Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
File: gwI7OXBbNFqG7_PxTvax5NtFk54.mft (raw, json)
Hash identifier: BVOfTscGrHsXCwIds0nARVJX0j2BMFJje01kMrgj1RY=
Subject key identifier: 42:E4:15:6F:F5:DD:C7:58:E2:64:A2:D1:3D:4B:6B:AF:C8:CC:FB:11
Authority key identifier: 83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
Certificate issuer: /CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Certificate serial: 019E26CA594B33A1194FB7B9CDE8F9F848CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
Manifest number: 11A2
Signing time: Thu 14 May 2026 14:00:55 +0000
Manifest this update: Thu 14 May 2026 14:00:55 +0000
Manifest next update: Fri 15 May 2026 14:00:55 +0000
Files and hashes: 1: RR2Qpipy3CGQZUMFDoxapCCswEU.roa (hash: gIn0IJGSqUa3PXsu1U1OGftRLBAw7A/4NhM17NLvsb4=)
2: gwI7OXBbNFqG7_PxTvax5NtFk54.crl (hash: m4fKrdTOiLz7cNGEHcPhqujs5kOdYETSUjaDr6sW9RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:26:ca:59:4b:33:a1:19:4f:b7:b9:cd:e8:f9:f8:48:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Validity
Not Before: May 14 14:00:55 2026 GMT
Not After : May 15 14:00:55 2026 GMT
Subject: CN=42e4156ff5ddc758e264a2d13d4b6bafc8ccfb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:c9:b0:40:f3:06:b7:96:2c:d0:94:be:fc:ca:
79:a2:c3:04:3f:d0:ad:d2:8f:70:e2:cd:e2:42:80:
66:9e:72:5e:2e:8e:43:cb:d1:55:90:08:1b:c5:32:
84:37:a2:de:d0:46:db:78:0c:26:0d:f5:98:b2:88:
b7:56:ad:90:a1:ff:69:bb:2c:71:b8:9e:6b:fb:db:
88:9e:57:3f:22:53:09:97:90:93:2e:02:9c:83:b7:
ea:04:1a:40:3b:2a:d7:76:6b:a5:33:6c:1d:e0:37:
b0:b0:25:f4:36:28:ae:53:9c:ff:92:e1:32:83:23:
ab:98:7c:9e:49:7f:cb:b1:c9:7f:9d:67:38:cb:c2:
c2:81:8e:43:18:57:6b:e7:b4:aa:66:22:92:18:3a:
19:68:03:50:65:44:9b:27:25:9e:17:1e:78:86:f6:
cc:49:80:d7:5f:5f:19:53:bf:59:dc:42:07:a7:98:
52:fe:7f:47:19:be:fd:c5:f8:35:3a:4d:f0:4a:56:
aa:58:85:59:5c:67:78:77:13:51:6e:d6:ae:a7:50:
0c:a5:0e:c4:ab:73:49:bc:d3:50:0d:86:5c:c5:78:
1b:fd:96:45:ad:e7:23:1c:e4:10:0d:70:3d:55:e2:
ff:31:78:97:06:90:fb:5b:2d:86:de:fc:81:bc:1f:
8e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E4:15:6F:F5:DD:C7:58:E2:64:A2:D1:3D:4B:6B:AF:C8:CC:FB:11
X509v3 Authority Key Identifier:
keyid:83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5b:b6:a3:95:d9:d3:c3:fa:2f:ce:0b:00:b7:58:e9:64:cd:
e7:32:fb:cf:dc:3b:e2:8d:4b:c8:f1:b9:e7:9c:64:03:cd:1a:
c6:dd:e5:80:cb:79:d8:67:88:b5:e1:21:33:09:03:02:4b:67:
34:1d:74:ea:31:a4:07:3a:b7:a5:43:68:16:51:e8:90:7e:9a:
25:c8:a5:89:c6:47:65:72:d3:8f:25:f4:20:13:96:66:56:b7:
1e:de:45:4e:75:43:aa:ac:36:c1:24:74:23:e5:21:39:d8:e7:
23:22:7d:9a:b4:b9:8e:b9:13:d3:2b:d4:e3:d7:ad:3a:d0:fb:
da:f6:a9:4b:db:68:8b:b7:5c:b3:e6:af:ab:a5:e6:72:7f:2b:
24:18:bd:2e:2d:bd:75:8f:56:68:25:15:10:e1:db:4b:07:51:
23:7a:cb:20:d0:af:af:49:d9:b9:6f:2e:e3:ae:bb:28:12:af:
3c:99:9a:50:2f:e9:ea:14:8a:b6:55:de:46:69:8a:0c:85:76:
84:23:57:a3:59:eb:71:c1:53:b9:1a:0a:fa:ff:cd:ff:00:aa:
9b:05:0c:0c:6c:e5:65:8b:22:4a:4a:52:c9:4d:b3:e9:91:9c:
fd:c5:3e:09:32:ad:90:62:79:19:a6:d8:33:7e:e6:c6:91:5b:
7f:aa:a2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 20:26:38 2026 by rpki-client