Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json)
Hash identifier: RpKDJ9rrH9U74owQ6Dwg1jX3f8Zjb/akzO6solbN4R8=
Subject key identifier: 2B:04:F7:38:69:F1:D5:0A:09:71:53:BD:A2:47:AC:A8:20:4C:34:AD
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial: 019CAC469C85DC52B954E2AB44262785E0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
Manifest number: 0353
Signing time: Mon 02 Mar 2026 02:00:34 +0000
Manifest this update: Mon 02 Mar 2026 02:00:34 +0000
Manifest next update: Tue 03 Mar 2026 02:00:34 +0000
Files and hashes: 1: DSegnNq3yKblQGxIHXTZ5tulaHA.roa (hash: dLv+A/vc7m1UxOoLmUkd/IJPf2dtcdjA2GKS9KV/zrs=)
2: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: 2oHm5tR20Jst1iQ2GehoSBx/ugoygo2AiqZ0q48KkvI=)
3: tWypDnBAIWwZKWJj3d2zrshtc2o.roa (hash: VfkZmkJUOwrgNq3Ww1lzNtYXvW7fLaLXy/GNgbgT52k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:9c:85:dc:52:b9:54:e2:ab:44:26:27:85:e0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
Validity
Not Before: Mar 2 02:00:34 2026 GMT
Not After : Mar 3 02:00:34 2026 GMT
Subject: CN=2b04f73869f1d50a097153bda247aca8204c34ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:67:b5:ea:92:27:f6:fc:72:6b:4f:76:fd:dd:
7f:fd:97:a5:7a:1d:ba:f4:14:34:24:a2:03:1c:c6:
61:cc:cb:4a:2d:7c:1d:02:86:4e:20:c5:f6:87:71:
19:3b:ce:4d:8c:2d:b6:48:95:1b:2e:fd:65:c6:79:
46:21:ab:7f:f2:41:02:49:8f:30:67:c1:60:c0:1d:
60:ef:39:35:6c:54:b7:54:6f:03:a6:33:14:eb:36:
f4:a4:cd:26:ed:0a:54:88:73:69:b0:b9:86:06:be:
20:4e:b0:8a:72:52:1b:4d:56:02:d0:a4:d6:38:1a:
13:57:32:81:34:55:dd:a7:29:b3:b5:5b:2c:68:25:
46:5d:74:fa:10:71:65:4f:88:91:34:d7:df:c1:7d:
68:4f:4d:10:87:3c:c8:27:cb:af:9f:77:8a:01:10:
ed:6f:fa:64:40:96:da:c7:fb:1a:d8:21:b9:b8:48:
45:fc:52:1c:a7:6c:f4:dd:b1:b6:d3:2b:4f:be:de:
37:6f:15:74:55:87:6e:76:cd:8a:e4:f3:07:b3:48:
ba:6c:3b:a0:0c:a6:8f:fb:ed:16:95:a5:01:6d:1d:
2c:81:4a:b3:ed:8f:60:15:a0:b1:f4:0a:20:77:d3:
af:84:23:c9:92:ce:5e:38:d6:6a:8e:da:4c:24:43:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:04:F7:38:69:F1:D5:0A:09:71:53:BD:A2:47:AC:A8:20:4C:34:AD
X509v3 Authority Key Identifier:
keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:db:6c:1f:3c:5d:ef:c7:b9:8d:48:c7:83:73:a8:9c:c4:ca:
f5:b6:da:55:7a:7c:2d:c5:c3:3a:1c:33:de:34:5f:bb:a3:41:
ae:80:16:ec:e3:55:72:cc:f5:6a:ee:fd:2e:70:c9:60:d1:e5:
a9:26:72:8e:e2:79:83:99:2d:e0:74:df:78:57:53:00:7f:97:
51:9a:13:de:0e:f8:fd:02:b5:9e:94:6a:90:f1:3f:93:ad:85:
94:dc:7b:ac:e1:7b:15:dd:ac:4d:a1:38:c5:5a:2d:d3:97:83:
a7:25:9d:71:92:1a:ec:d0:76:7b:bf:b9:9a:2d:45:b8:dd:9a:
b6:fe:e1:ac:e2:1c:18:c2:90:eb:d0:de:73:6d:18:d3:d0:49:
f7:0f:9a:75:f9:5d:8e:ef:17:ed:f8:d1:5e:9f:41:7e:11:85:
1c:5f:f2:bf:d9:02:12:de:7e:57:72:df:ec:23:20:15:d8:48:
68:02:3e:f1:fd:6f:03:2b:09:c7:37:0e:d7:a6:b7:9d:66:c2:
d6:c6:27:cb:b0:26:18:8e:ce:18:9f:84:c2:72:1f:1c:d8:06:
56:fb:b9:dd:a5:56:56:7d:24:11:78:c2:80:d9:21:88:0b:e5:
96:0d:f9:b4:cc:74:16:b4:48:f6:43:09:2b:e4:41:76:c1:07:
f0:33:2e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:35 2026 by rpki-client