Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
File: gwI7OXBbNFqG7_PxTvax5NtFk54.mft (raw, json)
Hash identifier: R2SNxBcqCXSRISn8cnh6xURCyiC96lZpWQ1TE1jLBWA=
Subject key identifier: 0B:0B:29:D0:3F:69:FF:6C:FA:DB:87:E2:E8:9A:43:0C:8A:0A:05:FC
Authority key identifier: 83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
Certificate issuer: /CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Certificate serial: 019D3F0C060720CC3A9A57E01C0407B8CDBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
Manifest number: 112A
Signing time: Mon 30 Mar 2026 14:00:45 +0000
Manifest this update: Mon 30 Mar 2026 14:00:45 +0000
Manifest next update: Tue 31 Mar 2026 14:00:45 +0000
Files and hashes: 1: RR2Qpipy3CGQZUMFDoxapCCswEU.roa (hash: gIn0IJGSqUa3PXsu1U1OGftRLBAw7A/4NhM17NLvsb4=)
2: gwI7OXBbNFqG7_PxTvax5NtFk54.crl (hash: WhUgJP2ZnTTZUdJQQRXp7A12kMwWliwtvkJcCnBXN8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3f:0c:06:07:20:cc:3a:9a:57:e0:1c:04:07:b8:cd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Validity
Not Before: Mar 30 14:00:45 2026 GMT
Not After : Mar 31 14:00:45 2026 GMT
Subject: CN=0b0b29d03f69ff6cfadb87e2e89a430c8a0a05fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:98:b4:fa:f3:da:34:ad:92:57:15:95:17:
c5:e8:67:3f:d3:2c:1e:68:5e:d9:e3:68:1b:38:9c:
3c:78:5c:0e:01:cb:05:ea:b5:57:28:d7:08:1e:dc:
ea:2c:6b:5c:31:22:89:3b:c4:1f:b0:62:e2:40:54:
24:8e:17:9c:3e:c9:0c:e6:51:c3:18:e9:f5:95:31:
83:38:57:7d:73:af:6f:8d:e9:20:aa:c7:13:c6:d6:
86:39:6b:6b:3e:d0:52:f4:69:72:2d:14:69:7a:57:
a9:6c:bc:01:d9:84:04:ea:73:f4:56:11:8c:52:26:
d3:5b:a8:87:34:38:31:5c:ac:4c:c7:2e:ee:c9:45:
1b:d7:03:6e:30:ce:2a:0b:b6:5e:29:09:f1:6b:50:
63:7e:cf:57:ae:c4:2e:13:a8:dc:61:c1:68:d2:89:
3d:88:5f:df:54:78:00:fe:3c:75:91:39:28:9f:48:
45:66:d7:fb:b2:d7:79:6a:33:ad:ff:48:5b:f8:d4:
a3:fb:e6:5c:f1:4b:a1:c7:0c:de:5b:39:57:6a:e6:
bb:59:61:85:53:67:ab:42:7a:8b:6d:d4:be:86:f1:
bf:f2:77:1b:1c:e1:de:ef:53:d6:55:1f:9a:50:05:
43:05:d5:59:78:9e:4b:f1:79:e3:de:86:b0:29:ef:
09:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0B:29:D0:3F:69:FF:6C:FA:DB:87:E2:E8:9A:43:0C:8A:0A:05:FC
X509v3 Authority Key Identifier:
keyid:83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:6f:7f:f4:65:9f:40:a4:96:db:f5:ab:6c:79:2d:13:9b:1f:
c2:15:60:f1:b8:91:30:bb:7b:07:db:87:af:64:e1:43:ac:68:
cb:25:0b:a1:3b:fd:98:42:7d:95:5c:35:77:81:60:55:60:ee:
87:d6:f7:89:50:0c:a7:0a:ed:fa:96:48:0e:72:c1:39:a2:9a:
b6:75:7b:81:05:5e:b1:e2:f7:bf:4e:93:8e:ed:66:07:1d:fe:
fd:28:27:17:47:5b:9d:53:99:95:02:be:0e:86:dc:2b:32:bf:
c8:e9:f6:c6:d1:a0:e9:1d:95:b7:01:db:52:05:ce:30:b1:13:
54:3f:2c:80:04:06:57:ae:6d:53:c3:9a:5d:70:8f:74:27:8d:
3e:e0:e4:cc:9e:37:ba:da:08:72:9c:d6:c9:96:68:c6:e3:c4:
1a:f7:c6:26:b6:d6:dc:6a:d3:ab:67:76:db:06:d6:66:b1:eb:
12:97:a2:6e:31:d1:00:92:fd:a7:fe:7f:0c:50:64:8b:a6:97:
d4:d1:dc:64:0c:0d:fe:ca:6b:78:96:d5:f2:c0:9f:87:6c:4a:
71:ae:c5:aa:16:c7:5b:ad:cf:39:8e:7d:56:84:cb:a4:86:6d:
19:81:91:64:2e:b3:c7:c3:7a:e1:bb:8f:16:c0:95:96:bf:18:
67:20:e5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 17:44:42 2026 by rpki-client