Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
File: xVfBW97s57ChtHfh4O6L_1P6_gw.mft (raw, json)
Hash identifier: aC6sWcPiukOtTJDnepnb4eq9o6lsFu/eo4fva1BQWpo=
Subject key identifier: 3D:E2:F6:88:8B:66:2A:51:73:EE:E8:BE:62:05:D3:47:65:7D:77:FD
Authority key identifier: C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
Certificate issuer: /CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Certificate serial: 019DA3E62D3CC36C695EA3A979E3B0049098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
Manifest number: 0455
Signing time: Sun 19 Apr 2026 04:01:04 +0000
Manifest this update: Sun 19 Apr 2026 04:01:04 +0000
Manifest next update: Mon 20 Apr 2026 04:01:04 +0000
Files and hashes: 1: hKf_RdYBNL00n5n-6RG-3ope_pY.roa (hash: i1hoGLnlnqGNDkEnX87y4lBEOlUW/mrfMdJ23VxMPJA=)
2: xVfBW97s57ChtHfh4O6L_1P6_gw.crl (hash: GjKcefKqC+EUhN0FzvcBjv1d6DnftZjlHakfWKBu5r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:2d:3c:c3:6c:69:5e:a3:a9:79:e3:b0:04:90:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Validity
Not Before: Apr 19 04:01:04 2026 GMT
Not After : Apr 20 04:01:04 2026 GMT
Subject: CN=3de2f6888b662a5173eee8be6205d347657d77fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:ed:7e:aa:31:4b:a0:19:73:4c:bc:d8:ad:
18:27:0f:68:5f:8c:8b:48:e0:10:c1:ac:00:d7:2a:
db:1a:e4:54:25:25:99:59:61:59:31:07:78:f5:0f:
35:f7:14:14:d0:17:e5:32:a0:00:f5:eb:94:85:df:
78:df:dd:97:67:a1:e1:c1:d3:85:1e:22:eb:00:d1:
38:6b:cd:02:59:ac:a8:fb:bb:09:53:b7:d9:a6:0e:
3c:e4:5f:0c:58:f9:ec:42:cb:3b:62:e0:8c:4e:4f:
3e:78:d8:95:2a:a7:be:41:57:cb:2d:e4:bb:1f:a8:
1b:8d:93:f7:bc:f0:63:59:dd:60:6b:08:f0:27:5e:
db:24:7b:db:78:ad:77:4d:8b:16:f6:d0:9c:18:7f:
fb:1a:b4:6c:2e:d0:e4:28:fd:03:3b:da:c8:38:eb:
4d:f8:be:9a:97:9d:24:a7:fe:13:4d:17:b6:21:45:
d3:e9:cf:05:ec:ad:e2:cd:e4:50:9f:e7:87:00:fd:
9e:dc:61:11:39:dc:6e:d2:f6:21:df:5d:6e:ce:f2:
9b:be:30:83:09:56:f2:c4:5c:59:a2:7a:38:dd:06:
2c:fe:ae:3d:4b:e8:81:da:b7:37:89:13:f3:46:77:
b8:ab:bd:74:96:bd:ab:23:21:b7:d6:b6:aa:f7:8b:
e8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E2:F6:88:8B:66:2A:51:73:EE:E8:BE:62:05:D3:47:65:7D:77:FD
X509v3 Authority Key Identifier:
keyid:C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b7:58:8a:5f:c6:40:c3:be:03:95:dc:27:38:04:3c:2f:6e:
8f:14:a9:66:15:b8:41:ea:4f:47:9c:e3:0f:40:77:9a:93:06:
83:d7:33:80:22:56:76:36:b9:75:33:ac:b5:7a:69:7e:2b:2d:
a8:73:83:9d:c0:72:e3:36:67:6d:4f:3e:e7:73:05:2b:65:dd:
02:9f:15:0c:ea:2c:1e:c0:38:b6:ee:32:7b:4e:37:f0:db:81:
81:84:6f:c6:70:5e:a6:1d:75:fb:07:45:f0:a2:09:bf:45:5b:
88:93:85:20:1b:9f:79:9d:b4:bf:da:71:cd:7a:92:b1:26:5e:
58:13:ac:21:e4:bc:5b:2f:ad:ef:d5:5e:be:c7:11:12:96:a6:
33:02:b5:f4:20:e2:b2:3a:a6:82:f8:a5:54:29:2b:ba:34:40:
ff:29:c7:f0:0e:e3:8e:fb:68:a7:5f:83:a2:f3:94:ee:62:10:
ab:92:ac:e5:31:f2:01:e2:47:b8:ee:7c:ad:a1:ac:49:96:bb:
d5:55:82:37:3c:7d:69:27:5c:79:b4:36:cb:5c:f0:06:ab:0b:
23:c5:03:07:c7:ac:16:eb:c1:8b:48:86:16:c3:d4:52:e3:71:
50:bb:99:69:32:e5:42:c3:a8:99:34:26:2e:8a:af:6c:07:37:
4a:11:77:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:44:27 2026 by rpki-client