Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
File: gwelIkrm2akuR-ZW3YAbEP-5Bys.mft (raw, json)
Hash identifier: t+7aRpfBrCcmZCZurilWUtLR3hjVOdMC452YOVxGwNc=
Subject key identifier: F4:2A:5B:0D:6B:FC:F8:7E:9B:BD:1A:14:3D:F2:4F:6E:2A:2D:3A:A3
Authority key identifier: 83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
Certificate issuer: /CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Certificate serial: 019CABD9034F34BA6AB093BA9062DC33F64C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
Manifest number: 0545
Signing time: Mon 02 Mar 2026 00:00:51 +0000
Manifest this update: Mon 02 Mar 2026 00:00:51 +0000
Manifest next update: Tue 03 Mar 2026 00:00:51 +0000
Files and hashes: 1: RdWRv5Q-rS2yC6uCgBMcFMzrMv8.roa (hash: fI9arYNvAPfUyU+E39rZuBfMlHVUr8jzRqIJWE8wtJ8=)
2: gwelIkrm2akuR-ZW3YAbEP-5Bys.crl (hash: pIFya2LIDvJcgZ9ZBKCoNikVgJvt3JUOn57qgvQr69g=)
3: wfxGYWiIUCP6iUkp5_pLsxm1lx4.roa (hash: ArA5MNsGoq16uu1LTXHkSoObxtkAg469b2rN/NS5HFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:03:4f:34:ba:6a:b0:93:ba:90:62:dc:33:f6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Validity
Not Before: Mar 2 00:00:51 2026 GMT
Not After : Mar 3 00:00:51 2026 GMT
Subject: CN=f42a5b0d6bfcf87e9bbd1a143df24f6e2a2d3aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9b:56:f2:1e:b3:d1:c4:8d:2a:8d:d5:c7:41:
31:ea:d9:9d:4c:25:46:74:03:d3:38:4e:4a:28:b9:
e5:40:33:07:02:c0:b1:f6:8d:68:fa:f5:34:88:65:
7d:09:1d:50:a4:12:6f:91:d3:f7:b6:21:b7:e0:bd:
52:b3:60:2b:36:da:aa:ec:84:96:dc:f8:37:e5:98:
f7:a9:f2:03:c1:08:81:9b:31:1e:ec:4a:d0:f5:a8:
0d:17:bf:f7:97:05:bc:6e:63:7c:b6:4d:ed:a3:61:
4f:04:d7:54:ee:a0:17:07:e3:ff:8c:42:4b:6b:e0:
15:27:1a:cb:28:b9:99:3e:64:0d:34:98:12:54:50:
6e:48:e3:c3:ec:0d:41:e5:7e:80:36:2c:38:e6:e3:
fe:b5:bc:e2:1c:44:96:65:d6:a7:6e:06:10:24:77:
da:38:4a:1d:46:d7:ad:e8:34:04:7e:f6:37:34:dd:
93:3b:a7:92:f4:e7:c7:37:ce:23:b4:2c:6a:ff:fb:
ca:73:ad:e1:1d:76:04:6e:85:4a:2b:da:0b:08:b3:
e2:e4:47:13:37:c9:01:a8:a2:90:31:8d:29:b3:bd:
1c:c8:41:69:1b:f0:09:6b:47:56:c7:96:c9:e8:01:
e9:75:1f:bd:e5:eb:42:61:be:e8:03:78:91:59:95:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2A:5B:0D:6B:FC:F8:7E:9B:BD:1A:14:3D:F2:4F:6E:2A:2D:3A:A3
X509v3 Authority Key Identifier:
keyid:83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d0:79:fd:ea:92:38:28:26:d1:c0:70:cc:ae:ca:31:29:49:
bf:92:fe:f9:07:c8:30:3a:d5:c9:59:7d:99:0b:51:a3:0f:de:
2c:ab:cc:8c:99:30:8a:0a:59:e0:96:a1:6b:bd:b7:4e:0b:b8:
c8:4a:ee:e2:73:4d:74:de:dd:40:9b:30:d0:e0:bb:97:2b:b6:
c2:a5:98:31:1d:22:34:a3:95:1d:9d:8b:49:92:a0:57:3b:04:
f3:ac:3c:d5:20:d4:49:2a:e1:4f:d0:ef:f9:7d:77:0c:3a:88:
82:0e:a9:df:85:3b:07:1a:7c:d7:d6:84:c0:16:c8:f8:88:fd:
0b:56:05:c6:74:f6:40:74:7f:b8:9b:f4:fc:25:91:0c:c4:00:
ae:9a:70:35:25:8c:25:1f:e2:8f:ff:d1:1b:0d:65:1f:4b:6c:
78:8d:21:61:06:d9:2c:72:f0:ae:3c:1b:31:96:cb:33:85:d4:
db:07:ff:2d:57:de:5e:65:c5:18:c4:bc:2f:d7:eb:52:5b:da:
b4:0f:b7:39:13:57:ab:ef:98:96:fe:49:d8:86:dc:6c:70:74:
cc:84:01:8f:ee:c4:30:47:29:50:3d:0d:73:9b:a7:58:25:bd:
ac:be:16:90:35:3c:1a:f2:b6:4f:4d:67:d6:ea:55:32:ec:83:
5e:d4:10:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:08 2026 by rpki-client