Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
File: gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft (raw, json)
Hash identifier: jj8UKOUZawMLSCgskJ14n0w1WbG88dnR3wh/T3kgFtk=
Subject key identifier: 2A:B0:1B:CF:F7:6F:7F:B5:8D:28:83:78:DE:FC:E4:1B:54:9B:4C:10
Authority key identifier: 81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
Certificate issuer: /CN=8166038385b343d55e76b728efe23c0731787668
Certificate serial: 019CACB4D6ACAD6540E4684CBC2819FC79E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
Manifest number: 1148
Signing time: Mon 02 Mar 2026 04:00:58 +0000
Manifest this update: Mon 02 Mar 2026 04:00:58 +0000
Manifest next update: Tue 03 Mar 2026 04:00:58 +0000
Files and hashes: 1: 8YpwJkM4ApxJ79nY1Tn1a81nlqM.roa (hash: tcShowN5n/wg+sXuZ3o0xwGbFl1QoPNhkaf9D8szQoM=)
2: gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl (hash: bd++mlXiyn0MqchYqrdtNu/UAe4M0KNjj1FYr0TC7iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:d6:ac:ad:65:40:e4:68:4c:bc:28:19:fc:79:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8166038385b343d55e76b728efe23c0731787668
Validity
Not Before: Mar 2 04:00:58 2026 GMT
Not After : Mar 3 04:00:58 2026 GMT
Subject: CN=2ab01bcff76f7fb58d288378defce41b549b4c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f0:db:90:3e:af:cb:47:87:c9:a1:30:1f:ac:
58:5e:cd:1b:eb:96:bf:3c:09:c7:69:79:23:17:cc:
6e:4e:7f:ce:eb:eb:a4:a8:c0:ae:4b:2a:a9:f8:9c:
b4:67:f0:55:b9:4d:f8:4f:48:71:fe:c5:21:9b:69:
66:82:ff:62:41:de:4d:34:51:17:02:81:4b:ba:6f:
04:b5:8c:de:d0:63:72:c9:b3:45:32:b1:dd:24:76:
a2:ad:d4:05:b0:09:5f:fa:01:b5:90:f4:1e:7f:c2:
c0:7c:67:64:a8:58:73:99:87:6f:76:3b:e1:8e:81:
ce:f0:29:d8:13:15:4c:4e:48:dd:72:77:bb:f0:08:
45:ef:77:7c:11:b9:81:32:3e:c0:2d:c5:98:12:8f:
50:5a:8a:ba:44:44:12:24:99:42:61:5e:d2:46:73:
c2:b0:c2:f9:8f:79:c1:b9:66:20:25:f3:66:51:c6:
6a:3e:3e:b1:e7:ec:ab:53:ea:8b:3a:fa:bb:36:f2:
4d:b9:43:9c:e3:ce:06:98:e7:fd:01:b0:c7:e2:57:
e9:5c:64:84:a8:3f:b2:8e:dd:b8:de:a4:4b:17:57:
40:8f:7f:65:b3:93:56:5b:19:8b:0b:c4:bd:cc:5b:
8c:71:9d:33:91:75:92:8b:3c:42:6f:2f:b7:55:03:
89:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B0:1B:CF:F7:6F:7F:B5:8D:28:83:78:DE:FC:E4:1B:54:9B:4C:10
X509v3 Authority Key Identifier:
keyid:81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:74:03:30:47:d7:8e:4b:66:5b:e0:86:d8:2a:63:dd:95:84:
d4:e3:cd:32:d7:d0:77:17:fc:07:80:e0:47:58:aa:71:bf:13:
ff:05:15:e7:ca:91:0b:6b:cc:08:e5:bb:98:f7:72:e1:b2:f7:
66:ad:4c:3b:b9:c0:8d:6b:62:0a:99:8a:9a:76:59:00:64:56:
17:9a:69:7c:00:f6:7f:f2:83:4b:98:0c:79:80:b3:ac:0c:c6:
45:0c:70:89:08:99:7c:29:46:63:b1:61:6e:76:8c:8e:a3:50:
8a:01:04:bf:20:91:04:10:01:47:3f:34:0c:2d:ab:a8:fd:d7:
0e:d4:44:ef:3b:1f:fa:3b:e9:b0:75:e0:51:fa:46:41:28:f0:
64:e8:6a:25:bc:38:33:b3:35:dc:c1:cd:67:04:01:c1:82:ac:
60:dc:af:f1:ad:0e:78:3a:98:80:68:b8:4d:da:ec:ac:ec:a8:
27:0b:3e:1b:0c:18:38:7b:c4:93:3b:a3:11:ed:89:ee:a6:ff:
4c:77:24:22:cf:0d:2e:15:0f:9e:2e:d8:64:96:db:30:67:5c:
4c:f8:08:51:10:7a:e8:ed:4f:2a:a2:71:08:29:fe:c1:fd:a1:
c0:55:36:52:15:25:a7:d5:76:72:1c:46:8d:dc:b0:0f:65:45:
db:65:e6:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystNasrWVA5GhMvCgZ/HnpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNjYwMzgzODViMzQzZDU1ZTc2YjcyOGVmZTIzYzA3MzE3
ODc2NjgwHhcNMjYwMzAyMDQwMDU4WhcNMjYwMzAzMDQwMDU4WjAzMTEwLwYDVQQD
EygyYWIwMWJjZmY3NmY3ZmI1OGQyODgzNzhkZWZjZTQxYjU0OWI0YzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfDbkD6vy0eHyaEwH6xYXs0b65a/
PAnHaXkjF8xuTn/O6+ukqMCuSyqp+Jy0Z/BVuU34T0hx/sUhm2lmgv9iQd5NNFEX
AoFLum8EtYze0GNyybNFMrHdJHairdQFsAlf+gG1kPQef8LAfGdkqFhzmYdvdjvh
joHO8CnYExVMTkjdcne78AhF73d8EbmBMj7ALcWYEo9QWoq6REQSJJlCYV7SRnPC
sML5j3nBuWYgJfNmUcZqPj6x5+yrU+qLOvq7NvJNuUOc484GmOf9AbDH4lfpXGSE
qD+yjt243qRLF1dAj39ls5NWWxmLC8S9zFuMcZ0zkXWSizxCby+3VQOJ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqwG8/3b3+1jSiDeN785BtUm0wQMB8GA1UdIwQY
MBaAFIFmA4OFs0PVXna3KO/iPAcxeHZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1dZRGc0V3pROVZlZHJjbzctSThCekY0ZG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy80OGNmZDAtMzIzOC00YWFmLWI2NjMt
NDM3M2I2NTc5MGI4LzEvZ1dZRGc0V3pROVZlZHJjbzctSThCekY0ZG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy80OGNmZDAtMzIzOC00YWFmLWI2NjMtNDM3M2I2NTc5MGI4
LzEvZ1dZRGc0V3pROVZlZHJjbzctSThCekY0ZG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXQDMEfX
jktmW+CG2Cpj3ZWE1OPNMtfQdxf8B4DgR1iqcb8T/wUV58qRC2vMCOW7mPdy4bL3
Zq1MO7nAjWtiCpmKmnZZAGRWF5ppfAD2f/KDS5gMeYCzrAzGRQxwiQiZfClGY7Fh
bnaMjqNQigEEvyCRBBABRz80DC2rqP3XDtRE7zsf+jvpsHXgUfpGQSjwZOhqJbw4
M7M13MHNZwQBwYKsYNyv8a0OeDqYgGi4TdrsrOyoJws+GwwYOHvEkzujEe2J7qb/
THckIs8NLhUPni7YZJbbMGdcTPgIURB66O1PKqJxCCn+wf2hwFU2UhUlp9V2chxG
jdywD2VF22Xmgg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:49:19 2026 by rpki-client