Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json)
Hash identifier: FG9N/c4Y0PlXbGtznv+nmIlNc7V+stnVnn/nEo5UHnQ=
Subject key identifier: 3D:3D:51:A0:EB:76:5D:05:F3:2D:DC:36:97:11:30:29:56:39:CC:8C
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial: 019E1F10B15A48C4C6069438272A405EBAEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
Manifest number: 0413
Signing time: Wed 13 May 2026 02:00:48 +0000
Manifest this update: Wed 13 May 2026 02:00:48 +0000
Manifest next update: Thu 14 May 2026 02:00:48 +0000
Files and hashes: 1: DSegnNq3yKblQGxIHXTZ5tulaHA.roa (hash: dLv+A/vc7m1UxOoLmUkd/IJPf2dtcdjA2GKS9KV/zrs=)
2: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: NOrma/hi095npjCpBGREDd8E5G7L+WTgxXz9+JP01hs=)
3: tWypDnBAIWwZKWJj3d2zrshtc2o.roa (hash: VfkZmkJUOwrgNq3Ww1lzNtYXvW7fLaLXy/GNgbgT52k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:b1:5a:48:c4:c6:06:94:38:27:2a:40:5e:ba:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
Validity
Not Before: May 13 02:00:48 2026 GMT
Not After : May 14 02:00:48 2026 GMT
Subject: CN=3d3d51a0eb765d05f32ddc36971130295639cc8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:36:cc:3a:b0:f5:27:61:2d:36:8f:1d:40:a7:
b1:ad:27:3e:e6:26:1b:58:8f:ae:7d:9e:5e:72:d7:
a2:05:f0:49:87:d5:93:66:5e:87:6e:c2:4f:e5:e5:
c4:2e:34:4b:5d:44:ea:33:6c:ab:97:b2:03:ac:1c:
3c:49:3c:05:63:15:d7:26:da:05:b2:da:45:8c:2a:
e1:db:93:7c:d2:44:95:b0:d7:37:8d:16:e6:6b:49:
49:a1:6e:e7:67:3a:a1:aa:99:3a:3d:8c:d8:99:47:
d6:1c:8e:24:8d:95:15:eb:94:72:1f:a5:1b:2a:fc:
ae:72:9a:a3:9a:8f:b7:22:a5:02:fd:cf:03:24:ce:
44:8b:29:87:78:1f:25:68:a1:21:fc:93:35:ce:84:
24:62:f9:a1:77:3d:27:e6:4b:dd:b7:88:c9:40:b4:
ac:e3:a3:e3:2e:25:b3:99:c9:5f:c8:5d:51:50:48:
97:14:e1:54:19:23:c1:7b:d2:d5:ea:3a:c6:be:b0:
f4:80:67:28:ab:68:09:7a:f0:79:75:89:c9:02:1b:
99:aa:53:c7:67:06:ac:db:96:27:3b:32:4c:70:a4:
52:ee:cc:ed:e7:f5:ad:9a:4c:0c:1c:12:61:68:94:
3f:56:ee:9b:2b:e2:64:e5:b7:d9:08:68:f7:cb:23:
5a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3D:51:A0:EB:76:5D:05:F3:2D:DC:36:97:11:30:29:56:39:CC:8C
X509v3 Authority Key Identifier:
keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8b:66:0d:62:ed:e1:8f:91:1f:f3:7c:cb:d1:69:1a:36:a0:
b1:19:1e:61:ce:b4:2d:98:fb:f2:93:b8:42:7a:3f:65:95:4b:
13:31:b4:42:e8:e9:6a:28:8e:a0:fe:97:20:f1:bf:ca:b8:86:
25:e5:13:fa:79:46:9b:6f:d6:cd:4a:f7:c9:d2:db:07:9c:b7:
2c:d2:1d:a4:b3:19:b9:55:6c:32:de:c3:f4:7a:f3:33:8b:d1:
a4:ae:05:ef:23:0f:c8:08:1b:de:28:29:27:50:11:5b:95:d1:
af:b3:d8:d5:50:c7:0e:06:0c:b1:0b:5d:6f:54:b9:ee:98:6e:
40:6e:02:5c:51:a0:03:7d:15:e0:8e:ba:66:79:5f:a3:6a:23:
22:07:18:2b:2b:a0:03:52:6f:06:f9:e9:a5:59:69:b9:7e:99:
01:e4:af:aa:2a:98:dc:a2:5c:d4:22:a3:be:7d:f1:43:78:be:
df:9c:c6:95:b7:09:1a:65:c4:12:e5:ab:d6:d0:e1:47:0f:02:
02:5e:e4:22:8f:6c:75:5f:6f:b0:58:12:4b:99:91:8c:b4:0b:
40:6d:7e:24:e4:f4:17:83:ee:35:f4:0a:ce:f9:c7:20:b0:de:
5b:a7:56:8d:30:34:5d:2f:b4:84:02:a6:ba:62:ba:9c:76:39:
2c:cb:ea:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:00:54 2026 by rpki-client