
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
File: xVfBW97s57ChtHfh4O6L_1P6_gw.mft (raw, json)
Hash identifier: MD28ylKx/n4kFGJoi64UHZ63xpYSkuOjYrFntOtxnJM=
Subject key identifier: EB:3F:EF:F9:B2:9F:C3:3E:5A:0B:7A:EF:EA:85:C7:ED:C6:98:23:08
Authority key identifier: C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
Certificate issuer: /CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Certificate serial: 019CAAC66D7ED490A2FA6C07F89ED5FA5791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
Manifest number: 03D4
Signing time: Sun 01 Mar 2026 19:00:56 +0000
Manifest this update: Sun 01 Mar 2026 19:00:56 +0000
Manifest next update: Mon 02 Mar 2026 19:00:56 +0000
Files and hashes: 1: hKf_RdYBNL00n5n-6RG-3ope_pY.roa (hash: i1hoGLnlnqGNDkEnX87y4lBEOlUW/mrfMdJ23VxMPJA=)
2: xVfBW97s57ChtHfh4O6L_1P6_gw.crl (hash: Ss66rdwc8eAinjrhVO/F0Or6GnRz6XuDMFpTmGXdPEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:6d:7e:d4:90:a2:fa:6c:07:f8:9e:d5:fa:57:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Validity
Not Before: Mar 1 19:00:56 2026 GMT
Not After : Mar 2 19:00:56 2026 GMT
Subject: CN=eb3feff9b29fc33e5a0b7aefea85c7edc6982308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:f8:4c:28:d0:f0:f2:31:a7:b9:82:9f:ad:
ac:f7:36:59:ea:4e:e8:07:ea:dd:f7:90:7e:40:5e:
a8:07:65:9e:99:7c:6c:8a:e4:c2:bd:f4:62:68:28:
e7:4b:e0:49:88:ca:c9:74:dc:ca:8b:4d:a3:95:89:
2c:b4:d2:79:dc:b4:a2:f5:4d:91:9a:3c:2e:49:4c:
a7:94:68:96:af:c5:76:9a:51:4c:ff:d3:bb:3e:a1:
2c:90:97:3d:8d:8b:f8:1f:29:a9:89:c1:81:d8:93:
6d:91:c2:32:13:87:0d:2b:9c:5f:46:b4:c6:85:b2:
45:e5:c1:90:fd:21:1f:2f:b8:01:cd:43:be:94:70:
36:9e:a2:c9:92:78:df:4e:eb:7e:2e:98:ca:ad:f2:
3a:47:a8:ad:d0:34:4a:c1:a1:d7:77:d5:79:6a:36:
e2:33:38:cd:31:a6:ca:f2:3b:4c:56:0e:ab:b8:ab:
c4:41:bc:bf:5b:98:b9:8b:a1:9e:cc:89:0f:e1:f1:
67:8b:68:10:d9:72:cc:6a:68:be:e1:c3:df:6a:c6:
14:b9:3b:e2:90:65:12:d2:f5:31:ae:2f:59:59:c7:
96:d1:75:23:aa:37:4d:b5:16:7a:0a:ab:7f:4f:b1:
3d:56:20:e5:e1:b2:fe:1a:ba:b6:bf:f6:04:f2:44:
20:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3F:EF:F9:B2:9F:C3:3E:5A:0B:7A:EF:EA:85:C7:ED:C6:98:23:08
X509v3 Authority Key Identifier:
keyid:C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:52:91:9a:12:ec:c4:34:57:f9:8c:44:59:d7:f1:7a:c7:ea:
31:72:42:ee:f1:02:e2:1c:10:32:ff:79:a6:0d:a0:a2:23:f7:
c1:aa:48:ff:3a:3c:a6:b7:0a:02:5d:34:84:0a:22:f8:de:95:
63:3e:30:12:78:c8:7a:0d:6b:96:4f:96:84:1a:16:24:b2:9c:
54:f9:7d:33:30:05:f7:0b:72:88:3b:ba:d5:12:43:7c:80:f2:
dd:c1:94:5d:63:61:fd:45:47:db:e2:27:f6:9e:b1:07:ed:27:
fb:a1:40:e5:b5:6a:57:86:2e:4f:2b:c6:45:c8:61:1a:2b:b9:
0e:15:44:6a:6a:ec:d4:d2:e4:c2:56:53:09:72:75:2b:47:93:
8b:12:71:ac:3e:fc:5d:d0:d2:b9:b8:0a:5b:51:f6:90:e3:d7:
63:ab:d5:75:79:c3:d9:38:22:be:17:1d:bf:ae:9b:16:b2:3c:
89:70:8a:95:45:92:4a:37:a4:36:7a:75:66:f7:75:3d:63:a2:
c4:89:d4:a2:ae:1e:9e:b5:7e:5a:36:c6:75:06:29:26:77:fd:
75:36:a8:ff:4d:2b:3e:ea:da:9b:04:37:e5:70:e1:db:83:1c:
49:67:48:82:ec:aa:84:a5:ed:87:3c:6a:e2:57:53:2e:d8:59:
1a:bd:be:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:52:31 2026 by rpki-client