Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json)
Hash identifier: Zejmwoiu8vMDQwmUJX+ZKAp33l7hdRl7PrwmG6h0laY=
Subject key identifier: 13:99:5F:CA:BD:0F:78:12:B9:92:4E:1E:C6:8C:40:C6:F2:9C:93:E5
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial: 019CAE3500183171431E37C09265927A033C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
Manifest number: 0354
Signing time: Mon 02 Mar 2026 11:00:34 +0000
Manifest this update: Mon 02 Mar 2026 11:00:34 +0000
Manifest next update: Tue 03 Mar 2026 11:00:34 +0000
Files and hashes: 1: DSegnNq3yKblQGxIHXTZ5tulaHA.roa (hash: dLv+A/vc7m1UxOoLmUkd/IJPf2dtcdjA2GKS9KV/zrs=)
2: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: YgAbf4cVhIE5dh8pQXocC7mSH4qBds0qtmdGMeDRd3s=)
3: tWypDnBAIWwZKWJj3d2zrshtc2o.roa (hash: VfkZmkJUOwrgNq3Ww1lzNtYXvW7fLaLXy/GNgbgT52k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:00:18:31:71:43:1e:37:c0:92:65:92:7a:03:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
Validity
Not Before: Mar 2 11:00:34 2026 GMT
Not After : Mar 3 11:00:34 2026 GMT
Subject: CN=13995fcabd0f7812b9924e1ec68c40c6f29c93e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:a6:d6:ce:ae:04:d8:ba:43:30:45:f6:6d:
98:77:40:e5:34:6f:58:63:fc:2f:17:67:d9:91:e8:
0a:d8:67:90:35:92:9b:33:b0:4e:a5:3d:fd:b8:b9:
2d:d1:7b:63:23:5e:1c:c2:c4:d6:31:7e:57:23:25:
e2:e6:5e:e8:09:6b:52:a4:ff:c9:71:7c:bf:2a:fe:
c7:93:2e:7a:14:d8:f9:3e:a6:bb:bb:d0:cc:f7:2f:
05:d2:26:25:5e:7f:4c:e0:6c:77:aa:4d:7e:b8:01:
60:6f:0c:5d:98:37:c8:29:7a:1d:77:da:2e:5e:01:
9d:68:c9:9a:3c:08:db:d2:f7:72:5a:70:18:c1:34:
d9:a9:f9:32:3d:d5:77:7d:3e:04:96:e8:0a:3c:de:
04:b3:0e:c6:9c:8b:a7:35:53:29:7b:93:9c:9b:8a:
b0:f5:6d:f0:75:dd:9f:00:b1:48:d8:4f:6e:1e:1a:
9b:55:54:1a:af:a5:57:86:40:77:32:4c:57:5a:a2:
c8:c8:a2:0d:0a:5f:42:ad:c4:1e:da:fb:e6:92:67:
bc:3b:06:16:d9:52:f6:c5:b7:98:c0:9d:0b:22:3c:
13:33:39:23:ce:b9:1d:a9:96:fb:ff:48:04:0e:85:
93:ec:f3:f8:db:76:f1:54:e0:75:fe:99:c9:37:3a:
a3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:99:5F:CA:BD:0F:78:12:B9:92:4E:1E:C6:8C:40:C6:F2:9C:93:E5
X509v3 Authority Key Identifier:
keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4c:06:55:65:bd:ce:d2:a9:f0:b6:f2:17:06:8c:38:34:73:
fe:b0:fc:28:d0:d5:ce:2c:63:3c:36:fc:4c:54:31:22:a4:9c:
01:87:d3:c7:31:29:80:a3:b3:a2:73:dd:99:12:ce:31:ce:3b:
fe:ce:74:2d:04:bd:5f:16:8e:95:d4:da:f9:d4:52:fc:c1:64:
7a:86:09:ee:56:22:51:e6:36:cd:fa:ab:12:ef:f4:45:6d:34:
13:a1:4f:d7:35:35:68:09:c0:21:c1:97:1d:b7:4b:2f:f1:0f:
42:f2:9e:f6:50:b7:dd:df:13:99:02:33:bd:7a:a4:55:cc:eb:
da:99:0d:91:c5:73:b4:20:db:97:b5:62:14:d8:c9:78:a9:3c:
e8:84:da:f5:80:fe:0b:ec:62:fa:3d:3d:c5:1c:fb:58:9f:fd:
70:6b:7d:5a:57:9e:71:06:28:7a:05:01:07:1d:b1:37:7e:a9:
e3:45:b0:ec:d9:d4:f6:50:20:9c:4a:9a:33:ac:68:71:6b:b9:
fe:a6:c2:ec:74:c1:ac:76:71:0d:91:06:ec:b1:c3:81:f9:6c:
09:2b:ed:3a:eb:ae:4e:b5:cf:a5:f1:75:50:10:ee:ee:b7:8c:
1c:99:98:3a:cc:90:fe:13:60:0f:8e:66:88:fb:fb:ee:63:1f:
56:f8:e6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:26:21 2026 by rpki-client