
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
File: gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft (raw, json)
Hash identifier: kd4zLZ+y95r0NoqWr2i5SZfpEiPvl68OdWDL0qxwHDM=
Subject key identifier: 43:CD:FF:7F:8E:E5:D5:80:12:06:5E:00:B5:E2:3C:28:F3:FE:15:AB
Authority key identifier: 83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94
Certificate issuer: /CN=83020637e89655e299d91843769254af07714994
Certificate serial: 019D39AF0C28AE636C577213D534A35146F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
Manifest number: 0CF8
Signing time: Sun 29 Mar 2026 13:01:06 +0000
Manifest this update: Sun 29 Mar 2026 13:01:06 +0000
Manifest next update: Mon 30 Mar 2026 13:01:06 +0000
Files and hashes: 1: gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl (hash: QRXxLw1qybIDKOIBdKFpukcBl1FXhM+VZytS5l0lMVw=)
2: wyOe-kBLzrVKspKdZubryPdenk8.roa (hash: t5x0Z3ogkqDWsaKAMSpmWX7JpOr9Rc3hWNswuA+qbps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:0c:28:ae:63:6c:57:72:13:d5:34:a3:51:46:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83020637e89655e299d91843769254af07714994
Validity
Not Before: Mar 29 13:01:06 2026 GMT
Not After : Mar 30 13:01:06 2026 GMT
Subject: CN=43cdff7f8ee5d58012065e00b5e23c28f3fe15ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:39:fe:d6:33:d9:71:41:70:4c:aa:e2:1a:
46:3c:f2:27:33:7c:fd:ca:7e:44:6d:3f:95:a3:c9:
55:20:48:62:87:84:b7:9b:49:0e:f2:57:24:8a:4d:
5f:62:ef:07:2b:3d:b1:4d:b4:37:e2:30:9e:2d:75:
fd:a8:a4:ec:7c:3f:67:09:08:1e:0f:62:f9:7f:6b:
94:01:f9:31:28:c6:83:4f:52:41:3d:2f:63:20:5a:
66:ec:e6:1b:aa:22:13:af:9d:f9:f7:50:a8:46:6c:
71:1b:b6:e7:a0:55:cb:0c:14:03:cb:24:ea:04:f3:
54:ff:41:7c:2c:56:29:08:4a:16:f1:f4:ff:c5:25:
99:46:3c:62:d5:3b:eb:f0:5e:38:56:39:3d:24:7f:
aa:10:39:1f:54:be:df:8c:5d:47:a9:a9:02:e7:b5:
2e:2e:dc:76:1b:c7:d0:6f:9e:c8:90:fc:96:71:89:
c0:ca:68:93:f3:08:b0:0a:f2:27:6b:81:6a:fc:fb:
10:b1:aa:97:d1:85:a5:f7:96:e0:82:3a:26:ed:bb:
8e:83:6b:19:a6:c6:47:e4:65:68:c7:9a:b3:00:b4:
41:cd:54:c3:96:df:3f:c9:ae:42:f8:da:6d:d2:77:
dc:e5:f3:0b:3b:f0:9b:9e:b3:dc:c8:32:9e:05:7b:
bd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CD:FF:7F:8E:E5:D5:80:12:06:5E:00:B5:E2:3C:28:F3:FE:15:AB
X509v3 Authority Key Identifier:
keyid:83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c0:70:47:f8:87:15:6d:62:5f:54:5e:53:2e:39:70:d9:38:
8c:26:e8:65:97:ba:6a:d5:3e:b4:bd:08:8e:1a:e9:27:bb:6e:
7a:a7:84:f3:a9:31:99:47:a0:4f:2b:f0:11:38:8e:d5:5b:ee:
50:bf:d4:39:51:69:36:33:3f:61:ac:f2:79:c3:85:75:ed:f3:
95:86:5e:f5:ce:67:9a:d9:87:66:20:62:5a:b3:32:bb:af:70:
2d:94:b7:1a:c8:39:df:82:59:c1:6c:6e:96:7d:17:05:0c:0d:
f9:c8:8e:7b:5c:d4:ed:b4:c7:98:8e:86:2f:a8:2a:a1:7c:9e:
e0:b5:45:63:f5:fa:53:5c:4c:a1:24:ea:d8:38:a7:85:37:2f:
88:ec:b8:31:ef:40:bd:48:fa:af:eb:74:98:88:1b:a8:c4:e6:
b4:cb:c8:3a:3a:be:40:89:3b:0c:7e:30:4e:4d:f6:50:e9:eb:
36:04:c3:5d:98:eb:ec:cb:16:58:6c:1a:42:2a:00:8e:bd:30:
65:ed:e8:3a:4c:3e:82:95:dd:72:54:26:9c:27:66:2b:38:07:
85:bc:c9:fa:e5:b0:d6:d5:4e:95:2a:11:c0:3a:04:2b:fb:2d:
85:d4:68:be:53:f4:13:5c:0f:8a:34:4a:3e:56:02:df:75:30:
e0:14:36:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:13 2026 by rpki-client