Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft
File: gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft (raw, json)
Hash identifier: +h7VUBPMy843gUIJzhvujvmIACshMBjs6SSuQpESt3I=
Subject key identifier: 3E:DF:6C:D1:83:7F:FE:5C:B3:B1:98:FB:71:2F:FA:DF:E8:7C:AA:FE
Authority key identifier: 83:03:A4:CB:23:84:C2:07:DD:37:37:F0:92:4F:A0:8E:93:28:2D:06
Certificate issuer: /CN=8303a4cb2384c207dd3737f0924fa08e93282d06
Certificate serial: 019D26CCB933484717F9AEAE135AEC31345F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwOkyyOEwgfdNzfwkk-gjpMoLQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft
Manifest number: 0231
Signing time: Wed 25 Mar 2026 21:00:43 +0000
Manifest this update: Wed 25 Mar 2026 21:00:43 +0000
Manifest next update: Thu 26 Mar 2026 21:00:43 +0000
Files and hashes: 1: 8SSKTH9s3HU_rS-TPm-_-xBMgPE.roa (hash: dT0653K9AV0eXk/TvV3UtuvNeuEkUytkEKjWnMa0YLs=)
2: gwOkyyOEwgfdNzfwkk-gjpMoLQY.crl (hash: IG6neArT6GidRUXZv5twkbQpn61Ed/qrh0gQxmYikVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwOkyyOEwgfdNzfwkk-gjpMoLQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:b9:33:48:47:17:f9:ae:ae:13:5a:ec:31:34:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8303a4cb2384c207dd3737f0924fa08e93282d06
Validity
Not Before: Mar 25 21:00:43 2026 GMT
Not After : Mar 26 21:00:43 2026 GMT
Subject: CN=3edf6cd1837ffe5cb3b198fb712ffadfe87caafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:74:0a:5d:6d:be:ff:32:76:60:4b:98:00:
63:46:88:65:e1:51:5d:fd:4f:63:ea:be:4a:76:3e:
ae:ca:38:c8:f7:06:1e:b4:d5:77:89:1a:ab:b9:55:
35:5a:4a:18:aa:a8:7f:70:56:a4:ca:b7:6b:08:68:
95:9d:be:aa:5d:fa:a5:3a:1e:35:be:96:95:9c:80:
89:0c:e8:c6:9a:db:75:89:2c:77:32:c5:da:30:e3:
7c:55:de:a1:69:08:82:31:92:ef:6d:1c:00:07:c9:
c5:91:a3:5a:34:8b:c7:75:98:05:71:a1:9f:30:e4:
bb:6d:27:7a:2d:d6:29:fa:43:b5:91:f6:b5:15:04:
c4:a7:2e:a7:4e:fe:3f:07:bc:92:ff:11:5a:79:7b:
13:aa:28:18:51:29:ac:2d:c2:7c:28:c5:e3:9a:7a:
f4:22:e2:76:da:f9:36:21:d7:16:f9:f9:a3:33:54:
71:1b:37:40:32:c3:9e:7d:3d:f8:6f:88:2d:27:0d:
40:d3:d9:4f:cf:61:6e:03:56:71:fa:c6:e0:88:cc:
13:82:47:ff:a2:3b:01:f6:2e:a6:23:d1:53:b1:10:
6b:c9:21:ac:32:90:1f:50:3d:55:bf:db:1d:12:74:
20:ba:66:67:d3:5a:6e:b0:5e:00:f5:81:cc:ba:4b:
ac:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DF:6C:D1:83:7F:FE:5C:B3:B1:98:FB:71:2F:FA:DF:E8:7C:AA:FE
X509v3 Authority Key Identifier:
keyid:83:03:A4:CB:23:84:C2:07:DD:37:37:F0:92:4F:A0:8E:93:28:2D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwOkyyOEwgfdNzfwkk-gjpMoLQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f4:13:d8:ac:c8:dc:56:47:e3:f6:97:83:14:7e:38:11:5e:
6d:f2:46:47:4e:3b:ec:21:5d:5e:d0:40:f2:6b:a4:e0:54:dd:
23:7b:1d:78:5b:7c:2d:45:67:6e:9e:5a:55:89:2f:0c:e0:d9:
a6:26:6c:17:f1:e5:7c:55:8b:fb:c9:0b:32:26:30:1c:3c:d9:
0b:2e:d1:7b:a9:3e:1e:50:60:3b:af:d9:f5:c6:a7:27:95:83:
54:7c:e4:12:7a:83:55:13:84:e9:7d:17:b3:62:d1:92:a7:89:
06:bd:57:ec:a0:fd:2a:a7:64:39:57:e8:71:e9:82:38:0e:d9:
81:26:13:03:f4:78:14:2b:02:a8:f3:5f:58:ad:4f:48:38:2b:
0f:c2:b1:6a:18:5c:07:9e:3c:47:e2:b0:01:34:04:18:00:54:
fb:21:ed:3d:f5:0b:3b:f7:88:70:77:0f:cf:08:5a:e9:f4:8a:
78:b9:6f:f3:0b:60:26:41:8d:f7:2e:7a:a4:9c:d1:79:d0:30:
0c:37:d3:c7:22:fa:aa:29:f5:30:50:c2:a8:f1:22:66:ca:15:
90:fd:ff:ba:23:1b:b1:96:3b:fb:81:f9:63:cf:aa:de:86:a3:
da:35:d2:95:cf:c0:8b:a0:a6:e1:e7:2f:46:fc:6a:df:39:64:
7e:39:b4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:04:15 2026 by rpki-client