Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
File: gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft (raw, json)
Hash identifier: 93VShNwELzPEUVCEmNwwbeWjwio59wQ2AJy4qrZ0z3A=
Subject key identifier: C5:75:8F:2C:46:8C:CF:1C:C4:51:B6:54:B6:AD:E7:98:33:01:B6:C4
Authority key identifier: 81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
Certificate issuer: /CN=8166038385b343d55e76b728efe23c0731787668
Certificate serial: 01A12842F39D1C94BC77E53E121082D93456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
Manifest number: 139C
Signing time: Sun 11 Oct 2026 00:00:38 +0000
Manifest this update: Sun 11 Oct 2026 00:00:38 +0000
Manifest next update: Mon 12 Oct 2026 00:00:38 +0000
Files and hashes: 1: 8YpwJkM4ApxJ79nY1Tn1a81nlqM.roa (hash: tcShowN5n/wg+sXuZ3o0xwGbFl1QoPNhkaf9D8szQoM=)
2: KqXW5eiWEmBqSnw-_aIhCHEUPt4.roa (hash: p/iDfnuzAgEMFkp2Xh+HbNgqmnQt20LPs/9g4uupD6Q=)
3: gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl (hash: mfoKxVI7iNDF/fiJq5wMKDBPkwCorOYDjfJf+Q2lC5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:42:f3:9d:1c:94:bc:77:e5:3e:12:10:82:d9:34:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8166038385b343d55e76b728efe23c0731787668
Validity
Not Before: Oct 11 00:00:38 2026 GMT
Not After : Oct 12 00:00:38 2026 GMT
Subject: CN=c5758f2c468ccf1cc451b654b6ade7983301b6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cf:71:fd:28:5a:b3:4e:4b:0d:3c:89:8d:c3:
7e:a8:ae:aa:0e:ed:08:30:c4:d6:fb:c8:a6:f1:bc:
f3:40:ac:84:65:5a:b4:f7:ee:95:3e:b0:80:05:df:
48:fb:6b:1f:48:c1:ad:0e:8f:eb:13:87:1d:ef:f6:
d9:2a:86:e7:7b:e8:61:b2:4b:cd:74:29:97:f6:86:
1b:b1:85:6c:53:13:c9:ad:ab:df:50:b4:1f:ba:ae:
7b:cb:7e:8b:66:23:e6:e1:d8:62:f2:20:16:af:f9:
10:f0:57:31:24:42:b7:22:88:ab:41:0b:6c:17:ba:
dc:b9:21:cb:14:1a:51:37:cc:ca:93:70:9d:92:66:
34:9c:23:46:a4:22:7e:c5:a5:fd:ba:49:a4:b0:b2:
f2:43:fa:b2:d5:84:12:91:e5:ba:f3:f1:dc:b1:cd:
e9:0c:80:6d:4e:12:2c:50:6c:06:f8:07:4e:46:c0:
1e:8c:62:ac:26:17:0e:a5:e7:ed:d1:4a:05:d8:af:
7b:8b:7a:8d:5f:8e:9d:88:1b:51:b3:a8:04:a3:bf:
b3:99:fa:20:10:89:3b:61:47:43:47:d6:4a:4c:49:
7d:ea:6c:2d:1e:76:85:0b:a4:fb:17:ae:88:c3:dc:
46:d0:77:09:61:85:27:95:0a:e8:8f:75:6e:6a:e7:
63:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:75:8F:2C:46:8C:CF:1C:C4:51:B6:54:B6:AD:E7:98:33:01:B6:C4
X509v3 Authority Key Identifier:
keyid:81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:74:90:e5:6e:e6:e3:70:8b:13:94:13:06:85:f2:be:3a:1a:
a5:86:52:00:18:a0:89:16:04:79:cf:78:c8:38:8e:32:de:8f:
37:40:fe:df:f8:15:63:db:44:c5:a4:0b:c9:13:2f:a8:39:3d:
29:42:23:b1:06:16:17:88:3a:7d:aa:a1:7a:fe:fc:c7:54:4b:
96:6c:f8:a8:5f:8e:f9:ec:7c:b1:36:70:f2:a6:27:78:f6:f0:
9b:d5:4b:d9:98:92:37:a4:65:25:06:27:66:c2:6c:fb:3d:df:
8c:7d:77:f8:07:0e:b7:16:4f:cb:10:3c:1a:53:dc:9d:03:3d:
c3:2d:a6:32:cc:0d:54:a8:ed:b3:cf:d3:f5:6b:4a:0a:9f:9f:
cd:84:26:58:6d:17:e2:94:6c:a2:6e:cc:e6:7b:66:56:3a:0a:
e6:40:ac:f6:39:df:80:2b:dd:ff:5b:93:5a:54:35:f9:ca:6f:
33:53:07:3d:08:bc:dd:1d:b6:bb:c9:e2:61:45:a3:45:66:5a:
b6:ad:c6:94:47:a4:5b:09:f3:72:80:06:fa:3e:5e:6d:cd:00:
98:d5:60:57:38:49:c5:3e:5a:c2:91:37:3a:4d:05:3f:3e:1a:
eb:7d:20:90:27:4c:d6:14:cd:56:a7:ab:20:16:d7:73:a7:68:
e8:1f:1f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:54:17 2026 by rpki-client