Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
File: xVfBW97s57ChtHfh4O6L_1P6_gw.mft (raw, json)
Hash identifier: Zzg2B3NaGSQ1SGnNeComNyklz+oUhsYyioDDRly0urQ=
Subject key identifier: 9B:8E:3D:8B:47:63:E0:B8:08:E7:20:0F:70:5E:57:55:23:62:86:63
Authority key identifier: C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
Certificate issuer: /CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Certificate serial: 019D2A3BE8B44A3224816B19783F8B7FD79C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
Manifest number: 0416
Signing time: Thu 26 Mar 2026 13:01:02 +0000
Manifest this update: Thu 26 Mar 2026 13:01:02 +0000
Manifest next update: Fri 27 Mar 2026 13:01:02 +0000
Files and hashes: 1: hKf_RdYBNL00n5n-6RG-3ope_pY.roa (hash: i1hoGLnlnqGNDkEnX87y4lBEOlUW/mrfMdJ23VxMPJA=)
2: xVfBW97s57ChtHfh4O6L_1P6_gw.crl (hash: EgOmg12AbnvSE2NYcG/DktOjOgC2YTpntn3JZZxUji8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:e8:b4:4a:32:24:81:6b:19:78:3f:8b:7f:d7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Validity
Not Before: Mar 26 13:01:02 2026 GMT
Not After : Mar 27 13:01:02 2026 GMT
Subject: CN=9b8e3d8b4763e0b808e7200f705e575523628663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3b:a2:af:10:93:60:6e:e9:3f:56:31:2c:26:
91:eb:8f:cb:9e:b7:b1:89:ba:eb:93:93:9d:1f:ca:
48:85:77:0c:11:5a:8b:19:66:43:6b:c8:f5:a8:1d:
b6:69:e6:f0:48:da:7b:fc:15:f5:57:fa:6d:aa:e8:
5d:b6:d9:db:74:99:0f:dd:19:94:45:27:3b:c9:88:
ba:53:75:81:40:c2:87:f8:e0:76:b1:9e:68:5f:d0:
7c:1e:cc:80:8d:d7:41:09:29:1d:eb:5a:54:38:e3:
84:98:30:47:f7:12:cb:10:7b:a6:1b:4c:b2:67:55:
35:62:41:49:ad:e3:3f:19:f3:6c:76:30:36:3c:92:
bb:98:21:4f:8b:55:9c:b4:9f:ce:e3:96:23:4a:81:
80:db:96:3a:49:7f:f6:14:07:90:86:65:2a:6a:2d:
9c:2d:67:47:01:65:23:4e:bc:63:68:ea:bf:81:b9:
36:ef:3a:69:19:48:7d:4a:38:bd:3b:5e:7c:f8:70:
d0:a5:cd:53:06:11:ee:f6:ba:67:87:b5:e9:40:c0:
8e:70:d0:26:45:a5:12:bb:38:36:b9:fa:c4:4a:9d:
a4:45:d3:31:38:88:3f:1b:71:2d:af:34:1a:2e:da:
dd:07:07:bc:81:49:5a:6a:9c:51:34:df:73:3e:18:
d0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8E:3D:8B:47:63:E0:B8:08:E7:20:0F:70:5E:57:55:23:62:86:63
X509v3 Authority Key Identifier:
keyid:C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:63:a9:63:87:55:cc:b3:23:63:18:8e:1f:7a:1d:3d:cc:db:
4c:85:c6:78:ef:90:25:a5:56:16:78:e1:82:6f:cc:30:17:78:
53:4b:90:0c:f3:1b:58:f9:71:ac:30:5e:d7:cb:e5:3b:30:77:
ab:39:d6:a8:04:74:26:d2:12:1f:13:ef:58:4a:9c:ef:3f:3c:
2c:f0:2a:22:16:e8:6d:ea:37:58:ff:22:b8:0a:97:62:37:14:
ee:ea:5a:cd:45:4b:75:11:54:ec:ee:d1:b3:26:06:f5:1f:27:
eb:36:cf:de:2a:4e:10:a2:46:54:a6:cd:51:a3:80:ff:56:c1:
ec:73:17:f2:8a:f1:fb:52:22:c7:29:6a:34:5a:54:22:a0:a9:
9e:52:6c:cc:ba:fa:cd:f4:c5:72:3c:39:b2:00:35:61:af:3a:
a6:4b:03:e3:75:28:32:f9:8d:86:9a:df:b5:90:f6:64:cf:1d:
ca:e8:05:29:54:4a:5d:ef:eb:98:85:8c:95:19:63:b0:13:37:
ee:b7:43:c1:f0:1a:fc:14:34:4f:f9:8f:4d:31:6e:48:d3:18:
a0:cf:ed:c4:c7:cd:b9:ea:73:5d:27:8e:11:cf:42:4d:4b:77:
63:d1:52:b3:56:a4:e3:65:69:ff:54:13:3f:41:0c:9a:c4:29:
0e:f8:b6:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO+i0SjIkgWsZeD+Lf9ecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTdjMTViZGVlY2U3YjBhMWI0NzdlMWUwZWU4YmZmNTNm
YWZlMGMwHhcNMjYwMzI2MTMwMTAyWhcNMjYwMzI3MTMwMTAyWjAzMTEwLwYDVQQD
Eyg5YjhlM2Q4YjQ3NjNlMGI4MDhlNzIwMGY3MDVlNTc1NTIzNjI4NjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TuirxCTYG7pP1YxLCaR64/Lnrex
ibrrk5OdH8pIhXcMEVqLGWZDa8j1qB22aebwSNp7/BX1V/ptquhdttnbdJkP3RmU
RSc7yYi6U3WBQMKH+OB2sZ5oX9B8HsyAjddBCSkd61pUOOOEmDBH9xLLEHumG0yy
Z1U1YkFJreM/GfNsdjA2PJK7mCFPi1WctJ/O45YjSoGA25Y6SX/2FAeQhmUqai2c
LWdHAWUjTrxjaOq/gbk27zppGUh9Sji9O158+HDQpc1TBhHu9rpnh7XpQMCOcNAm
RaUSuzg2ufrESp2kRdMxOIg/G3EtrzQaLtrdBwe8gUlaapxRNN9zPhjQOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuOPYtHY+C4COcgD3BeV1UjYoZjMB8GA1UdIwQY
MBaAFMVXwVve7OewobR34eDui/9T+v4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zMmE4ZGQtMzliMy00NzkxLWE1ZTQt
ZGJkYmUxOTNjOTc0LzEveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8zMmE4ZGQtMzliMy00NzkxLWE1ZTQtZGJkYmUxOTNjOTc0
LzEveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3GOpY4dV
zLMjYxiOH3odPczbTIXGeO+QJaVWFnjhgm/MMBd4U0uQDPMbWPlxrDBe18vlOzB3
qznWqAR0JtISHxPvWEqc7z88LPAqIhbobeo3WP8iuAqXYjcU7upazUVLdRFU7O7R
syYG9R8n6zbP3ipOEKJGVKbNUaOA/1bB7HMX8orx+1IixylqNFpUIqCpnlJszLr6
zfTFcjw5sgA1Ya86pksD43UoMvmNhprftZD2ZM8dyugFKVRKXe/rmIWMlRljsBM3
7rdDwfAa/BQ0T/mPTTFuSNMYoM/txMfNuepzXSeOEc9CTUt3Y9FSs1ak42Vp/1QT
P0EMmsQpDvi2GQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:07:26 2026 by rpki-client