Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
File: weQCeuBg1zewpjVowez5sfsZ6yg.mft (raw, json)
Hash identifier: UIvauPgk8mHyLorwvTx39a1T9lg6t8NohxwQVPmxZ4Q=
Subject key identifier: 37:E1:98:7D:61:B8:26:71:BD:C6:C5:19:40:3B:CA:EE:55:5B:3B:AB
Authority key identifier: C1:E4:02:7A:E0:60:D7:37:B0:A6:35:68:C1:EC:F9:B1:FB:19:EB:28
Certificate issuer: /CN=c1e4027ae060d737b0a63568c1ecf9b1fb19eb28
Certificate serial: 019E1D22F8FA830418C7B172A279D33B36D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weQCeuBg1zewpjVowez5sfsZ6yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
Manifest number: 4C
Signing time: Tue 12 May 2026 17:01:31 +0000
Manifest this update: Tue 12 May 2026 17:01:31 +0000
Manifest next update: Wed 13 May 2026 17:01:31 +0000
Files and hashes: 1: haZE82qyvwkubicw8jZzK_nrWDg.roa (hash: Idp2fSofKC2T4SKeZni0D1Lp8tt7purU0xOSY8SYiLQ=)
2: kXkxGFHeY_rO_dE44fGA4-5ivi8.asa (hash: Q67lhcVwdmIACBqhtRCGyCyqmS0Y6rcNKM6JD9PVHUM=)
3: weQCeuBg1zewpjVowez5sfsZ6yg.crl (hash: QEgunzGbp+FOnqEgPphUf5Rn3/LH64x0XFbCb/hZtPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/weQCeuBg1zewpjVowez5sfsZ6yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:f8:fa:83:04:18:c7:b1:72:a2:79:d3:3b:36:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e4027ae060d737b0a63568c1ecf9b1fb19eb28
Validity
Not Before: May 12 17:01:31 2026 GMT
Not After : May 13 17:01:31 2026 GMT
Subject: CN=37e1987d61b82671bdc6c519403bcaee555b3bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:38:37:f8:8a:11:9a:e1:b0:76:95:18:78:
84:a9:bb:55:ae:5a:48:d9:db:63:29:90:de:7a:a6:
de:f9:34:82:37:88:c5:95:9d:5c:88:b9:52:01:05:
47:a4:4a:27:31:34:d2:0a:38:c9:0a:a7:7a:13:73:
b7:fe:00:3a:7a:9c:94:69:20:0d:bf:68:35:f6:30:
fc:d6:3b:07:f6:08:43:1b:ea:1f:4c:ef:96:9c:af:
50:a2:f9:8c:00:c2:c8:a5:e2:c0:91:0a:93:b4:39:
47:45:84:9f:87:87:a1:bd:86:f0:32:a3:3a:d2:1d:
32:d6:98:9d:65:48:6f:5a:ec:fd:55:40:bc:29:a7:
8e:c9:0f:99:f0:71:92:d0:19:a8:5a:ef:3f:a1:0f:
cf:0d:ea:0e:14:06:d3:05:82:b3:cf:28:62:c6:7d:
41:31:8c:1d:f8:2b:6f:cd:7b:15:e3:b3:a8:1b:c1:
e0:4c:af:e0:70:9f:e2:61:95:b4:65:cd:8d:1e:b4:
26:39:59:86:22:74:93:ad:c9:8f:e1:d9:31:ae:ae:
68:31:d8:bd:47:72:80:95:d8:6c:32:f0:2d:71:cf:
d4:99:74:7c:8f:52:a3:66:8a:f6:da:a7:f1:c6:a3:
ba:c2:43:ff:67:54:7c:5c:9a:7c:df:b0:59:e6:41:
c9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E1:98:7D:61:B8:26:71:BD:C6:C5:19:40:3B:CA:EE:55:5B:3B:AB
X509v3 Authority Key Identifier:
keyid:C1:E4:02:7A:E0:60:D7:37:B0:A6:35:68:C1:EC:F9:B1:FB:19:EB:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weQCeuBg1zewpjVowez5sfsZ6yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:33:31:50:ae:64:03:0a:fc:55:c0:62:f1:a3:46:dd:30:fa:
6c:8b:58:71:dd:b4:ac:6a:0d:fc:c7:02:f1:4f:79:80:12:df:
fc:26:c1:5e:57:64:87:88:11:5c:fe:56:30:86:55:b4:0f:32:
6d:32:7e:d0:9d:5c:e4:66:cc:5c:d9:eb:00:34:2d:57:cd:4a:
37:43:da:f1:37:61:f0:dc:d9:f9:96:dc:90:19:38:b4:99:be:
6c:4f:f3:89:eb:8b:e0:dd:61:a5:63:a1:af:23:b8:b6:f5:13:
95:e5:a4:19:b0:88:90:91:ac:95:cd:36:33:33:e7:1a:a8:9f:
48:ad:8b:a0:c6:25:c0:2a:90:27:0c:58:66:af:e0:61:65:bf:
7a:b4:d2:77:55:24:b6:20:1c:b2:4e:7f:40:24:20:b5:4f:bf:
92:08:2e:5e:8a:de:f7:83:a2:f3:a1:0b:dc:3e:3f:f9:46:fe:
6e:78:6c:f3:62:63:b8:76:99:de:25:7b:62:e6:3a:6e:78:ed:
bd:62:27:f7:eb:7f:59:d8:e4:a8:5f:a5:24:76:ca:d5:57:f1:
cd:ba:de:b3:a9:e1:e7:59:6a:f4:38:e8:95:13:6f:e4:f0:16:
5b:99:6f:4f:1e:37:4c:6c:c9:18:80:31:15:a5:b3:69:c9:40:
f5:a9:12:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:11 2026 by rpki-client