Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
File: gwelIkrm2akuR-ZW3YAbEP-5Bys.mft (raw, json)
Hash identifier: wx//VeUwSlOtbE+Pigb9x9S576CfW80olm9y2xEV5mk=
Subject key identifier: C3:45:BC:CA:8A:F1:0A:D9:9A:5F:D1:E8:68:86:8D:F4:AA:D6:D0:6E
Authority key identifier: 83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
Certificate issuer: /CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Certificate serial: 019D2771D2FAC6E04C8D81D18104FEBB8D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
Manifest number: 0585
Signing time: Thu 26 Mar 2026 00:01:04 +0000
Manifest this update: Thu 26 Mar 2026 00:01:04 +0000
Manifest next update: Fri 27 Mar 2026 00:01:04 +0000
Files and hashes: 1: RdWRv5Q-rS2yC6uCgBMcFMzrMv8.roa (hash: fI9arYNvAPfUyU+E39rZuBfMlHVUr8jzRqIJWE8wtJ8=)
2: gwelIkrm2akuR-ZW3YAbEP-5Bys.crl (hash: sM8o+0pBPkcSQGn8WxrlpCdaqG03Y7d6FYkcQ9H0axI=)
3: wfxGYWiIUCP6iUkp5_pLsxm1lx4.roa (hash: ArA5MNsGoq16uu1LTXHkSoObxtkAg469b2rN/NS5HFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d2:fa:c6:e0:4c:8d:81:d1:81:04:fe:bb:8d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Validity
Not Before: Mar 26 00:01:04 2026 GMT
Not After : Mar 27 00:01:04 2026 GMT
Subject: CN=c345bcca8af10ad99a5fd1e868868df4aad6d06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:96:02:3d:c5:dc:96:2a:6c:b4:34:c3:91:1f:
8e:6f:ff:05:5f:8d:b8:3b:ad:34:8f:3f:ba:3b:5a:
3b:59:1a:8b:43:71:bd:88:6e:c6:94:90:74:5e:77:
67:72:72:d7:b8:dc:16:4b:b4:d8:b9:bc:10:0b:bb:
c7:a3:55:e2:45:da:98:6e:e9:58:65:cd:8a:b2:17:
d1:89:17:aa:23:68:54:6d:42:93:ce:81:ab:51:51:
03:a7:05:73:6d:ba:b2:a2:7b:ce:08:06:21:1c:ec:
e6:30:6f:d6:99:68:d7:43:f7:bc:73:ef:c4:43:a4:
20:5f:96:d6:5d:3b:6c:e0:d6:d9:28:5c:12:f9:f0:
86:f5:5c:ce:81:0b:97:6f:a3:de:67:7f:34:6a:93:
fe:0f:8d:77:eb:20:0d:60:98:ab:7f:a7:76:2c:a2:
11:cb:5e:33:f0:a4:d1:61:97:86:a0:16:e3:67:07:
a4:57:eb:4f:30:dd:3e:8c:2a:e6:d5:2a:72:e7:e8:
56:54:79:b8:be:a0:7b:06:c8:d8:dd:65:f4:c2:5f:
61:d2:a4:c0:f3:ab:e9:33:89:69:f5:e5:91:0b:5a:
16:5b:ec:81:e7:00:3e:fa:cb:cd:92:ee:fa:d1:10:
50:5b:89:8a:ee:df:18:db:99:4c:c5:81:61:59:f7:
b0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:45:BC:CA:8A:F1:0A:D9:9A:5F:D1:E8:68:86:8D:F4:AA:D6:D0:6E
X509v3 Authority Key Identifier:
keyid:83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2c:e2:2e:e7:4f:59:f6:13:69:9c:36:8f:1d:ef:bd:13:0f:
93:b0:63:db:12:60:7b:02:3d:b6:b3:94:83:c9:dc:75:43:a3:
02:9a:66:8b:89:c7:de:90:62:78:3c:2e:3b:ec:93:a1:fd:8d:
eb:13:40:18:f7:c8:a6:aa:45:f9:f0:1f:25:99:af:db:4d:da:
6d:0d:a3:7d:3c:d3:00:aa:71:42:29:c9:fe:38:7c:fd:a5:c5:
11:88:2a:c8:05:d3:74:73:29:aa:43:e6:38:c2:59:fe:ec:25:
5b:b7:56:e1:37:16:b6:b9:f8:1d:6c:a1:b0:7a:0f:37:e5:73:
70:44:54:38:11:d2:8a:1b:dd:e6:47:5a:c4:93:e1:a8:e6:27:
18:21:ef:a5:03:a7:c3:9b:3d:0a:90:93:52:b8:5c:9e:b3:68:
03:be:a9:f8:db:3f:ef:8f:44:d7:18:6d:9e:a5:7d:ae:88:b7:
62:fb:1d:dd:12:5b:e7:ce:60:a6:3a:9d:0e:f1:97:31:9a:50:
2f:50:c3:fe:56:71:08:24:43:d2:fd:8c:94:6a:08:90:f5:f1:
6f:3b:5d:a1:91:25:1a:4c:3b:93:bd:33:9a:2f:83:c3:50:08:
a8:13:48:58:2a:f0:dd:39:8a:c4:0a:20:ca:71:36:b4:44:5a:
49:63:cd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:37 2026 by rpki-client