Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
File: gwI7OXBbNFqG7_PxTvax5NtFk54.mft (raw, json)
Hash identifier: AHjv7ll5cpyCsYonj7YOeC2y9CSYZxQ7LkSHg8T4uiA=
Subject key identifier: C7:43:B5:C2:99:C1:4F:94:81:44:5B:7C:2F:D7:DF:81:96:46:37:09
Authority key identifier: 83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
Certificate issuer: /CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Certificate serial: 01A0DC174A2239A0B8CE010700EC833FD40D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
Manifest number: 1309
Signing time: Sat 26 Sep 2026 05:01:48 +0000
Manifest this update: Sat 26 Sep 2026 05:01:48 +0000
Manifest next update: Sun 27 Sep 2026 05:01:48 +0000
Files and hashes: 1: RR2Qpipy3CGQZUMFDoxapCCswEU.roa (hash: gIn0IJGSqUa3PXsu1U1OGftRLBAw7A/4NhM17NLvsb4=)
2: gwI7OXBbNFqG7_PxTvax5NtFk54.crl (hash: y4XCYtdR9jkYjOZsPRr/BJ/bdtNJ6haZtoH1MRqOFow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:4a:22:39:a0:b8:ce:01:07:00:ec:83:3f:d4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Validity
Not Before: Sep 26 05:01:48 2026 GMT
Not After : Sep 27 05:01:48 2026 GMT
Subject: CN=c743b5c299c14f9481445b7c2fd7df8196463709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7d:43:84:14:97:3a:66:e1:a2:83:5b:ed:9e:
23:26:3f:e5:33:6b:65:7b:7c:29:33:fb:10:12:76:
6d:01:98:6c:b0:86:2a:90:59:29:36:dd:b3:c9:54:
d3:e5:ba:88:05:a4:f3:de:e3:5e:bd:5a:9a:8a:80:
58:27:f0:16:0f:e1:5d:d3:6d:c5:37:a0:8a:29:cf:
9e:7c:95:3d:78:34:f2:7b:da:bf:56:91:5b:91:3e:
4d:6a:77:f7:c0:cc:13:5b:d8:7c:d4:cd:4a:b2:e5:
a3:64:e3:2d:98:9a:aa:1f:a7:6e:58:98:4e:ab:13:
c2:cb:7a:7c:91:71:0d:87:09:12:e9:7d:1b:a0:93:
05:de:5e:22:df:ef:59:65:25:76:9a:48:f7:71:33:
5a:bb:8e:ca:ca:8c:f1:73:04:80:45:ca:0e:80:cd:
1d:10:07:d3:a8:c9:00:1f:84:59:b5:ac:b0:56:b0:
17:84:bb:73:a8:2f:94:07:c6:cb:9b:2e:36:e7:bb:
a0:8a:da:b3:a5:1c:83:6a:fc:9b:40:fe:7d:f5:0d:
34:15:f6:35:30:f4:96:52:a7:c7:32:79:2c:56:e1:
ab:fa:6a:9d:72:69:ae:32:07:f6:b2:9f:ab:e4:77:
df:94:16:e4:75:e2:48:2a:63:49:fb:06:2a:c5:0c:
fa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:43:B5:C2:99:C1:4F:94:81:44:5B:7C:2F:D7:DF:81:96:46:37:09
X509v3 Authority Key Identifier:
keyid:83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:62:7b:d2:d9:f5:3b:cf:cd:e0:d7:d3:c5:2f:cf:09:4f:ea:
0c:03:4a:b1:81:ec:6a:66:83:d8:a4:f1:c8:84:7b:f1:14:bd:
77:17:e5:86:00:f8:d3:68:8c:85:a6:00:3e:d7:49:af:a6:b3:
72:ad:52:44:1b:a2:32:02:97:6b:f0:5c:d3:8b:25:66:65:83:
59:1a:d0:da:d3:74:5b:11:63:68:6d:e7:63:44:09:de:3f:f4:
c7:df:ae:f8:f8:02:d6:4a:3f:c8:54:59:1c:88:95:7b:ad:8c:
21:de:0d:2d:d4:76:e8:a3:a8:cd:6c:db:7c:ec:dc:12:8e:57:
ae:32:a0:71:64:33:27:1a:90:41:dd:b5:f6:e9:c7:4a:18:5b:
b4:a6:ae:25:2c:3d:e7:4b:bf:1d:da:f0:89:5f:9e:23:df:0f:
ad:c1:0d:f3:5f:8f:6d:a0:21:19:3e:9d:4a:45:25:b1:26:55:
dd:f6:13:46:ce:9e:1e:44:e4:9a:ad:5d:90:2a:4d:57:a1:ed:
ac:cd:d7:fe:c4:fe:11:6c:65:89:07:ff:9b:c6:ab:cd:48:44:
f1:14:96:59:1f:6c:e1:07:2d:b7:1f:11:91:b4:4d:71:01:76:
3b:84:ac:7d:64:c8:51:7b:87:e2:30:d7:8f:6f:8d:d3:c9:c5:
c9:7f:46:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:51:03 2026 by rpki-client