Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
File: gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft (raw, json)
Hash identifier: IC2KDjNNlpLqiW53lVX7jhRH5iwja5qX0mjslvfBscg=
Subject key identifier: 3A:1A:D0:A9:16:64:46:32:1C:DF:8C:FC:EF:A9:3F:C5:72:9A:D3:E3
Authority key identifier: 83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94
Certificate issuer: /CN=83020637e89655e299d91843769254af07714994
Certificate serial: 019CAAC6D5B5AEF52EED82F30BD47D7D46B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
Manifest number: 0CAE
Signing time: Sun 01 Mar 2026 19:01:23 +0000
Manifest this update: Sun 01 Mar 2026 19:01:23 +0000
Manifest next update: Mon 02 Mar 2026 19:01:23 +0000
Files and hashes: 1: gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl (hash: awICWRCqaiFZWy+AdiTTTYw081z4UiNjuBoLlnUBL+Q=)
2: wyOe-kBLzrVKspKdZubryPdenk8.roa (hash: t5x0Z3ogkqDWsaKAMSpmWX7JpOr9Rc3hWNswuA+qbps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:d5:b5:ae:f5:2e:ed:82:f3:0b:d4:7d:7d:46:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83020637e89655e299d91843769254af07714994
Validity
Not Before: Mar 1 19:01:23 2026 GMT
Not After : Mar 2 19:01:23 2026 GMT
Subject: CN=3a1ad0a9166446321cdf8cfcefa93fc5729ad3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:34:7e:0f:f9:0f:7b:ce:69:a0:39:62:3d:
e2:52:d4:bc:4a:12:65:ef:cb:a4:f1:59:ec:58:7f:
1c:9f:84:61:63:d5:62:80:7c:cd:79:2b:08:95:e9:
2e:b6:d1:ca:70:3b:3f:d2:0c:d6:a6:3b:49:c2:32:
e0:a1:fc:f5:24:67:53:b4:dc:02:ad:d9:75:95:3d:
b4:e4:cd:af:9c:80:e6:a4:a5:17:66:79:16:05:c5:
67:a6:52:ad:fd:6d:26:6c:ab:99:bf:09:6d:38:c0:
e6:44:cc:25:02:60:6a:4e:e0:00:44:77:52:57:bf:
7e:74:33:55:1c:36:e6:1e:9a:a4:f9:56:32:81:8c:
ae:ba:87:ed:54:78:55:85:3e:76:e8:03:d9:bd:59:
d2:ba:d0:3d:40:db:ae:1a:20:99:26:98:af:10:ad:
08:cb:d4:41:31:34:5e:99:6b:98:c6:a5:15:d9:10:
db:7e:bd:d5:63:80:28:6d:6e:83:5a:59:3a:fb:13:
11:71:ac:a0:4a:2d:71:c0:3a:0c:4f:69:26:d0:6d:
0c:72:29:5a:d2:12:85:bf:55:92:2c:75:f5:4f:48:
3d:ea:82:25:dd:67:49:b6:f1:30:02:b9:e1:39:29:
df:35:04:be:49:da:ec:f4:6f:e8:26:ff:e1:1e:bf:
f4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1A:D0:A9:16:64:46:32:1C:DF:8C:FC:EF:A9:3F:C5:72:9A:D3:E3
X509v3 Authority Key Identifier:
keyid:83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:39:d5:cc:59:27:79:33:97:0d:de:ff:b6:85:84:30:d2:f8:
c3:42:2d:60:ee:15:4f:b2:5f:2d:cc:06:09:18:26:48:aa:07:
64:03:bd:bd:39:33:36:d9:d1:65:16:42:c8:6c:eb:c8:94:1a:
f4:7f:7f:08:08:c2:14:68:4b:7f:54:e5:7d:be:b2:82:20:d2:
b0:3f:26:f2:01:e0:4e:2c:57:01:57:f6:28:77:6d:49:d4:bc:
29:63:e4:70:07:c1:dd:5d:52:f3:ea:33:b9:6c:14:25:84:3a:
76:64:21:ec:1b:92:0a:7a:ac:16:27:bb:e6:0a:9f:5e:eb:75:
75:6b:ea:23:90:21:33:c8:d0:ff:6e:80:3d:d4:cc:7c:1e:b9:
de:0f:e7:85:a8:c5:71:38:eb:36:dc:d2:27:f6:58:24:c5:fa:
cd:fb:80:21:fb:b7:5d:14:ca:a6:b3:30:99:86:31:51:a2:92:
0e:e6:20:9f:0a:6c:a5:e5:f7:c3:54:b4:49:f9:1a:e2:54:0f:
42:07:f0:40:2f:a5:8b:0f:08:8c:52:f2:d2:c2:f4:e7:db:19:
88:9a:93:20:ad:47:cf:27:77:99:63:fa:9c:08:39:f7:7f:f4:
a7:95:b3:62:74:4a:bd:48:00:88:ca:00:b2:0f:57:4c:4c:83:
e9:24:73:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:15 2026 by rpki-client