Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
File: gwelIkrm2akuR-ZW3YAbEP-5Bys.mft (raw, json)
Hash identifier: 7F8w5DAgqfvVj4Cuq4nH3Vjiu7hJcgykOcKfLWo+5JA=
Subject key identifier: 8F:A2:78:04:F7:72:56:92:95:E5:3F:7F:A1:39:9A:5A:4A:A8:62:8F
Authority key identifier: 83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
Certificate issuer: /CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Certificate serial: 019F946D9E0CD489F9D4CF56CA77419BDE85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
Manifest number: 06C7
Signing time: Fri 24 Jul 2026 14:00:39 +0000
Manifest this update: Fri 24 Jul 2026 14:00:39 +0000
Manifest next update: Sat 25 Jul 2026 14:00:39 +0000
Files and hashes: 1: ZDzWeiyu709tNuGqRnvyO4EvWzY.roa (hash: Aqc0xJVhViktXshdlS6mrDC7bH7ONTQwQQYK01Ka00M=)
2: gwelIkrm2akuR-ZW3YAbEP-5Bys.crl (hash: DCjXjK3IxZZ/YCFXzj6ke90mZmQIMXoZsEX+AqskaxM=)
3: wfxGYWiIUCP6iUkp5_pLsxm1lx4.roa (hash: ArA5MNsGoq16uu1LTXHkSoObxtkAg469b2rN/NS5HFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:9e:0c:d4:89:f9:d4:cf:56:ca:77:41:9b:de:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Validity
Not Before: Jul 24 14:00:39 2026 GMT
Not After : Jul 25 14:00:39 2026 GMT
Subject: CN=8fa27804f772569295e53f7fa1399a5a4aa8628f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:55:1f:86:93:14:3f:07:7d:b8:90:27:60:ea:
57:da:fa:58:44:c3:08:79:66:07:cb:59:7a:f6:ea:
3a:b2:9a:16:2f:e0:e5:57:fe:85:58:85:52:85:91:
20:f6:6b:aa:fe:b5:29:5a:e0:c7:48:d5:18:d0:5a:
cf:61:00:13:c7:56:ce:41:70:78:f3:59:52:e4:db:
0d:16:d9:52:8a:68:73:a7:7d:f0:1d:14:44:d4:88:
2e:c0:db:b3:6d:4b:55:69:34:8b:31:31:35:b4:89:
b0:ff:67:71:b2:ab:64:03:2a:c6:b3:71:f4:f4:c1:
ff:5a:46:52:3d:23:e9:b0:d3:a2:06:a3:5d:de:58:
c0:c6:36:d8:88:bd:64:d0:cd:71:ee:a7:d5:f6:a6:
8b:e7:c5:1f:07:b8:97:79:24:0b:c1:37:15:7e:53:
ae:0b:e4:3b:f9:3c:78:f4:07:d6:20:15:ab:f4:40:
b2:ec:e8:3f:41:db:42:73:cf:8c:b8:7c:75:a4:af:
dc:95:f6:fe:75:05:a0:ad:a7:ae:1c:d8:5c:d9:63:
31:17:b9:92:06:e3:3b:1b:09:8f:d9:6b:93:9d:09:
b3:b6:fd:87:ab:71:47:d6:09:e2:6d:f6:69:8d:55:
ef:f9:45:94:5e:2d:69:40:5c:8c:6c:e6:42:d5:eb:
1a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A2:78:04:F7:72:56:92:95:E5:3F:7F:A1:39:9A:5A:4A:A8:62:8F
X509v3 Authority Key Identifier:
keyid:83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:31:e5:22:8b:ec:7e:13:89:59:ad:dd:45:f0:66:e2:59:a5:
14:7a:b2:bb:42:53:cd:bf:69:14:89:11:e9:35:a3:b7:32:49:
de:1f:65:92:1b:10:71:20:fd:0a:60:7e:1e:8e:1c:35:a9:ac:
b9:c1:0f:65:14:c3:40:75:ca:fc:06:88:43:de:89:c3:4c:52:
86:77:57:b6:1c:c3:f7:ac:67:3a:a2:f1:37:3c:8f:cf:15:44:
60:6f:05:05:b8:a8:c8:35:15:95:9c:f8:9e:bd:4a:57:8f:81:
84:64:5b:75:d7:8a:25:cb:5d:40:08:9d:60:2d:8d:7c:08:2c:
d8:03:84:fb:34:ee:df:ad:1c:d6:8f:74:43:be:f5:ed:4a:70:
d2:f0:e4:db:d7:34:e5:8f:0f:87:0e:98:2b:79:50:9b:a9:58:
12:85:4a:d7:68:c3:ae:12:15:65:00:b1:d3:81:dd:5d:dd:58:
77:48:76:53:23:78:ff:46:4a:c3:ff:6c:d5:d2:44:2f:04:b6:
f2:62:1a:b2:d4:03:f7:a8:5f:a8:f3:28:2c:a3:4c:39:7e:9c:
8f:f1:a0:6b:06:86:cf:d1:80:0b:9a:89:9e:36:12:15:dd:2e:
a7:23:2f:ce:6c:48:0c:52:18:82:8d:71:49:7b:5b:3c:c4:df:
3c:4b:fa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:40:03 2026 by rpki-client