Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
File: gwelIkrm2akuR-ZW3YAbEP-5Bys.mft (raw, json)
Hash identifier: vj8Azxoe3oYqbKyKa4RSjUmMyhuHyLDCstQkYfuOt5w=
Subject key identifier: 97:61:1E:E1:1E:1A:44:CA:AB:C3:FB:DC:44:D1:F1:6D:BB:DA:0F:7D
Authority key identifier: 83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
Certificate issuer: /CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Certificate serial: 019E1EA33DE83AC5E012D59A2349EDEBFFC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
Manifest number: 0605
Signing time: Wed 13 May 2026 00:01:15 +0000
Manifest this update: Wed 13 May 2026 00:01:15 +0000
Manifest next update: Thu 14 May 2026 00:01:15 +0000
Files and hashes: 1: RdWRv5Q-rS2yC6uCgBMcFMzrMv8.roa (hash: fI9arYNvAPfUyU+E39rZuBfMlHVUr8jzRqIJWE8wtJ8=)
2: gwelIkrm2akuR-ZW3YAbEP-5Bys.crl (hash: YIRuvaZrSHeuMzMaQ6qW0rB6BdmxGb5I/UFYu2+Zmdg=)
3: wfxGYWiIUCP6iUkp5_pLsxm1lx4.roa (hash: ArA5MNsGoq16uu1LTXHkSoObxtkAg469b2rN/NS5HFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:3d:e8:3a:c5:e0:12:d5:9a:23:49:ed:eb:ff:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Validity
Not Before: May 13 00:01:15 2026 GMT
Not After : May 14 00:01:15 2026 GMT
Subject: CN=97611ee11e1a44caabc3fbdc44d1f16dbbda0f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:e1:c0:8d:0d:59:3e:3c:c6:01:92:2a:51:
5e:eb:d9:2e:68:d1:8a:00:13:ed:99:c7:48:7c:21:
cf:2a:ca:de:61:7c:83:f0:44:5b:ab:65:c9:81:7c:
ae:07:3e:f5:56:28:bc:96:ed:fb:fe:42:da:12:f8:
9b:c1:db:10:dc:a4:6f:14:55:74:47:e8:a9:1f:e9:
6f:50:7d:8c:8c:51:2f:05:16:c9:e1:14:12:60:43:
a5:81:2c:57:94:13:0e:49:ae:6b:7d:a5:9c:6c:cc:
65:2a:1e:92:0f:df:4c:a5:af:da:33:21:b5:1c:d9:
19:00:78:ee:60:fb:42:99:c6:6f:62:29:2c:ad:46:
70:54:ca:13:d5:6a:72:74:ae:c1:6e:a1:f2:77:98:
7a:46:74:3b:7a:52:a8:e4:98:0e:91:fd:1b:02:87:
95:15:4b:54:01:41:11:f1:a1:8d:4c:e9:a6:3c:82:
67:15:e0:c0:30:09:d8:30:62:a1:57:33:1f:6d:39:
4f:93:f7:95:b7:8f:13:b6:2c:64:9e:5e:18:93:6a:
2e:93:cc:e2:60:04:6a:34:03:06:d5:23:78:33:65:
f5:f9:3a:8a:02:be:eb:05:05:5f:d4:47:e5:4d:43:
e3:6f:d7:65:93:9a:5d:1b:4b:50:12:5f:6e:6f:a7:
6d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:61:1E:E1:1E:1A:44:CA:AB:C3:FB:DC:44:D1:F1:6D:BB:DA:0F:7D
X509v3 Authority Key Identifier:
keyid:83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e5:05:f0:42:bf:20:db:b8:1e:c0:23:6c:68:4c:85:a5:70:
8b:e3:9a:38:de:24:69:81:b2:a8:c0:7a:42:e7:61:77:e6:8c:
2d:11:3a:a2:2c:a7:6f:94:40:e5:d5:e6:3e:77:8e:5e:de:87:
06:a1:e1:0a:9c:2f:d3:87:3e:13:c3:f1:8e:9d:10:12:a7:fd:
60:04:02:b1:7c:bb:ff:ae:c0:08:ad:b3:55:6d:79:99:36:09:
86:2b:26:c1:6b:6c:70:45:c3:c0:9d:cd:fa:53:dc:e8:9c:eb:
33:2d:34:dd:dc:fb:67:26:8a:19:a8:66:97:64:8a:04:95:43:
df:bf:28:47:3e:c1:5c:23:0d:79:3b:ec:6a:bc:54:1f:d3:6b:
9c:a2:73:bc:53:a8:e2:d6:88:fb:09:42:68:cc:de:a3:8a:51:
72:35:44:c0:09:21:6b:4e:bc:f4:08:09:1c:75:93:d7:af:97:
70:cc:c5:42:0b:1c:86:b3:33:e4:eb:dc:75:a5:c0:47:68:20:
12:70:6d:4b:8a:ad:74:ba:e3:c9:45:7b:42:35:8f:a5:bd:e9:
dc:f6:91:1b:32:96:83:b6:7c:0f:6e:bc:be:26:70:18:5a:4f:
aa:b2:e0:6f:4e:7c:36:44:e9:ff:8d:38:44:55:f4:87:44:46:
28:16:6d:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eoz3oOsXgEtWaI0nt6//JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDdhNTIyNGFlNmQ5YTkyZTQ3ZTY1NmRkODAxYjEwZmZi
OTA3MmIwHhcNMjYwNTEzMDAwMTE1WhcNMjYwNTE0MDAwMTE1WjAzMTEwLwYDVQQD
Eyg5NzYxMWVlMTFlMWE0NGNhYWJjM2ZiZGM0NGQxZjE2ZGJiZGEwZjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu/hwI0NWT48xgGSKlFe69kuaNGK
ABPtmcdIfCHPKsreYXyD8ERbq2XJgXyuBz71Vii8lu37/kLaEvibwdsQ3KRvFFV0
R+ipH+lvUH2MjFEvBRbJ4RQSYEOlgSxXlBMOSa5rfaWcbMxlKh6SD99Mpa/aMyG1
HNkZAHjuYPtCmcZvYiksrUZwVMoT1WpydK7BbqHyd5h6RnQ7elKo5JgOkf0bAoeV
FUtUAUER8aGNTOmmPIJnFeDAMAnYMGKhVzMfbTlPk/eVt48Ttixknl4Yk2ouk8zi
YARqNAMG1SN4M2X1+TqKAr7rBQVf1EflTUPjb9dlk5pdG0tQEl9ub6dtwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdhHuEeGkTKq8P73ETR8W272g99MB8GA1UdIwQY
MBaAFIMHpSJK5tmpLkfmVt2AGxD/uQcrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3dlbElrcm0yYWt1Ui1aVzNZQWJFUC01QnlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hM2Q5YTYtMzRiNy00ZjM4LWE5YTUt
OGJmYWNhZTQ2NGY5LzEvZ3dlbElrcm0yYWt1Ui1aVzNZQWJFUC01QnlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hM2Q5YTYtMzRiNy00ZjM4LWE5YTUtOGJmYWNhZTQ2NGY5
LzEvZ3dlbElrcm0yYWt1Ui1aVzNZQWJFUC01QnlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeUF8EK/
INu4HsAjbGhMhaVwi+OaON4kaYGyqMB6Qudhd+aMLRE6oiynb5RA5dXmPneOXt6H
BqHhCpwv04c+E8Pxjp0QEqf9YAQCsXy7/67ACK2zVW15mTYJhismwWtscEXDwJ3N
+lPc6JzrMy003dz7ZyaKGahml2SKBJVD378oRz7BXCMNeTvsarxUH9NrnKJzvFOo
4taI+wlCaMzeo4pRcjVEwAkha0689AgJHHWT16+XcMzFQgschrMz5OvcdaXAR2gg
EnBtS4qtdLrjyUV7QjWPpb3p3PaRGzKWg7Z8D268viZwGFpPqrLgb058NkTp/404
RFX0h0RGKBZtoQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:29:23 2026 by rpki-client