Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json)
Hash identifier: 4CPKBwMRDV7uLLoHjfO6nUKs/xH4qPMFgTuOmJcs7iU=
Subject key identifier: D9:13:E3:BB:EC:C8:A5:9F:37:FC:80:DE:04:AF:3A:95:36:45:28:1A
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial: 019D27E045670C0C75B7EE74790B2DBAFEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
Manifest number: 0393
Signing time: Thu 26 Mar 2026 02:01:42 +0000
Manifest this update: Thu 26 Mar 2026 02:01:42 +0000
Manifest next update: Fri 27 Mar 2026 02:01:42 +0000
Files and hashes: 1: DSegnNq3yKblQGxIHXTZ5tulaHA.roa (hash: dLv+A/vc7m1UxOoLmUkd/IJPf2dtcdjA2GKS9KV/zrs=)
2: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: plbLnbzTqVkH43cpT7zmwdCbMgsBn6mBlFq+ezO0yXA=)
3: tWypDnBAIWwZKWJj3d2zrshtc2o.roa (hash: VfkZmkJUOwrgNq3Ww1lzNtYXvW7fLaLXy/GNgbgT52k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:45:67:0c:0c:75:b7:ee:74:79:0b:2d:ba:fe:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
Validity
Not Before: Mar 26 02:01:42 2026 GMT
Not After : Mar 27 02:01:42 2026 GMT
Subject: CN=d913e3bbecc8a59f37fc80de04af3a953645281a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:be:83:f9:f5:b9:43:41:5f:8e:cb:7a:dd:
7c:74:aa:e8:29:60:52:b7:e1:03:6a:1b:2c:81:1b:
df:e5:d8:06:43:8a:33:74:f3:29:18:9b:4b:3f:a3:
05:05:9a:56:e9:f5:14:7e:fc:ea:58:86:85:c8:a8:
83:06:cf:62:f0:c4:56:fb:2b:8e:f0:01:7f:1c:a9:
0b:94:7d:6a:ae:ca:c5:2d:a0:33:6f:b7:ee:a4:81:
94:29:25:c3:32:9e:05:59:82:22:9e:69:e9:d9:0b:
1e:bf:03:53:23:0f:96:82:2a:e2:ca:4f:b9:49:fa:
2a:9b:a5:37:b9:85:51:a6:e1:09:b5:66:6c:3b:cd:
6d:03:53:31:b7:b1:f6:94:e1:6f:11:0a:c1:0c:9c:
04:b7:6e:7d:25:40:0c:cc:75:be:18:9f:b8:cf:74:
85:0d:bc:9d:b2:0c:4f:65:f8:b2:75:ac:b1:bb:a8:
20:b1:fd:a4:50:02:3c:f7:94:ee:da:07:15:0e:8a:
39:44:27:df:88:e5:a6:0f:79:5b:7d:ac:bc:dd:5e:
22:56:02:0b:97:8c:48:65:fa:58:b3:00:6a:d8:9e:
0a:8f:14:3f:a3:01:f1:01:99:ca:c6:73:cf:d0:cd:
3c:c1:f8:67:1d:a8:f7:f4:94:75:72:57:97:24:78:
94:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:13:E3:BB:EC:C8:A5:9F:37:FC:80:DE:04:AF:3A:95:36:45:28:1A
X509v3 Authority Key Identifier:
keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f5:e8:3d:9e:90:95:b7:e9:be:39:79:38:d7:8c:d8:f9:f6:
82:0e:04:81:03:ec:c7:6e:1b:da:89:0e:a5:f1:84:db:ae:4e:
09:57:0f:cc:7d:50:93:33:ce:b9:c2:2c:cf:6e:d3:18:82:b4:
fc:56:e1:3d:21:f2:c3:e5:1d:b0:99:05:42:8b:50:18:f4:54:
31:5a:c8:d4:0c:24:11:73:74:12:09:3f:91:15:78:4c:08:43:
ec:5e:98:29:6e:0c:d7:e3:4c:c1:79:9f:49:6e:1e:5f:e8:a4:
12:88:96:2a:1d:7d:8c:df:d5:53:4d:55:52:91:b6:0b:e6:19:
e1:68:27:5d:5f:e7:7a:d0:22:13:1c:a2:66:90:b3:30:7b:c3:
e0:50:a8:96:f1:5c:d2:97:4f:e9:07:b7:c1:58:3b:7c:05:94:
c0:49:d2:67:37:83:36:e1:cc:d9:33:ef:54:c9:ff:cd:7f:83:
2e:17:9f:d2:b6:da:b7:65:72:4e:3e:9f:a8:0a:09:db:39:68:
32:d3:72:90:82:b6:6c:dc:fe:8d:1d:ff:92:4c:e1:e5:18:0d:
df:27:e8:d6:68:8b:75:16:7e:39:f3:5b:65:32:da:95:6f:79:
87:6f:23:25:18:4f:ed:7a:7d:4d:80:e6:7d:97:54:a6:33:91:
16:e5:8f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:16:38 2026 by rpki-client