Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
File: gWaEopWOAZDycKgKmHiTGeHO5Ng.mft (raw, json)
Hash identifier: avnTbEl/5Siu8icTpb68Rh+DKhNp2gOXOtI710YGoKw=
Subject key identifier: 34:AF:8E:98:15:B1:81:0D:86:9E:E8:B9:40:2C:CF:57:12:89:A7:BF
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Certificate issuer: /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial: 019D661AB5F1945052EFA823FD3016184E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
Manifest number: 18AC
Signing time: Tue 07 Apr 2026 04:01:59 +0000
Manifest this update: Tue 07 Apr 2026 04:01:59 +0000
Manifest next update: Wed 08 Apr 2026 04:01:59 +0000
Files and hashes: 1: NZ202JDARGMozqemjOm18XWqeB4.roa (hash: EMsYlcYoxjdRaOpIk5ySMPKn2gsFMeYDx9Ik13Whe1E=)
2: VizEqnthMjQ52TLR8h7x9BYDAIM.roa (hash: 41b89AhKzVApaqcIg1s1Z2VRJk8VnvLCBhm/gL3LlSM=)
3: gWaEopWOAZDycKgKmHiTGeHO5Ng.crl (hash: asUJVT6+k8Vxvm7x3FJ/73o23X8PBYzd7fe3XksC1Yc=)
4: jOzeQvG-CSKEb84_kKnAL1PAC6Y.roa (hash: CUYbXow71FwfWTHYT6HzHF7ERdH4KcdRAJs9h9PrlE4=)
5: loP1-9Yxdj4AbH_rrSqa5GcHgiQ.roa (hash: M03ifXkLsZpfGj/FUbAJuSvBmjEYd8yCYHsKRiZZ6dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:1a:b5:f1:94:50:52:ef:a8:23:fd:30:16:18:4e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
Validity
Not Before: Apr 7 04:01:59 2026 GMT
Not After : Apr 8 04:01:59 2026 GMT
Subject: CN=34af8e9815b1810d869ee8b9402ccf571289a7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:3a:83:a9:d3:89:0e:24:cf:1f:6f:18:8b:
35:d8:20:a8:22:d3:37:86:ae:cc:0e:10:df:8e:c0:
72:25:09:62:87:fb:48:86:db:42:90:f7:eb:8d:08:
b6:a9:7e:6e:be:1b:d5:44:b9:c1:63:eb:0f:f8:3a:
20:6d:26:f3:7d:bc:49:5b:64:aa:bf:28:50:fa:a5:
33:65:68:e9:99:0b:a2:40:a9:a5:12:e4:a8:7c:0b:
15:e2:53:dc:51:cf:1d:fd:27:89:9b:58:63:72:ef:
a3:0c:21:47:cc:8f:c0:a7:78:51:f9:3e:bf:55:b9:
68:dc:2c:ad:83:32:95:bd:4d:ff:33:3e:53:e9:81:
e9:0a:6c:73:36:c2:08:d0:d4:f4:67:43:e1:7e:93:
69:e2:77:b8:3c:14:17:83:40:28:cb:64:57:07:2a:
4a:93:29:04:53:1a:32:73:2a:15:62:bb:92:fe:61:
68:3c:f1:91:ee:9c:79:81:3f:bd:e8:c7:8d:a0:65:
7b:33:9f:45:d4:67:33:3e:56:16:ca:3a:b3:0c:cc:
bd:84:dd:5b:76:6b:aa:0f:b8:bf:68:3b:52:a6:ee:
6e:65:94:d3:f9:d9:a9:73:4f:03:c5:a6:34:9c:59:
8b:f8:c9:66:35:e7:30:61:df:1d:fe:05:61:d5:89:
54:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AF:8E:98:15:B1:81:0D:86:9E:E8:B9:40:2C:CF:57:12:89:A7:BF
X509v3 Authority Key Identifier:
keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ce:a2:90:15:a9:f6:a6:c6:f1:31:0e:c9:49:50:a3:be:6e:
9a:a4:ed:02:9a:62:9e:56:93:d5:69:c9:42:98:e4:e8:48:79:
12:6e:37:80:4a:af:f7:fb:5c:ae:48:ac:b1:7e:86:b1:0c:e4:
8b:2f:41:0b:47:1f:af:08:a1:73:14:f7:b6:8f:85:4b:0e:fc:
67:0c:29:f3:82:4b:d3:72:d3:1c:c6:95:de:36:73:55:1e:5b:
49:01:72:3b:c7:da:b2:c3:32:3e:b5:03:15:bc:39:59:d4:7b:
2a:67:e1:ec:45:14:ad:e1:57:01:5d:a8:f3:be:fe:24:15:bf:
0c:ce:fc:bd:67:39:3c:46:38:cd:db:df:b1:ab:41:de:d5:08:
d7:ba:68:54:c9:dd:21:61:4d:6f:d7:29:1e:14:38:a9:49:c8:
bd:2b:50:f6:ad:35:9a:c7:d4:b2:27:3e:45:90:d3:8f:f8:4e:
12:2a:87:31:25:e9:1c:51:f8:8e:23:8f:34:7a:66:08:4d:8e:
64:cf:a2:8b:6d:c2:58:5e:2f:91:7c:ab:51:5a:2f:e3:19:76:
7e:65:0c:8e:33:3e:dc:b5:79:ec:f5:d1:23:81:a4:64:11:b7:
c6:00:b3:08:f2:72:e7:f5:07:81:3f:6a:53:dc:89:67:9c:11:
e1:40:65:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 12:08:33 2026 by rpki-client