Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
File: gwI7OXBbNFqG7_PxTvax5NtFk54.mft (raw, json)
Hash identifier: HP5Ao6sMDoUy/kJpeHsN2fYxAHGA7iTojtf8IymlGx4=
Subject key identifier: 81:90:1D:30:0B:76:A0:74:CF:03:13:24:DD:20:40:1B:3C:3C:68:50
Authority key identifier: 83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
Certificate issuer: /CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Certificate serial: 01A10B14670FB1F206E751A92BFDC8B68FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
Manifest number: 1324
Signing time: Mon 05 Oct 2026 08:00:48 +0000
Manifest this update: Mon 05 Oct 2026 08:00:48 +0000
Manifest next update: Tue 06 Oct 2026 08:00:48 +0000
Files and hashes: 1: JAzqT-1i6473RmwqyvfoRU9VLkw.asa (hash: 25jfvXdrTMOEDVc4X728q//3lY8GOSHtbJIe1scysq8=)
2: a93YW-wZAJe5MHAmUYJrwXY9g9Y.roa (hash: Ju0cDTvmaNPFoApexH/ky9j3jD4JO12JHg8M+/2SiiM=)
3: gwI7OXBbNFqG7_PxTvax5NtFk54.crl (hash: doIJvwo0dyG3MuWIcEjQTb+61jW1UvRLNwED/rIQsSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:14:67:0f:b1:f2:06:e7:51:a9:2b:fd:c8:b6:8f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Validity
Not Before: Oct 5 08:00:48 2026 GMT
Not After : Oct 6 08:00:48 2026 GMT
Subject: CN=81901d300b76a074cf031324dd20401b3c3c6850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:46:f7:23:f4:d5:0e:b9:22:01:56:b0:6f:52:
ad:a5:83:80:eb:31:0c:3e:a2:60:66:32:10:a0:9e:
82:9c:c2:bb:4c:b3:04:ea:12:3d:89:11:1b:76:15:
b6:c3:7c:a8:20:71:00:be:b7:bf:ad:8c:1d:a8:df:
2f:89:37:9f:95:73:49:52:73:3b:83:6a:b0:43:b3:
4f:74:a1:bc:41:f1:80:a9:77:49:a7:60:28:df:77:
42:61:cb:96:7c:e3:36:0e:73:33:05:12:8b:62:a1:
42:fe:46:d2:4c:5b:76:d1:80:0b:cb:0e:93:60:a4:
08:73:ec:89:21:94:e3:8d:f3:5b:e2:24:cf:78:33:
10:56:2d:1f:6a:9a:ad:7a:b4:e3:20:30:39:5e:46:
6e:1a:d3:ca:40:cd:d1:cd:d7:a1:a1:8a:e9:76:a0:
67:3c:c5:e4:b4:cb:c1:d4:2b:8c:9e:f9:0a:3f:23:
8e:b1:07:d2:76:76:19:d3:fd:df:72:01:17:84:42:
3a:82:0f:2a:63:f1:f0:ae:8a:c8:f1:a0:7d:3f:a8:
cf:94:fa:27:df:a0:8c:fb:43:0d:3c:f4:51:a7:05:
cb:dd:b1:00:b0:8a:dd:46:7b:44:3c:f0:04:d0:00:
ee:17:b9:4f:ac:05:05:9e:f4:a7:0b:40:52:08:2b:
c5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:90:1D:30:0B:76:A0:74:CF:03:13:24:DD:20:40:1B:3C:3C:68:50
X509v3 Authority Key Identifier:
keyid:83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a5:cf:e5:12:a1:5a:80:1d:5a:82:5b:0f:df:bd:ed:d8:fb:
31:b3:e6:ef:f9:b4:3a:57:1c:9b:00:c3:d7:2a:6b:56:78:2b:
67:a2:54:21:1a:52:a6:e4:09:1e:aa:7a:a4:85:3d:7b:fe:d3:
69:ac:43:08:54:6f:b4:da:d8:19:4a:d3:f7:f1:58:17:96:63:
9f:96:e2:33:e7:07:6f:9b:53:e3:19:e8:88:1b:95:61:82:87:
ce:23:73:c8:93:9e:74:f1:4b:20:8f:ba:c6:0b:89:79:51:9f:
6f:92:81:14:84:a0:48:a2:88:7a:e5:fd:15:e3:dd:bd:e2:c1:
0f:52:ba:f1:e4:69:3e:c5:75:62:ab:bc:c7:ef:1d:0f:f9:b3:
1c:25:eb:77:60:21:fd:5e:a4:de:1c:41:18:32:38:3e:5d:2f:
42:18:72:c7:9e:9f:df:23:ad:5d:54:f5:49:ad:04:19:12:2c:
93:f2:d0:ef:22:54:f0:57:c6:f3:c8:d1:2f:5b:cc:e1:36:71:
a0:be:fe:c0:4a:d2:e7:5e:83:fd:24:4a:8e:e3:25:8b:1b:f9:
a1:b3:17:9b:f4:3f:9a:71:7d:70:6d:bb:d5:7a:4a:11:25:d9:
5f:51:d0:57:7f:2e:19:a1:6a:a4:52:f9:5e:2a:24:af:13:97:
94:ed:97:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:04:49 2026 by rpki-client