Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
File: gwelIkrm2akuR-ZW3YAbEP-5Bys.mft (raw, json)
Hash identifier: nvlSn9f3ZQxRo9LKvjD0hCkIVs0X5plmvggG/mHyWi4=
Subject key identifier: 85:BA:44:22:FE:26:0B:06:C8:52:3D:A3:A6:7F:13:35:F4:58:67:B5
Authority key identifier: 83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
Certificate issuer: /CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Certificate serial: 019D996318933A9401B852065F57A94881CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
Manifest number: 05C0
Signing time: Fri 17 Apr 2026 03:01:41 +0000
Manifest this update: Fri 17 Apr 2026 03:01:41 +0000
Manifest next update: Sat 18 Apr 2026 03:01:41 +0000
Files and hashes: 1: RdWRv5Q-rS2yC6uCgBMcFMzrMv8.roa (hash: fI9arYNvAPfUyU+E39rZuBfMlHVUr8jzRqIJWE8wtJ8=)
2: gwelIkrm2akuR-ZW3YAbEP-5Bys.crl (hash: VXR7ZSdm1H3olNi/7PT3bTHrUtWZeZbOplV62Fh4CAs=)
3: wfxGYWiIUCP6iUkp5_pLsxm1lx4.roa (hash: ArA5MNsGoq16uu1LTXHkSoObxtkAg469b2rN/NS5HFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:18:93:3a:94:01:b8:52:06:5f:57:a9:48:81:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Validity
Not Before: Apr 17 03:01:41 2026 GMT
Not After : Apr 18 03:01:41 2026 GMT
Subject: CN=85ba4422fe260b06c8523da3a67f1335f45867b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7d:e0:23:86:9f:b5:d1:31:20:9a:44:cf:20:
27:91:02:7f:22:ab:6b:2d:1d:1a:f3:42:17:94:fb:
32:e6:f1:06:fa:4c:19:67:9d:f7:59:40:17:5c:a2:
e9:bc:b5:82:eb:37:52:c0:e2:70:76:02:1f:cc:1a:
9c:09:82:54:b0:d5:14:c9:18:a4:53:b7:d2:55:0d:
b1:58:fc:52:6a:77:6b:ef:7e:3e:07:7a:e6:6f:e2:
7c:86:e9:9a:8f:58:58:61:bd:8f:8a:13:cf:a4:b3:
f2:4f:eb:e5:76:e6:98:bd:28:b1:00:c4:e9:61:b9:
ab:09:0a:4d:ab:c8:12:e7:36:15:57:4b:6d:8c:89:
8f:1a:88:0f:0c:48:0b:90:60:9e:20:8b:5d:52:66:
f4:21:1c:ec:87:49:64:f2:bc:3d:dc:a0:4f:25:ff:
68:cb:95:3b:68:61:07:fb:fb:c5:6d:c5:ab:20:6a:
b7:1d:72:6d:ab:8e:70:e1:f5:3b:39:6b:d9:a9:6b:
58:1b:cc:13:40:27:7b:36:57:fa:b1:78:28:e8:59:
1f:30:e7:68:50:8f:7e:1a:56:1e:06:8b:55:0e:7c:
a1:31:e7:a5:b9:01:86:78:27:34:58:e3:b9:d6:53:
4e:5c:98:33:99:16:cc:2a:cf:a8:76:91:01:e6:56:
3e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BA:44:22:FE:26:0B:06:C8:52:3D:A3:A6:7F:13:35:F4:58:67:B5
X509v3 Authority Key Identifier:
keyid:83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:84:af:6f:1a:3c:9f:5e:de:c7:09:0e:bb:f9:b7:b9:55:73:
85:97:72:d0:67:2c:6a:d5:43:2c:7a:3d:56:42:50:de:ee:16:
bc:91:89:be:b4:e0:f5:15:e7:05:ce:dc:b5:34:a0:6a:90:2c:
8b:a0:88:49:3a:9c:2f:34:93:25:94:47:d9:29:f3:03:b5:fb:
8f:2a:e9:d6:b9:07:3d:8d:ef:61:7e:f9:60:b5:0b:80:d2:b0:
eb:26:03:4e:f6:94:e3:85:ce:98:bb:36:53:c6:b0:55:7f:8b:
68:41:76:9c:c8:b3:7c:b8:f2:67:7f:e4:50:81:a4:23:81:77:
fc:08:c3:31:4d:d0:95:e0:24:51:7b:53:6a:af:5d:e3:f0:f5:
3a:39:e1:14:20:52:a0:e2:66:67:ff:63:49:44:36:e2:14:31:
36:15:b5:8e:8f:53:4b:4a:82:6b:63:18:03:76:a1:1c:a6:0b:
42:4c:d5:89:ce:86:23:7f:cd:ec:6f:3f:1d:7a:71:71:78:8a:
39:55:be:38:38:47:a2:2a:cd:c7:1a:9f:02:5e:db:07:7b:15:
26:11:f4:2d:a1:73:e4:a3:d3:97:c4:0c:0f:3a:35:9d:21:15:
5f:05:d2:90:56:da:62:a0:90:df:ee:30:5c:46:7d:08:ad:93:
e5:fe:c4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:05:16 2026 by rpki-client