Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
File: weQCeuBg1zewpjVowez5sfsZ6yg.mft (raw, json)
Hash identifier: BJmIYhzE/vkzFrTTUbqZCUHhA8spiAArLyH8NG4IUF8=
Subject key identifier: 32:B5:D1:CE:55:6D:38:4E:D2:EC:1B:57:24:53:7F:3F:1A:9D:39:D3
Authority key identifier: C1:E4:02:7A:E0:60:D7:37:B0:A6:35:68:C1:EC:F9:B1:FB:19:EB:28
Certificate issuer: /CN=c1e4027ae060d737b0a63568c1ecf9b1fb19eb28
Certificate serial: 01A0DA28F569136268C2492685BAA9C1C6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weQCeuBg1zewpjVowez5sfsZ6yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
Manifest number: 01B7
Signing time: Fri 25 Sep 2026 20:01:52 +0000
Manifest this update: Fri 25 Sep 2026 20:01:52 +0000
Manifest next update: Sat 26 Sep 2026 20:01:52 +0000
Files and hashes: 1: haZE82qyvwkubicw8jZzK_nrWDg.roa (hash: Idp2fSofKC2T4SKeZni0D1Lp8tt7purU0xOSY8SYiLQ=)
2: kXkxGFHeY_rO_dE44fGA4-5ivi8.asa (hash: Q67lhcVwdmIACBqhtRCGyCyqmS0Y6rcNKM6JD9PVHUM=)
3: weQCeuBg1zewpjVowez5sfsZ6yg.crl (hash: QHXFDOq0UAoVpJ4PpsF1F4Lg76Ka6YeSzdFZwXIHIbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/weQCeuBg1zewpjVowez5sfsZ6yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:f5:69:13:62:68:c2:49:26:85:ba:a9:c1:c6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e4027ae060d737b0a63568c1ecf9b1fb19eb28
Validity
Not Before: Sep 25 20:01:52 2026 GMT
Not After : Sep 26 20:01:52 2026 GMT
Subject: CN=32b5d1ce556d384ed2ec1b5724537f3f1a9d39d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d0:12:f3:46:e2:44:41:db:c4:f6:f2:c6:0a:
c6:94:bb:56:7e:55:b3:6f:4f:81:ad:de:d1:d0:9f:
b3:37:6f:5d:d7:86:28:88:16:ac:55:f3:40:79:a0:
3c:49:5b:1a:0f:e3:74:21:b7:fc:71:42:96:5e:26:
31:10:c3:2a:5d:71:9b:43:00:34:8b:b3:06:c0:65:
bf:ec:a1:1c:fc:ed:c1:c0:4e:cd:b0:3c:97:cb:93:
45:be:70:4e:e5:ad:51:8e:56:85:55:c1:54:3c:13:
a3:3a:ec:6c:d7:40:fe:f2:e3:a2:47:0a:81:ff:ee:
3c:3a:8f:7e:3e:df:0f:61:58:3e:ee:8b:60:04:ec:
74:96:0f:d6:26:db:4f:0d:11:c8:26:a5:46:eb:30:
5b:6e:9c:9d:4f:46:d2:64:07:44:6f:36:4a:c6:b6:
d9:a6:1c:f3:eb:48:a5:4e:0c:a4:53:17:9b:7b:9d:
18:f6:41:ff:65:18:19:5f:cc:72:cf:e1:b0:d0:80:
10:c5:80:22:1d:e3:4f:40:94:4e:94:72:4a:1c:84:
13:9b:90:0a:e7:3b:d7:30:86:17:85:51:b6:e7:e1:
33:cd:fd:45:b9:ac:6b:f9:f2:10:87:3e:09:ea:96:
76:0b:e1:93:db:f8:6d:58:88:ae:69:44:ce:a7:45:
d1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B5:D1:CE:55:6D:38:4E:D2:EC:1B:57:24:53:7F:3F:1A:9D:39:D3
X509v3 Authority Key Identifier:
keyid:C1:E4:02:7A:E0:60:D7:37:B0:A6:35:68:C1:EC:F9:B1:FB:19:EB:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weQCeuBg1zewpjVowez5sfsZ6yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03f487-0ccd-4f39-aeda-fff5feaa3b64/1/weQCeuBg1zewpjVowez5sfsZ6yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:15:bc:8b:dd:d5:e4:5a:06:bf:12:df:13:62:39:f8:33:54:
9a:db:f1:78:7a:ba:a2:dd:76:78:18:1e:be:36:1b:2e:25:2d:
b3:a3:14:43:88:a1:ca:c4:26:4f:70:03:b0:ac:30:8c:27:9b:
84:08:6a:e1:fa:7c:47:20:a1:c2:c4:74:70:3a:1b:c6:13:e0:
2c:d6:6d:0c:7c:b7:eb:d2:d4:8d:7b:6f:49:90:42:15:58:55:
2b:b5:a7:8c:f6:b2:1c:14:97:f7:7c:11:9f:07:a6:53:8f:04:
2c:a7:8f:ad:08:00:af:27:ae:9c:99:d1:f9:15:72:ea:95:dc:
29:40:7d:6c:c4:ee:45:d4:05:9e:89:f4:f0:0f:ee:87:54:86:
d1:65:02:31:b8:8d:dc:47:a4:0f:e3:66:dd:ba:16:64:28:13:
89:d5:22:f8:71:b3:ee:36:00:e1:d2:c8:e6:77:1a:57:00:a5:
59:a2:c8:e6:b6:0c:e6:6f:71:b5:4b:b3:69:96:bf:31:b3:29:
37:1b:b7:bc:f3:3a:dc:62:0f:b8:e9:34:d3:41:e0:1b:de:42:
be:f0:da:96:a3:dc:d9:74:58:e2:8c:36:f7:5e:af:d8:55:18:
4c:a6:f4:b2:d5:36:ac:8f:56:59:9c:bc:67:7c:49:bb:a8:45:
f0:ff:ba:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:23:26 2026 by rpki-client