Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
File: gWZdbPJtk3SE27RjN0PgZX7M3F4.mft (raw, json)
Hash identifier: tpK0E+CpblSjPJJo/bB9OGr2045j36MYTfKCPpW3Il8=
Subject key identifier: 97:DB:4C:A1:A3:67:56:82:C8:DB:CF:04:73:95:3A:0B:CC:47:4D:9A
Authority key identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
Certificate issuer: /CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Certificate serial: 019CAA21A437519F2DFE9EF9E64CD67C2DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
Manifest number: 1813
Signing time: Sun 01 Mar 2026 16:00:57 +0000
Manifest this update: Sun 01 Mar 2026 16:00:57 +0000
Manifest next update: Mon 02 Mar 2026 16:00:57 +0000
Files and hashes: 1: 5st_HHpLD54WE6_4L8XNFgUjL_w.roa (hash: JHjXO9P1p0iqaGPwSoXPmKvMaRiV2yvxi6yn0kC2stg=)
2: gWZdbPJtk3SE27RjN0PgZX7M3F4.crl (hash: /ihwXiuW/8hr0hFe35dA6o/HI/hl4T7ONi1X8PC7Csk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:a4:37:51:9f:2d:fe:9e:f9:e6:4c:d6:7c:2d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Validity
Not Before: Mar 1 16:00:57 2026 GMT
Not After : Mar 2 16:00:57 2026 GMT
Subject: CN=97db4ca1a3675682c8dbcf0473953a0bcc474d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:48:23:d0:f0:2c:a2:99:a6:60:c8:c8:a4:69:
d0:0d:b3:1b:63:db:37:0c:9b:e1:f1:af:5c:71:0f:
1e:8b:55:74:29:b6:fe:67:f1:aa:d2:47:06:c8:06:
11:7f:fd:d2:fa:9a:00:14:62:db:74:95:af:be:6c:
cd:b4:99:0d:1c:c6:59:1a:d5:02:b3:9d:1d:94:85:
4f:4c:e0:18:d6:3f:e2:e1:b8:85:4f:95:d2:ef:41:
46:2f:c4:bb:db:aa:21:35:7c:a3:c9:84:ca:dc:9f:
af:ce:40:72:97:3c:43:53:0d:f9:da:c7:94:e0:ee:
21:72:ba:ea:4f:93:8e:2b:5a:04:57:d3:39:8a:4b:
fb:04:62:27:6c:ce:22:27:3f:52:c1:3a:ab:f6:94:
d9:40:ef:32:56:5b:d1:58:7f:2e:b3:08:0b:a5:0a:
0d:a9:2d:d1:3d:96:d0:b0:be:97:91:e0:43:29:3f:
6c:67:ae:ea:66:8c:f5:29:94:19:62:88:9a:37:5e:
60:a6:5d:69:e0:2d:2b:ab:da:41:f3:89:b1:49:a7:
3f:86:ca:c5:82:b1:6f:af:75:cb:d3:32:16:8f:5c:
a8:a2:eb:24:18:e1:a1:49:b6:e1:ff:f0:26:31:28:
41:f4:26:88:d9:c5:b2:c6:93:24:0d:1d:08:1b:6e:
9f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DB:4C:A1:A3:67:56:82:C8:DB:CF:04:73:95:3A:0B:CC:47:4D:9A
X509v3 Authority Key Identifier:
keyid:81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:06:4a:4d:83:79:4c:19:ca:17:90:6d:0e:6b:ad:28:1e:86:
68:ec:25:1d:07:d6:2e:59:b0:38:39:4c:f6:06:90:7e:bd:24:
b1:e8:5c:f3:5f:ad:c8:fc:aa:fa:cd:69:65:f2:95:e2:53:c2:
a0:a9:ba:95:57:f4:d0:cf:a4:69:7c:ef:87:87:cf:18:da:4e:
88:58:a1:e9:04:c5:0e:ab:cf:7d:5c:cf:e4:e7:ee:4a:ff:9c:
8d:3c:25:81:a7:45:68:4b:e3:22:a3:59:d9:a3:26:fc:93:ec:
85:eb:e1:4c:f6:ed:4f:ea:ed:1e:83:1c:f1:9b:12:1b:c2:64:
5e:a0:9c:46:4f:d8:98:84:84:d1:3f:90:0b:cc:e6:fc:56:34:
6b:61:9b:85:ac:65:ea:1b:00:f3:bc:13:ba:15:7a:ba:50:ae:
76:0f:95:29:bf:2a:ed:fa:6c:69:1f:af:ca:18:ab:c2:56:44:
3c:dd:b0:52:b3:27:d8:46:5e:47:f7:dd:25:df:58:80:f2:e8:
c1:cb:9b:ba:53:2b:77:f8:22:59:19:49:79:36:ec:ea:0c:a7:
50:ed:5b:4a:2b:de:a7:ac:c8:5a:d1:05:ac:b7:58:30:10:a0:
ab:4f:27:a4:56:c4:9b:10:56:eb:62:8b:4c:92:a0:10:84:30:
f2:2a:cc:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIaQ3UZ8t/p755kzWfC3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNjY1ZDZjZjI2ZDkzNzQ4NGRiYjQ2MzM3NDNlMDY1N2Vj
Y2RjNWUwHhcNMjYwMzAxMTYwMDU3WhcNMjYwMzAyMTYwMDU3WjAzMTEwLwYDVQQD
Eyg5N2RiNGNhMWEzNjc1NjgyYzhkYmNmMDQ3Mzk1M2EwYmNjNDc0ZDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEgj0PAsopmmYMjIpGnQDbMbY9s3
DJvh8a9ccQ8ei1V0Kbb+Z/Gq0kcGyAYRf/3S+poAFGLbdJWvvmzNtJkNHMZZGtUC
s50dlIVPTOAY1j/i4biFT5XS70FGL8S726ohNXyjyYTK3J+vzkBylzxDUw352seU
4O4hcrrqT5OOK1oEV9M5ikv7BGInbM4iJz9SwTqr9pTZQO8yVlvRWH8uswgLpQoN
qS3RPZbQsL6XkeBDKT9sZ67qZoz1KZQZYoiaN15gpl1p4C0rq9pB84mxSac/hsrF
grFvr3XL0zIWj1yoouskGOGhSbbh//AmMShB9CaI2cWyxpMkDR0IG26fOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfbTKGjZ1aCyNvPBHOVOgvMR02aMB8GA1UdIwQY
MBaAFIFmXWzybZN0hNu0YzdD4GV+zNxeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1daZGJQSnRrM1NFMjdSak4wUGdaWDdNM0Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wMGY2NmItZmU4My00Y2NkLTgyZWUt
YzU2ZjA1ZGEzZDI1LzEvZ1daZGJQSnRrM1NFMjdSak4wUGdaWDdNM0Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8wMGY2NmItZmU4My00Y2NkLTgyZWUtYzU2ZjA1ZGEzZDI1
LzEvZ1daZGJQSnRrM1NFMjdSak4wUGdaWDdNM0Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQZKTYN5
TBnKF5BtDmutKB6GaOwlHQfWLlmwODlM9gaQfr0ksehc81+tyPyq+s1pZfKV4lPC
oKm6lVf00M+kaXzvh4fPGNpOiFih6QTFDqvPfVzP5OfuSv+cjTwlgadFaEvjIqNZ
2aMm/JPshevhTPbtT+rtHoMc8ZsSG8JkXqCcRk/YmISE0T+QC8zm/FY0a2Gbhaxl
6hsA87wTuhV6ulCudg+VKb8q7fpsaR+vyhirwlZEPN2wUrMn2EZeR/fdJd9YgPLo
wcubulMrd/giWRlJeTbs6gynUO1bSivep6zIWtEFrLdYMBCgq08npFbEmxBW62KL
TJKgEIQw8irM8A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:47:35 2026 by rpki-client