Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
File: we6wu7y21HqENM9BEVHy4kh4CBU.mft (raw, json)
Hash identifier: EEqaviEYBv8O7F2dWM3HhN+nWeorgjhAox8so2CwwR8=
Subject key identifier: 43:BE:AE:27:03:32:9C:B9:74:37:88:11:64:DE:FF:64:68:C7:E9:64
Authority key identifier: C1:EE:B0:BB:BC:B6:D4:7A:84:34:CF:41:11:51:F2:E2:48:78:08:15
Certificate issuer: /CN=c1eeb0bbbcb6d47a8434cf411151f2e248780815
Certificate serial: 019D27DF841C45A386267A1E423BB3791B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
Manifest number: 0467
Signing time: Thu 26 Mar 2026 02:00:52 +0000
Manifest this update: Thu 26 Mar 2026 02:00:52 +0000
Manifest next update: Fri 27 Mar 2026 02:00:52 +0000
Files and hashes: 1: nIGAZPIZq75kgcrqj-kuogdN73s.roa (hash: GHrH41oLr6pmMoS8h9CBSc1ZDtrVCueBn8VEhwJj8mA=)
2: we6wu7y21HqENM9BEVHy4kh4CBU.crl (hash: BfETNIcqyhmDQUpeA2nLqTC0bEUHhgNIp5DKKeA5PJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:84:1c:45:a3:86:26:7a:1e:42:3b:b3:79:1b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eeb0bbbcb6d47a8434cf411151f2e248780815
Validity
Not Before: Mar 26 02:00:52 2026 GMT
Not After : Mar 27 02:00:52 2026 GMT
Subject: CN=43beae2703329cb97437881164deff6468c7e964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:e9:e7:51:9f:03:d1:2d:b5:2e:fa:3e:38:
0b:b0:34:08:18:24:10:e0:2f:18:4e:ed:41:9d:c9:
c3:a5:4f:24:42:be:04:4e:47:07:52:7f:9c:42:57:
09:b3:cf:67:29:a8:11:14:4d:7c:3d:14:6f:ca:8f:
b9:3b:2a:f4:53:7a:6f:0b:33:6a:89:90:84:71:3a:
52:b6:c0:5b:ae:82:5d:bb:41:4f:2a:6d:b5:2f:70:
10:a2:a3:cb:4b:c6:b9:65:fd:43:02:ef:34:01:cf:
b8:3d:d2:4b:25:e8:29:5c:e6:ea:5b:65:de:30:68:
72:ea:ca:96:ab:be:ea:a9:ab:83:28:0d:89:86:b5:
01:8e:1a:ea:06:7e:72:2f:69:c4:d5:09:6b:2a:f7:
e6:61:2c:d8:c1:5a:e2:97:b6:88:11:c1:ab:43:4c:
93:66:22:c1:01:69:43:47:d0:ff:20:cb:d6:40:e4:
83:6e:a1:3f:1a:aa:d3:9b:9d:fe:3c:c8:d9:62:5f:
75:4e:d5:32:9b:11:5d:66:fd:0d:a3:82:a9:01:d0:
e8:b4:10:d9:e9:65:7f:d8:a7:54:39:70:89:0c:1e:
f2:af:9e:d0:02:ca:ba:35:0c:b9:ed:0d:1b:a6:38:
f3:64:04:e0:af:75:00:de:38:af:ca:d5:b9:f7:61:
6e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BE:AE:27:03:32:9C:B9:74:37:88:11:64:DE:FF:64:68:C7:E9:64
X509v3 Authority Key Identifier:
keyid:C1:EE:B0:BB:BC:B6:D4:7A:84:34:CF:41:11:51:F2:E2:48:78:08:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:50:ab:7d:49:45:27:10:de:fe:21:75:ff:b9:f2:8c:d7:f5:
28:c9:3d:39:f3:cb:4a:fc:60:5a:86:34:fe:36:ab:46:12:d7:
b4:7f:60:31:58:d9:84:c8:ff:45:7c:7d:2a:70:e6:b4:d1:95:
99:90:a7:b8:e5:c6:4c:f0:d7:99:38:14:f2:93:cf:60:07:2f:
22:a8:ed:15:97:70:b2:13:89:c4:1c:35:73:f1:94:d8:a7:df:
c8:99:cb:fd:7e:a2:00:0b:4c:f2:e7:b8:c9:b4:e9:ad:65:05:
18:59:2e:bf:40:15:e1:b1:6b:0a:96:13:b9:4f:9d:21:cf:64:
b2:fb:44:6f:e1:4f:41:d3:9b:e0:12:c0:8e:ae:42:7c:c1:db:
db:e3:6b:e5:60:00:04:94:86:c2:81:b3:f9:21:1e:0c:2e:4c:
cb:ec:4b:5c:83:56:27:98:17:43:12:eb:aa:6a:65:7b:d8:66:
d3:a3:e9:bf:e2:f8:77:ba:6a:3a:52:13:a1:d8:04:e6:b6:04:
41:16:7c:d7:61:fd:1b:1b:0e:d3:e0:67:b0:a9:cd:ff:d0:1d:
74:fd:9a:fd:57:b8:67:f6:7b:cb:99:3c:d2:ee:a7:0a:92:2b:
c8:6a:89:24:2d:c8:13:92:5b:3b:9a:9e:d6:05:b5:5f:24:03:
f6:6b:19:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n34QcRaOGJnoeQjuzeRuNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZWViMGJiYmNiNmQ0N2E4NDM0Y2Y0MTExNTFmMmUyNDg3
ODA4MTUwHhcNMjYwMzI2MDIwMDUyWhcNMjYwMzI3MDIwMDUyWjAzMTEwLwYDVQQD
Eyg0M2JlYWUyNzAzMzI5Y2I5NzQzNzg4MTE2NGRlZmY2NDY4YzdlOTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv7p51GfA9EttS76PjgLsDQIGCQQ
4C8YTu1BncnDpU8kQr4ETkcHUn+cQlcJs89nKagRFE18PRRvyo+5Oyr0U3pvCzNq
iZCEcTpStsBbroJdu0FPKm21L3AQoqPLS8a5Zf1DAu80Ac+4PdJLJegpXObqW2Xe
MGhy6sqWq77qqauDKA2JhrUBjhrqBn5yL2nE1QlrKvfmYSzYwVril7aIEcGrQ0yT
ZiLBAWlDR9D/IMvWQOSDbqE/GqrTm53+PMjZYl91TtUymxFdZv0No4KpAdDotBDZ
6WV/2KdUOXCJDB7yr57QAsq6NQy57Q0bpjjzZATgr3UA3jivytW592Fu6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEO+ricDMpy5dDeIEWTe/2Rox+lkMB8GA1UdIwQY
MBaAFMHusLu8ttR6hDTPQRFR8uJIeAgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2U2d3U3eTIxSHFFTk05QkVWSHk0a2g0Q0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8yN2U4NzAtM2U4ZC00MmIwLWIzMGMt
YmJjZGNkYTYxNjEyLzEvd2U2d3U3eTIxSHFFTk05QkVWSHk0a2g0Q0JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8yN2U4NzAtM2U4ZC00MmIwLWIzMGMtYmJjZGNkYTYxNjEy
LzEvd2U2d3U3eTIxSHFFTk05QkVWSHk0a2g0Q0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFCrfUlF
JxDe/iF1/7nyjNf1KMk9OfPLSvxgWoY0/jarRhLXtH9gMVjZhMj/RXx9KnDmtNGV
mZCnuOXGTPDXmTgU8pPPYAcvIqjtFZdwshOJxBw1c/GU2KffyJnL/X6iAAtM8ue4
ybTprWUFGFkuv0AV4bFrCpYTuU+dIc9ksvtEb+FPQdOb4BLAjq5CfMHb2+Nr5WAA
BJSGwoGz+SEeDC5My+xLXINWJ5gXQxLrqmple9hm06Ppv+L4d7pqOlITodgE5rYE
QRZ812H9GxsO0+BnsKnN/9AddP2a/Ve4Z/Z7y5k80u6nCpIryGqJJC3IE5JbO5qe
1gW1XyQD9msZ5Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:10 2026 by rpki-client