Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.mft
File: gWsWnRn6OVDRRdWEr6YXAfzatdE.mft (raw, json)
Hash identifier: PZJ7hbnHHfoKxDIFGOterER9cHeWfg5Qj5uHFFfnUTU=
Subject key identifier: 25:1A:37:9A:6C:6E:F1:BA:55:A7:BB:25:F5:74:0D:03:68:4F:2A:E5
Authority key identifier: 81:6B:16:9D:19:FA:39:50:D1:45:D5:84:AF:A6:17:01:FC:DA:B5:D1
Certificate issuer: /CN=816b169d19fa3950d145d584afa61701fcdab5d1
Certificate serial: 019FA8992A27A62E7CA3505D07B017B7A93A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWsWnRn6OVDRRdWEr6YXAfzatdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:37 +0000
Manifest this update: Tue 28 Jul 2026 12:00:37 +0000
Manifest next update: Wed 29 Jul 2026 12:00:37 +0000
Files and hashes: 1: NStI2c33ELu1MdgMNr4ASro5yxg.roa (hash: DGIV6y9JcITViqGIDqZJzNdiLNbdNYRRHPqeCBc+BJY=)
2: SzV7YXB0I-v32buFZVhcBfuK4b8.roa (hash: 9Bg/sMGFQWNrP6cNVtWMxuP3OzfvHUrPEKBcUfgdp5M=)
3: gWsWnRn6OVDRRdWEr6YXAfzatdE.crl (hash: 7PLzQC0JhQTcyCzWwcsuSvZ8HATjKHaYxG9cmvdwSb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWsWnRn6OVDRRdWEr6YXAfzatdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:2a:27:a6:2e:7c:a3:50:5d:07:b0:17:b7:a9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816b169d19fa3950d145d584afa61701fcdab5d1
Validity
Not Before: Jul 28 12:00:37 2026 GMT
Not After : Jul 29 12:00:37 2026 GMT
Subject: CN=251a379a6c6ef1ba55a7bb25f5740d03684f2ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:ff:ef:74:e4:b2:7f:d5:3e:09:57:89:1d:
32:f9:5b:b9:92:a6:37:c2:19:6e:a9:5c:71:04:f7:
c8:02:8c:c1:64:25:59:0b:86:7c:c5:27:52:c3:97:
87:70:f7:14:51:66:fa:7f:46:36:5d:cd:d4:6a:59:
d5:e3:49:79:08:6e:85:41:97:2e:1a:64:eb:50:4c:
48:0c:ec:05:54:ab:5e:04:62:60:19:f6:b7:cc:73:
87:25:da:db:f9:8b:13:b0:5f:d8:a9:0e:ac:94:b2:
d4:2d:0d:6e:2b:07:d2:a9:cd:d1:2f:be:d3:65:6d:
e0:cd:96:48:d0:a5:de:83:28:ed:d1:ee:b5:21:13:
51:c7:90:a5:94:1a:b6:09:8f:18:d2:f4:7b:e8:2d:
cd:31:74:cf:ec:4d:91:57:f6:84:e3:b5:f8:7b:a7:
2b:3e:95:b1:18:f0:da:5e:ad:6e:6f:6e:64:fd:0d:
b2:84:69:1f:d5:ca:31:e2:04:c0:36:2a:84:11:dc:
aa:10:53:aa:fd:c5:a9:1f:ee:61:ff:a6:7e:32:e5:
5c:b7:48:e7:a9:db:1a:91:0a:a4:91:7d:57:27:cd:
f5:bb:c0:b6:3e:4f:eb:b4:4a:01:13:90:fc:11:9c:
e9:8f:3d:d4:b0:ea:42:c3:4a:00:71:47:24:d7:98:
95:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1A:37:9A:6C:6E:F1:BA:55:A7:BB:25:F5:74:0D:03:68:4F:2A:E5
X509v3 Authority Key Identifier:
keyid:81:6B:16:9D:19:FA:39:50:D1:45:D5:84:AF:A6:17:01:FC:DA:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWsWnRn6OVDRRdWEr6YXAfzatdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:54:59:16:e7:14:96:cd:e2:c6:b7:78:84:a1:db:75:fc:ce:
96:14:2f:e5:ed:84:72:be:f7:36:c6:c7:b4:46:5c:7b:6e:54:
d8:2c:85:9f:3c:da:d5:41:9b:ca:5b:f5:1e:13:11:1a:d1:2e:
0a:d6:4b:60:6b:cb:91:8d:45:91:09:e2:af:a3:5b:52:a5:ec:
9e:75:5b:54:eb:60:d5:d1:59:13:36:7d:76:9c:d3:05:a1:ab:
3e:56:05:45:91:3f:09:de:ef:55:2a:14:7f:04:4c:0e:d2:2d:
b2:2a:11:68:a4:06:bc:76:4a:85:c3:42:77:a8:63:70:5a:d3:
92:83:8c:7c:8c:04:0a:88:3c:7b:4c:26:f0:79:94:c3:a1:65:
fd:83:63:c1:eb:d1:98:4b:f4:e6:b0:69:a5:95:34:65:0a:b9:
03:5f:ca:aa:a7:ea:f7:62:db:bf:74:15:20:55:69:bc:11:f7:
42:64:a6:7d:14:2f:4f:55:f9:9f:91:e4:6b:7d:25:69:dd:e3:
fb:6f:b7:3a:82:9e:00:2e:9a:55:b6:b5:f3:8e:88:1d:00:b0:
36:7a:88:0b:66:00:61:fb:86:93:82:93:62:ae:cc:a0:70:37:
03:7d:4c:52:56:89:48:a1:74:1a:be:11:35:98:c5:85:61:23:
83:6b:2c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:41:04 2026 by rpki-client