Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json)
Hash identifier: OIWFj3wOGkGA7IOFhbSTLzmK8Wx4RWzE+KFRHj5IN/c=
Subject key identifier: D8:78:34:95:A3:FE:BB:68:10:87:06:2F:4C:65:26:16:BD:71:54:03
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial: 019FAC0868ECBCA0C45B5AD7ED2E762E47B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
Manifest number: 04E2
Signing time: Wed 29 Jul 2026 04:01:00 +0000
Manifest this update: Wed 29 Jul 2026 04:01:00 +0000
Manifest next update: Thu 30 Jul 2026 04:01:00 +0000
Files and hashes: 1: LacuVLpbO3Mjs8bUfA4L-mMlUbU.roa (hash: gKgqt+xB14y4tjX9J2jVn1Ajs6kkgwnL+2zmYJeQx68=)
2: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: tcNFm5C10luT9K/bpoNKGCDy6Yz82i3lB8klZAUYBlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:68:ec:bc:a0:c4:5b:5a:d7:ed:2e:76:2e:47:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
Validity
Not Before: Jul 29 04:01:00 2026 GMT
Not After : Jul 30 04:01:00 2026 GMT
Subject: CN=d8783495a3febb681087062f4c652616bd715403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:c4:8e:75:2d:e1:e7:b8:fc:3e:d4:dc:3b:
fc:fa:a1:28:6b:ff:e8:9c:94:88:cf:f6:00:03:04:
1a:4b:f8:7d:ce:a4:c1:91:a8:ee:e0:de:55:3a:c4:
a4:c3:a7:cc:ae:d7:fd:c1:7c:8c:c4:89:f6:89:29:
44:94:f5:90:66:ec:46:97:46:84:13:24:30:d2:9f:
f3:2e:22:02:ff:c4:0a:87:be:a5:39:9b:c1:56:0c:
3c:75:cf:da:30:5b:a1:2d:c9:78:ec:e3:85:68:b0:
92:0e:ba:c4:22:ee:ee:af:75:84:44:c8:dd:3b:9d:
01:ed:6e:3b:28:5a:c7:a0:bb:8d:4b:7b:5d:ee:b6:
39:50:4d:ad:4d:d8:91:e8:8b:48:e1:2d:99:25:39:
0b:bb:a7:08:62:ce:3c:f8:65:27:5a:35:16:5e:c0:
2e:a4:95:e5:d1:72:91:4d:93:31:3e:72:70:e0:74:
a2:48:b5:69:ce:4d:c0:78:7a:3a:27:8a:4f:9e:7f:
5d:53:09:a9:d3:b7:38:b3:cb:2a:9a:5d:45:59:b0:
3e:cc:5b:73:eb:fe:86:8c:2c:fa:8e:19:e3:6d:68:
50:8a:e1:b3:71:eb:86:30:ce:67:30:1f:30:1d:16:
a0:25:56:db:60:cf:9a:f7:69:aa:04:41:3d:43:05:
64:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:78:34:95:A3:FE:BB:68:10:87:06:2F:4C:65:26:16:BD:71:54:03
X509v3 Authority Key Identifier:
keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:59:bc:11:9e:b8:1b:42:cc:f1:37:7f:59:7c:18:28:d4:eb:
4f:c4:b3:d3:3c:d5:f7:71:0b:f4:4e:2b:ec:18:3e:a1:4d:8c:
ea:d1:11:e4:11:5f:5e:e6:d8:19:de:40:17:58:6a:bb:7b:c6:
40:84:22:ba:29:97:83:07:d6:6f:b3:37:03:32:76:de:ec:ca:
92:0f:63:9a:96:c3:69:84:13:58:f1:40:a6:99:d6:ab:f7:85:
63:e7:53:5d:4e:68:e6:ed:ea:48:fd:46:0d:4e:17:fe:d5:be:
8a:04:35:00:8a:68:37:18:e2:92:ba:6c:e2:56:20:32:3a:10:
7e:4a:db:24:e4:29:ae:be:eb:6d:57:e4:9c:02:1a:d0:95:13:
c8:ae:8e:c7:7e:00:dc:90:fc:34:fd:ec:be:07:fa:e7:1f:68:
df:75:e6:14:bb:12:97:49:67:59:5a:b1:ef:bb:ef:87:b4:ec:
a8:53:25:a3:91:d3:6e:85:52:ad:d9:75:9f:1c:70:5c:b5:be:
c2:59:78:29:cd:e1:7e:1a:9c:ef:1c:f4:24:cb:f6:2a:c4:6f:
88:7f:11:5a:86:78:05:7c:9b:27:75:03:c1:f5:d0:9a:06:68:
c3:cc:ad:58:65:5a:f3:42:6f:74:83:ac:e5:d5:f8:97:8e:3c:
66:e5:e4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:14:13 2026 by rpki-client