Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
File: gwelIkrm2akuR-ZW3YAbEP-5Bys.mft (raw, json)
Hash identifier: RKaryY4N8xU4dSjc0n03bcNXMI0/jug3RHz436svk0Q=
Subject key identifier: 8A:27:CB:80:B8:19:39:F1:2A:4C:AB:8D:D5:BC:6B:02:E7:0F:7B:AD
Authority key identifier: 83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
Certificate issuer: /CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Certificate serial: 019EC1EE516E8B3202DC3DB7DA8EE15A1263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
Manifest number: 065A
Signing time: Sat 13 Jun 2026 17:01:21 +0000
Manifest this update: Sat 13 Jun 2026 17:01:21 +0000
Manifest next update: Sun 14 Jun 2026 17:01:21 +0000
Files and hashes: 1: ZDzWeiyu709tNuGqRnvyO4EvWzY.roa (hash: Aqc0xJVhViktXshdlS6mrDC7bH7ONTQwQQYK01Ka00M=)
2: gwelIkrm2akuR-ZW3YAbEP-5Bys.crl (hash: mQ1BMoWH8luHv+BVOzDaYKjKW/AOQmQDEspxKpH7B3Q=)
3: wfxGYWiIUCP6iUkp5_pLsxm1lx4.roa (hash: ArA5MNsGoq16uu1LTXHkSoObxtkAg469b2rN/NS5HFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ee:51:6e:8b:32:02:dc:3d:b7:da:8e:e1:5a:12:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Validity
Not Before: Jun 13 17:01:21 2026 GMT
Not After : Jun 14 17:01:21 2026 GMT
Subject: CN=8a27cb80b81939f12a4cab8dd5bc6b02e70f7bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2b:86:4a:14:26:f8:31:8c:cb:fe:9a:e8:17:
9e:16:a1:91:eb:1a:cc:75:01:84:b5:2c:05:aa:98:
e8:8a:04:06:50:b5:d6:3b:8e:dc:ec:67:4c:16:f5:
68:92:fa:a3:d0:97:2b:19:32:8f:39:d5:6f:88:e2:
7d:14:2e:16:1c:0d:12:98:24:fa:39:2c:e8:1b:6e:
91:c5:14:d7:90:b3:6e:4a:cc:bc:5a:71:c7:97:50:
01:d4:f9:bc:b0:f3:01:c0:c6:f4:09:1b:90:67:7d:
ae:ef:04:cb:e9:7b:78:ae:e5:b4:ad:79:9b:6f:f4:
05:57:78:ac:44:66:63:bd:e5:a8:27:b7:20:fc:1e:
4e:3a:fc:89:8d:24:71:58:11:5d:95:70:b8:be:09:
49:4e:b2:48:9a:d5:52:47:f6:2e:63:e7:ba:4e:21:
51:c3:26:8c:25:05:ef:26:f8:4a:d2:25:2a:0c:0b:
af:a7:92:1d:df:32:13:00:81:94:35:39:c2:8a:0a:
6d:4e:21:9f:09:41:ab:9e:32:33:24:df:69:dc:cc:
30:74:51:e8:d4:64:b7:cb:af:03:d0:11:4f:20:88:
a9:99:f9:dd:94:fb:c3:5d:22:52:cd:53:f1:6b:d1:
23:6c:3e:88:16:cc:5d:d2:00:9c:90:4f:53:7e:7f:
91:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:27:CB:80:B8:19:39:F1:2A:4C:AB:8D:D5:BC:6B:02:E7:0F:7B:AD
X509v3 Authority Key Identifier:
keyid:83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ab:1c:f4:2c:c1:50:1b:ba:17:69:45:41:53:fe:bd:cb:d7:
ef:cc:62:c8:22:f8:e1:b4:85:7c:81:17:95:72:aa:a8:3c:35:
da:f6:3f:c9:4f:ae:2d:35:d5:15:90:19:c7:7a:c3:ad:46:0d:
f8:b9:3f:10:30:8d:ec:be:51:30:e2:c5:77:af:1f:a5:3a:b9:
7f:81:a7:b8:ee:28:d5:51:a4:dc:61:ac:81:ed:9b:77:db:83:
b2:77:6d:3b:7a:4b:76:be:ed:01:17:58:19:fa:d8:0d:06:4f:
8f:94:e1:ba:d8:7a:1c:c8:0f:de:c9:5b:9d:62:da:f2:76:c7:
06:be:0c:8e:19:ee:4c:52:68:42:bd:9a:ff:9a:8e:86:e9:46:
5c:d0:54:55:ba:f8:1b:4b:a3:7b:dd:03:99:67:94:5f:98:2d:
07:00:26:94:00:9f:88:ec:df:1f:66:1e:85:35:e3:6b:dc:4e:
a4:02:25:c8:10:ce:de:da:74:0b:39:24:f6:dc:94:74:78:59:
4a:5a:70:5b:81:18:f8:e1:4b:9f:4c:1f:87:aa:64:ad:ce:40:
c7:a0:c7:7c:16:c0:f7:2d:2a:33:3f:e2:ff:30:fe:41:a0:19:
3e:0b:a3:36:b2:7b:58:f7:7a:93:80:df:4c:86:3f:7c:c3:da:
61:01:18:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:32:40 2026 by rpki-client