
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json)
Hash identifier: WQkiSDLRElwDuXSvnLlwQyRV0vgOfOo4bZGIQYfFNCQ=
Subject key identifier: 9C:07:C6:E1:21:D0:61:4B:22:A4:C5:69:15:CC:26:EB:86:77:15:6B
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial: 019EC148AF04CEDA37C1DBF4D5EA1D9D6047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
Manifest number: 0467
Signing time: Sat 13 Jun 2026 14:00:26 +0000
Manifest this update: Sat 13 Jun 2026 14:00:26 +0000
Manifest next update: Sun 14 Jun 2026 14:00:26 +0000
Files and hashes: 1: DSegnNq3yKblQGxIHXTZ5tulaHA.roa (hash: dLv+A/vc7m1UxOoLmUkd/IJPf2dtcdjA2GKS9KV/zrs=)
2: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: aGxLHXjMru1e71FeQqnHZG9aBaFHgz7W63k/nVHNOxM=)
3: tWypDnBAIWwZKWJj3d2zrshtc2o.roa (hash: VfkZmkJUOwrgNq3Ww1lzNtYXvW7fLaLXy/GNgbgT52k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:af:04:ce:da:37:c1:db:f4:d5:ea:1d:9d:60:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
Validity
Not Before: Jun 13 14:00:26 2026 GMT
Not After : Jun 14 14:00:26 2026 GMT
Subject: CN=9c07c6e121d0614b22a4c56915cc26eb8677156b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ed:ab:c5:90:44:de:be:09:f5:ad:cb:f1:81:
f4:9b:7d:eb:64:d2:08:2b:c5:99:4d:16:6a:42:53:
6a:51:bc:25:c1:2d:54:65:62:a7:f6:73:3c:c8:21:
74:3c:07:c9:f3:1e:0a:24:8d:b2:54:5d:a2:7d:eb:
ad:38:b6:b8:71:4e:2c:91:45:ca:a9:7d:5e:16:4c:
38:d9:e0:02:46:fe:95:0c:c4:4a:46:16:fa:bb:ab:
df:17:c8:2d:b8:9b:c3:fa:1b:b3:20:14:71:da:b5:
4a:60:f4:78:35:b5:24:f4:de:38:5b:b1:89:d0:18:
42:8f:a1:1e:d4:f1:a8:46:a5:0b:c2:83:93:77:b9:
1a:65:4f:14:1b:ff:8d:c9:9a:31:47:cf:28:a3:1e:
db:7a:52:29:37:e2:ce:ac:3a:84:70:aa:de:f5:5f:
32:55:ea:86:9f:61:77:37:29:01:76:35:8d:11:df:
65:3f:7c:3f:57:ed:48:bb:c9:8a:97:ec:9e:98:ae:
e8:63:69:ac:e7:2e:aa:7b:4d:55:2a:4f:46:5c:7d:
a0:00:90:f3:86:13:9b:f2:30:7a:fd:3c:ab:c2:da:
33:b8:ca:0c:82:7d:9b:4b:82:5f:f3:1d:90:73:20:
2f:b6:59:35:33:8a:44:73:6e:49:97:f9:dd:22:11:
41:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:07:C6:E1:21:D0:61:4B:22:A4:C5:69:15:CC:26:EB:86:77:15:6B
X509v3 Authority Key Identifier:
keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1a:f2:4f:fc:fb:03:e9:95:19:a1:f5:5c:ce:8c:94:0b:78:
a0:4f:cb:bc:ef:07:50:47:76:e2:fd:9a:f7:3d:85:4f:0b:ff:
43:4a:dd:44:bf:9e:03:d6:f7:3b:27:a6:8c:f0:7e:a6:d6:1e:
9c:07:d3:0e:16:d7:17:a9:fd:5e:ea:77:38:77:56:5f:a9:c2:
ba:ee:a9:0e:13:0e:76:1c:ff:03:93:92:0a:72:10:ca:05:f2:
f3:70:3e:c5:50:a0:65:16:79:8a:b4:00:a9:c9:26:e2:6a:47:
a0:12:97:ab:66:4d:db:4e:03:90:c4:2f:42:53:ad:f5:f2:be:
ad:fd:b7:8f:81:bb:25:a5:02:a7:f8:10:fe:d8:a3:6e:07:48:
2d:65:65:64:80:50:29:69:12:19:0a:8f:31:60:af:0e:26:ec:
54:78:e4:a7:ae:90:11:7e:ed:18:92:f5:2a:c1:1f:ff:4b:8a:
23:83:df:55:12:dd:3a:d1:2f:18:eb:d2:57:c0:1c:04:44:32:
e2:c8:16:f4:a4:48:65:cc:f8:0b:cd:3f:03:13:bb:b0:a2:f9:
02:ad:67:a8:bf:9e:b8:c5:d8:a5:4a:0d:05:10:52:13:c9:f3:
05:8a:1f:da:56:c7:7d:56:df:e4:97:dd:57:45:58:f8:76:09:
42:f1:62:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:58:09 2026 by rpki-client