
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.mft
File: gWsWnRn6OVDRRdWEr6YXAfzatdE.mft (raw, json)
Hash identifier: sPOE43GfLvaKTNArDhgrddVQYwoF1bniLC/UDZkhD0U=
Subject key identifier: CB:01:87:D1:76:A9:F7:21:75:8C:52:97:EA:D0:DE:41:D5:62:A7:53
Authority key identifier: 81:6B:16:9D:19:FA:39:50:D1:45:D5:84:AF:A6:17:01:FC:DA:B5:D1
Certificate issuer: /CN=816b169d19fa3950d145d584afa61701fcdab5d1
Certificate serial: 01A1DE7088A0B7C54CB7F15166A73617E49B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWsWnRn6OVDRRdWEr6YXAfzatdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 09:01:19 +0000
Manifest this update: Sun 15 Nov 2026 09:01:19 +0000
Manifest next update: Mon 16 Nov 2026 09:01:19 +0000
Files and hashes: 1: NStI2c33ELu1MdgMNr4ASro5yxg.roa (hash: DGIV6y9JcITViqGIDqZJzNdiLNbdNYRRHPqeCBc+BJY=)
2: SzV7YXB0I-v32buFZVhcBfuK4b8.roa (hash: 9Bg/sMGFQWNrP6cNVtWMxuP3OzfvHUrPEKBcUfgdp5M=)
3: gWsWnRn6OVDRRdWEr6YXAfzatdE.crl (hash: 72C98L0XL1QvB5EfTdxQtR1FQGZQ87lhPoMwiJetR04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWsWnRn6OVDRRdWEr6YXAfzatdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:88:a0:b7:c5:4c:b7:f1:51:66:a7:36:17:e4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816b169d19fa3950d145d584afa61701fcdab5d1
Validity
Not Before: Nov 15 09:01:19 2026 GMT
Not After : Nov 16 09:01:19 2026 GMT
Subject: CN=cb0187d176a9f721758c5297ead0de41d562a753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1d:34:14:09:6a:f7:82:b9:51:23:07:e3:54:
1d:52:07:b8:77:08:be:2a:4f:56:8b:67:96:e1:83:
53:d5:f1:d0:6b:54:93:2d:bb:2b:cd:49:b8:b0:98:
c5:e5:3a:02:e2:fa:5b:8f:7d:63:df:9d:97:cd:83:
f5:e9:d6:c5:06:a1:13:2a:e5:54:c4:cd:27:d7:b5:
9f:a2:e5:eb:94:86:2b:22:ad:fe:ca:cf:fa:28:35:
fe:f8:cf:d3:54:ec:52:19:1f:1f:ff:f4:70:01:4e:
c4:0c:04:b3:fe:98:f2:6e:72:27:40:42:5e:10:ba:
20:69:ce:99:f1:e1:78:bf:4e:2c:c7:bf:50:20:1f:
20:96:6e:7d:96:41:25:2d:8f:e1:fb:40:1b:70:39:
9f:59:24:09:34:46:ca:87:c4:93:2a:13:e3:0d:9d:
2c:2f:42:3c:2c:dc:c3:5c:5e:f7:ed:eb:68:62:13:
ee:30:e4:e2:01:d4:01:02:79:b3:54:09:f4:a5:a9:
8a:10:78:fe:18:bc:9a:9e:3f:ca:f6:6b:c3:46:be:
c8:51:2d:e4:4d:0f:35:09:3c:1a:37:0b:b1:29:a6:
73:e1:5e:a8:9f:ba:a3:77:5a:3a:c4:20:67:69:6c:
a4:a9:d9:ed:00:b2:4e:59:86:34:a6:b7:89:28:ea:
7d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:01:87:D1:76:A9:F7:21:75:8C:52:97:EA:D0:DE:41:D5:62:A7:53
X509v3 Authority Key Identifier:
keyid:81:6B:16:9D:19:FA:39:50:D1:45:D5:84:AF:A6:17:01:FC:DA:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWsWnRn6OVDRRdWEr6YXAfzatdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ef:20:7c:d8:1d:b1:08:ad:c0:76:22:02:e3:51:1e:9a:5b:
ac:c3:6e:25:be:12:fe:d9:e8:89:eb:9a:26:81:70:f0:73:ae:
27:0e:fd:c1:6d:b2:2f:ce:e1:17:9a:45:5e:e1:e2:9e:e3:10:
db:de:85:a1:fa:21:d1:d0:b7:27:2d:0e:4a:60:ae:95:cf:06:
43:70:41:5f:e5:26:22:1a:5d:69:b2:09:ad:4e:a4:e8:03:74:
7b:a0:ab:77:b5:4e:a6:3a:8b:ca:3d:80:5f:8a:3f:13:ca:76:
02:dc:70:85:07:bf:9e:2d:eb:7b:5b:d1:68:a2:62:d1:89:22:
ba:75:66:bc:c4:2d:af:91:14:bb:ab:91:30:9e:9a:cd:d4:36:
a9:6f:3a:7a:df:b6:4d:77:50:72:f9:50:a8:d7:49:ec:05:0a:
dc:8f:af:35:78:85:de:d2:de:62:0b:8b:fe:0b:4a:02:95:8c:
f9:7c:98:7e:75:27:07:c6:58:45:61:85:1d:d6:3f:d3:4c:7b:
9a:ea:e8:7c:3c:96:08:6f:5d:ec:9d:26:71:84:42:e6:f2:e2:
94:51:1b:67:fc:88:83:d7:6c:34:d4:c8:40:ab:2f:5a:a6:e9:
fb:a8:e0:11:97:1b:ae:a0:ce:3e:a0:a6:58:87:d7:b1:c6:5a:
01:d7:b2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:35:19 2026 by rpki-client