Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json)
Hash identifier: fwq8Ngy1xouus9U+opidh4LZHfyQ4fYev7UWo7HSHmk=
Subject key identifier: D2:20:5B:51:48:09:F2:B5:CE:22:E3:16:45:3A:E5:D6:65:C7:CF:DF
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial: 019D9BBE1DED672BBFB1B73C17F0223CAC88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
Manifest number: 03CF
Signing time: Fri 17 Apr 2026 14:00:21 +0000
Manifest this update: Fri 17 Apr 2026 14:00:21 +0000
Manifest next update: Sat 18 Apr 2026 14:00:21 +0000
Files and hashes: 1: DSegnNq3yKblQGxIHXTZ5tulaHA.roa (hash: dLv+A/vc7m1UxOoLmUkd/IJPf2dtcdjA2GKS9KV/zrs=)
2: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: Ou6KBMtYy5NCdkdvitpRmjScU1KNwGndQqJCBUKw6Go=)
3: tWypDnBAIWwZKWJj3d2zrshtc2o.roa (hash: VfkZmkJUOwrgNq3Ww1lzNtYXvW7fLaLXy/GNgbgT52k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:1d:ed:67:2b:bf:b1:b7:3c:17:f0:22:3c:ac:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
Validity
Not Before: Apr 17 14:00:21 2026 GMT
Not After : Apr 18 14:00:21 2026 GMT
Subject: CN=d2205b514809f2b5ce22e316453ae5d665c7cfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:bb:9d:35:11:9b:c6:3f:97:6a:4d:38:31:
6d:5c:5d:a4:0f:b1:56:9e:33:9b:40:57:8d:7e:83:
8e:d7:de:15:05:e7:79:79:cf:c9:1b:8a:41:ba:d5:
aa:4c:d3:77:5c:16:32:8b:c1:2d:3e:44:ca:69:a9:
8b:57:8f:8c:0d:06:85:04:2c:2a:59:da:9c:8b:bc:
b6:a7:82:ff:49:ab:0b:c9:ed:3d:3f:4d:12:5f:41:
f9:eb:3c:40:e2:af:d9:8f:07:ff:13:49:cd:93:0c:
8f:c2:75:17:c9:91:45:2b:47:3e:1e:b2:86:10:7a:
8b:70:ef:16:b0:20:20:24:18:d3:e6:54:aa:53:e3:
92:0f:02:90:a0:ab:a7:61:43:65:ed:a8:29:b0:87:
a7:d5:8c:16:98:2e:8c:78:89:12:a3:88:4e:07:d6:
fd:bc:20:2f:38:6f:9c:bd:68:23:2a:98:4f:8c:e9:
47:99:78:e7:b0:6f:c6:70:02:16:62:61:0c:eb:55:
8d:49:ee:66:22:a3:6a:63:de:ae:1d:73:58:c7:67:
f3:32:c8:0f:59:55:4a:61:a9:b9:09:b7:8e:6b:e9:
a9:bd:9b:5a:0a:20:95:79:f2:0d:8e:19:4a:dd:b6:
02:37:f1:d9:19:87:ff:9f:02:f6:69:b5:b2:9b:5f:
6d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:20:5B:51:48:09:F2:B5:CE:22:E3:16:45:3A:E5:D6:65:C7:CF:DF
X509v3 Authority Key Identifier:
keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:8e:09:ef:d6:ca:a5:44:98:ec:3c:03:49:a8:b4:78:c8:1b:
11:28:19:29:03:8c:66:98:f2:2f:e6:b1:eb:79:a0:c8:ec:e6:
62:55:f1:ce:da:db:b2:ad:5f:33:93:3d:be:8e:25:66:a9:d5:
c4:af:a5:60:cc:94:79:cc:cb:8f:72:e0:05:20:71:14:d9:b3:
0a:48:44:05:47:ff:03:ac:68:18:47:2c:c4:91:dd:24:3f:6f:
ef:8b:f4:fd:d2:a1:58:54:eb:f1:8e:5e:31:5b:7b:e4:bf:58:
9a:38:7a:1a:16:b4:0e:e8:4e:bb:72:cd:c7:d8:38:79:da:2f:
8c:a8:55:d6:a4:da:21:61:ac:77:ca:56:aa:68:d2:b4:6a:f8:
8a:d3:7f:4f:39:59:0d:01:e6:1d:d8:58:34:8b:88:48:b6:f8:
ea:84:6f:b4:c5:ab:13:3d:cb:24:ab:0c:a3:49:ad:14:34:11:
d7:1c:f4:58:3c:f1:80:18:7a:ab:0a:c1:79:30:d1:c4:eb:53:
20:87:9a:cb:98:64:00:77:65:15:7d:6b:e6:2f:88:f3:ff:21:
a2:40:c8:17:77:4a:71:f9:6e:2d:fc:5a:ab:88:d0:e0:03:36:
d8:19:a1:f4:ba:74:42:72:9b:b1:16:83:d9:4a:c4:fc:05:b9:
aa:26:1a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:35:57 2026 by rpki-client