEx6d824LBDh8/eA++MY1sHCqD6MIkN7w6JtZHo
HJlrydW54/wO275TsubL0NF/QrAcnTsPYbV92bd9bz4zfQULhD2Jpm7x8XtMEHHy
MRppeEdchTRNgn1vUwRt5i3Evkgf5+tMNAYkIcQ8HUZlhiyGcraVLA+M5loNb5Wz
2fdWN7IerxRI7JmYzfNhBPdxFnPnUM0SkzR33esYd1wCnbttA7HmzHikjYViVzgc
oKdcTrRR2l+0y1xJlYI1pXMjcJkIPTrFUSklTGn0SUrBlq1tvTeU6sPcvBi6IdB2
Z11T6RqbgrWJIA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:30:05 2026 by rpki-client