Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
File: M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft (raw, json)
Hash identifier: XXFKYqwILcoMynVzxYlbv938bPKDOIxnoyhNaQm4tLo=
Subject key identifier: A9:10:9A:36:D5:EC:68:F2:54:EC:08:8D:D9:19:EC:E3:B7:C8:4D:84
Authority key identifier: 33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
Certificate issuer: /CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Certificate serial: 019E1F4778222CCA9C6F50232A943B6392F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 03:00:37 +0000
Manifest this update: Wed 13 May 2026 03:00:37 +0000
Manifest next update: Thu 14 May 2026 03:00:37 +0000
Files and hashes: 1: 0hykFI2nzIfKw5O60HOpHI0FUF8.roa (hash: 654t5jHQdvrRaEAnKER11GB5whwJk06cO3f07OUyXdo=)
2: M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl (hash: gWyZfiEqi6CMrcl2E7BZTe1TvFw7xfmG8I+7iPuY3Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:78:22:2c:ca:9c:6f:50:23:2a:94:3b:63:92:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Validity
Not Before: May 13 03:00:37 2026 GMT
Not After : May 14 03:00:37 2026 GMT
Subject: CN=a9109a36d5ec68f254ec088dd919ece3b7c84d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:e5:a5:af:69:22:41:22:5b:29:57:2a:4e:
40:f2:3c:71:56:2a:fd:40:6e:f8:82:04:c8:85:69:
bb:ee:58:bb:34:d0:39:86:42:fe:d2:ff:73:ce:32:
1b:38:4d:19:8b:08:d3:7f:ab:83:99:4b:53:01:1e:
e5:71:bf:00:ce:a1:73:d9:88:c6:73:50:8d:2d:db:
64:95:06:e6:d9:46:19:c3:08:4f:31:87:64:8c:44:
52:78:b0:d8:d3:b9:c4:e4:3f:c0:91:ff:cd:51:d1:
86:df:68:0d:88:a8:d5:3f:dd:6f:2a:79:a2:2d:2b:
f4:a1:2e:90:d6:3b:53:96:f4:94:d7:71:00:fa:dc:
da:e8:a6:ef:1e:8a:47:48:b7:9c:2b:5f:35:de:d3:
23:e0:aa:1b:68:77:2c:ab:9f:ae:5a:47:c6:16:a2:
49:4a:00:68:59:6a:27:de:c7:5c:b9:8f:51:5f:1a:
1c:03:d8:43:17:25:01:bd:fa:de:02:3d:36:bb:c3:
cc:d5:12:fa:30:80:52:3a:92:47:75:33:09:07:33:
b8:d5:f6:2c:6f:c7:97:23:10:c8:6b:8a:53:f7:6d:
38:00:06:31:cd:17:5f:a3:82:5a:a7:65:0e:29:88:
20:53:48:d6:cb:ca:7a:ad:e9:5f:f3:c8:8c:3f:69:
47:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:10:9A:36:D5:EC:68:F2:54:EC:08:8D:D9:19:EC:E3:B7:C8:4D:84
X509v3 Authority Key Identifier:
keyid:33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5c:9c:0b:c2:65:6b:a5:a9:74:b7:ec:4e:ea:f2:37:22:f9:
6f:b9:c8:32:18:a4:99:ff:60:a9:da:79:eb:a1:b8:40:74:99:
5c:94:20:5a:16:b9:72:d5:86:a8:1a:f8:0d:56:8f:3e:8a:cb:
bc:d7:e4:4a:82:30:0b:9c:a6:8f:c1:7f:f3:42:39:5b:8a:41:
ee:20:ef:1e:22:2e:03:f1:0e:7c:97:a9:0f:e9:71:13:65:a5:
63:d0:a9:13:82:c9:66:5d:e1:ea:50:58:d2:62:3f:f7:8d:a3:
d1:f5:7b:ac:f8:4b:ab:0c:61:10:1d:90:c1:5a:9e:e2:d1:a5:
dc:7e:14:25:40:bc:69:13:57:74:40:d4:cd:4b:bb:ad:83:14:
57:2a:9f:7f:ee:8f:21:38:66:39:9b:57:07:d1:cd:9d:32:b5:
23:03:81:e9:57:b8:62:02:bf:b2:a4:3d:31:32:e1:a9:d0:f7:
b2:28:25:1f:05:32:c1:fa:ed:32:8b:71:99:a9:a2:a3:51:4a:
fa:68:11:76:12:94:be:ad:d7:ed:8b:44:e5:e4:55:32:67:82:
ed:ac:33:82:d9:59:de:a7:77:cb:28:0a:f6:56:bc:51:96:2c:
af:d0:dd:3e:46:e3:f4:a2:b7:0f:94:db:49:00:f8:ce:25:6a:
59:fe:e2:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fR3giLMqcb1AjKpQ7Y5LxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZmMxZTViNmM3ODhmYWY4ZmU5MzMxOTgxZDY1YjVmODY0
YjgwZjcwHhcNMjYwNTEzMDMwMDM3WhcNMjYwNTE0MDMwMDM3WjAzMTEwLwYDVQQD
EyhhOTEwOWEzNmQ1ZWM2OGYyNTRlYzA4OGRkOTE5ZWNlM2I3Yzg0ZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtzlpa9pIkEiWylXKk5A8jxxVir9
QG74ggTIhWm77li7NNA5hkL+0v9zzjIbOE0ZiwjTf6uDmUtTAR7lcb8AzqFz2YjG
c1CNLdtklQbm2UYZwwhPMYdkjERSeLDY07nE5D/Akf/NUdGG32gNiKjVP91vKnmi
LSv0oS6Q1jtTlvSU13EA+tza6KbvHopHSLecK1813tMj4KobaHcsq5+uWkfGFqJJ
SgBoWWon3sdcuY9RXxocA9hDFyUBvfreAj02u8PM1RL6MIBSOpJHdTMJBzO41fYs
b8eXIxDIa4pT9204AAYxzRdfo4Jap2UOKYggU0jWy8p6relf88iMP2lHvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkQmjbV7GjyVOwIjdkZ7OO3yE2EMB8GA1UdIwQY
MBaAFDP8HltseI+vj+kzGYHWW1+GS4D3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTV93ZVcyeDRqNi1QNlRNWmdkWmJYNFpMZ1BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81ZGNhOWQtNzNkZC00N2RjLTg1NDkt
YjFjNGRlODRlNzBlLzEvTV93ZVcyeDRqNi1QNlRNWmdkWmJYNFpMZ1BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC81ZGNhOWQtNzNkZC00N2RjLTg1NDktYjFjNGRlODRlNzBl
LzEvTV93ZVcyeDRqNi1QNlRNWmdkWmJYNFpMZ1BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFycC8Jl
a6WpdLfsTuryNyL5b7nIMhikmf9gqdp566G4QHSZXJQgWha5ctWGqBr4DVaPPorL
vNfkSoIwC5ymj8F/80I5W4pB7iDvHiIuA/EOfJepD+lxE2WlY9CpE4LJZl3h6lBY
0mI/942j0fV7rPhLqwxhEB2QwVqe4tGl3H4UJUC8aRNXdEDUzUu7rYMUVyqff+6P
IThmOZtXB9HNnTK1IwOB6Ve4YgK/sqQ9MTLhqdD3siglHwUywfrtMotxmamio1FK
+mgRdhKUvq3X7YtE5eRVMmeC7awzgtlZ3qd3yygK9la8UZYsr9DdPkbj9KK3D5Tb
SQD4ziVqWf7iSA==
-----END CERTIFICATE-----
Generated at Wed May 13 07:23:16 2026 by rpki-client