Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
File: gwI7OXBbNFqG7_PxTvax5NtFk54.mft (raw, json)
Hash identifier: zmIBW3R1pElSBgfgvtXwpG3zrhvfZ6ghdc9NGkHDbr8=
Subject key identifier: F4:A6:3A:F2:2A:90:BF:DB:E5:5B:83:B3:E5:D4:05:7C:CD:8F:91:E6
Authority key identifier: 83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
Certificate issuer: /CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Certificate serial: 019F91DACA3BB3797AC33DD8FEFC8FC07BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
Manifest number: 125E
Signing time: Fri 24 Jul 2026 02:01:02 +0000
Manifest this update: Fri 24 Jul 2026 02:01:02 +0000
Manifest next update: Sat 25 Jul 2026 02:01:02 +0000
Files and hashes: 1: RR2Qpipy3CGQZUMFDoxapCCswEU.roa (hash: gIn0IJGSqUa3PXsu1U1OGftRLBAw7A/4NhM17NLvsb4=)
2: gwI7OXBbNFqG7_PxTvax5NtFk54.crl (hash: tooNXZpzTx+HLEhvT5uidmRbz9PIytGHv1bMA3vry34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:ca:3b:b3:79:7a:c3:3d:d8:fe:fc:8f:c0:7b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Validity
Not Before: Jul 24 02:01:02 2026 GMT
Not After : Jul 25 02:01:02 2026 GMT
Subject: CN=f4a63af22a90bfdbe55b83b3e5d4057ccd8f91e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:b1:c1:a8:98:cc:7b:1d:ce:16:f5:a1:a7:
1c:fa:64:3f:cb:10:f9:01:b1:95:28:d0:66:96:e8:
1c:2f:ed:8d:c8:64:f9:b3:f8:5b:ac:d2:03:00:c4:
3d:e2:6c:02:83:c1:7b:01:e6:57:d2:ce:b2:5d:6b:
61:b4:77:1d:49:67:ab:81:3d:59:db:74:97:85:7f:
3a:5c:08:42:bd:11:b8:13:7f:14:10:f2:e6:ce:30:
68:cf:81:0c:5c:57:32:b3:c8:56:00:f7:86:79:d4:
a0:e9:51:1c:6c:c3:cf:e7:7b:87:53:17:49:41:29:
4b:3f:0a:7b:c9:93:35:6e:a6:4c:7b:87:45:b4:23:
c0:08:0f:78:5b:ae:81:5c:ca:56:9f:26:0a:8e:2a:
3f:c2:5c:9c:94:1b:63:7d:c6:9d:22:64:c6:ab:d8:
e7:b6:49:a0:61:96:b7:6d:3d:fe:ae:e0:cc:d1:7e:
9a:de:f7:a7:61:0c:bf:05:23:80:d0:3a:d0:cf:f9:
b4:c3:62:2e:d7:8f:d4:30:ef:70:e5:69:6b:ad:ce:
4c:a6:4a:b2:94:c7:84:6f:d7:e2:8a:14:ac:4e:06:
97:e5:09:9c:e2:2d:a2:56:26:b2:86:b4:48:a5:03:
e0:dc:ea:15:ea:f4:5a:9f:c5:01:fd:c0:22:bd:bc:
3f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A6:3A:F2:2A:90:BF:DB:E5:5B:83:B3:E5:D4:05:7C:CD:8F:91:E6
X509v3 Authority Key Identifier:
keyid:83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:55:cb:d6:a7:3e:7c:a8:8a:12:06:f5:05:ca:02:7d:8a:e0:
61:cd:95:90:17:f0:d0:c7:e9:e3:db:a4:5c:98:96:b7:cb:b9:
96:0b:52:41:5c:64:55:32:c4:a5:af:7f:e6:98:5f:b7:5c:a6:
96:c2:aa:e9:71:cd:95:e5:e9:11:af:5a:49:2c:b2:ac:c3:ca:
51:b5:ab:63:16:6c:86:aa:35:ec:9a:d4:df:14:fb:a5:35:e5:
54:79:ec:d6:e2:8e:80:68:fb:d2:10:23:8f:f6:ed:78:6a:e4:
a4:7b:1a:ab:37:37:a2:24:e4:63:73:6a:69:0b:b7:cf:20:e5:
74:79:4f:e4:06:b7:e4:cb:29:05:60:06:3c:f9:87:05:ae:7f:
6d:98:a2:45:4d:af:11:b0:c3:95:49:ae:9f:18:ed:97:d9:b3:
74:a3:00:d4:6f:ac:79:f9:ab:9e:65:b5:bb:46:7b:e3:57:97:
5b:07:68:f3:01:7a:88:48:69:80:0c:5e:f1:80:2f:01:f5:4a:
84:c5:11:07:b4:11:85:9f:c7:52:4d:72:61:48:b5:ac:fa:8d:
22:ef:c6:e2:63:95:18:0a:e9:4e:cf:bc:34:d7:40:3c:98:d3:
43:3c:49:fa:f0:e7:57:b5:d2:cf:eb:7f:25:1c:b7:b2:9a:fd:
19:20:29:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2so7s3l6wz3Y/vyPwHvGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDIzYjM5NzA1YjM0NWE4NmVmZjNmMTRlZjZiMWU0ZGI0
NTkzOWUwHhcNMjYwNzI0MDIwMTAyWhcNMjYwNzI1MDIwMTAyWjAzMTEwLwYDVQQD
EyhmNGE2M2FmMjJhOTBiZmRiZTU1YjgzYjNlNWQ0MDU3Y2NkOGY5MWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUyxwaiYzHsdzhb1oacc+mQ/yxD5
AbGVKNBmlugcL+2NyGT5s/hbrNIDAMQ94mwCg8F7AeZX0s6yXWthtHcdSWergT1Z
23SXhX86XAhCvRG4E38UEPLmzjBoz4EMXFcys8hWAPeGedSg6VEcbMPP53uHUxdJ
QSlLPwp7yZM1bqZMe4dFtCPACA94W66BXMpWnyYKjio/wlyclBtjfcadImTGq9jn
tkmgYZa3bT3+ruDM0X6a3venYQy/BSOA0DrQz/m0w2Iu14/UMO9w5Wlrrc5Mpkqy
lMeEb9fiihSsTgaX5Qmc4i2iViayhrRIpQPg3OoV6vRan8UB/cAivbw/nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSmOvIqkL/b5VuDs+XUBXzNj5HmMB8GA1UdIwQY
MBaAFIMCOzlwWzRahu/z8U72seTbRZOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3dJN09YQmJORnFHN19QeFR2YXg1TnRGazU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hZTMwNDItY2E5OC00ZGRhLTk1YTYt
M2I4ZmJmZmY1MzQyLzEvZ3dJN09YQmJORnFHN19QeFR2YXg1TnRGazU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hZTMwNDItY2E5OC00ZGRhLTk1YTYtM2I4ZmJmZmY1MzQy
LzEvZ3dJN09YQmJORnFHN19QeFR2YXg1TnRGazU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlXL1qc+
fKiKEgb1BcoCfYrgYc2VkBfw0Mfp49ukXJiWt8u5lgtSQVxkVTLEpa9/5phft1ym
lsKq6XHNleXpEa9aSSyyrMPKUbWrYxZshqo17JrU3xT7pTXlVHns1uKOgGj70hAj
j/bteGrkpHsaqzc3oiTkY3NqaQu3zyDldHlP5Aa35MspBWAGPPmHBa5/bZiiRU2v
EbDDlUmunxjtl9mzdKMA1G+sefmrnmW1u0Z741eXWwdo8wF6iEhpgAxe8YAvAfVK
hMURB7QRhZ/HUk1yYUi1rPqNIu/G4mOVGArpTs+8NNdAPJjTQzxJ+vDnV7XSz+t/
JRy3spr9GSAp2Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:16:38 2026 by rpki-client