Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
File: gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft (raw, json)
Hash identifier: Fm6JO0WxSiXaaC6Gl9hoxLubtJ/ddsu0Uvd9+Ih2m9A=
Subject key identifier: 88:61:12:31:B8:64:03:7F:FC:CA:3F:95:74:7A:72:20:E7:30:AC:7A
Authority key identifier: 83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
Certificate issuer: /CN=830555f011be5e241eb0b425de5fd86cc6834a54
Certificate serial: 019D390A4FC3F1B022BECF28A76A87233DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 10:01:10 +0000
Manifest this update: Sun 29 Mar 2026 10:01:10 +0000
Manifest next update: Mon 30 Mar 2026 10:01:10 +0000
Files and hashes: 1: HKGatfk6oGFkC2zfjCu8mblRssI.roa (hash: S6ZotY5E9t/FLq5dfSr9cTUufNdOhOYR8EgFCPMUcus=)
2: cXOHYWy0-7WUBhjTzP2yi-7Q4SU.roa (hash: p+uHzH3gdQcuGHFOcwVTN/fHDrzadai+XLOUDXJnLlE=)
3: gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl (hash: KTiSWIc7mf1N0sH3B5HHAGNukQAMEE68O1RuozWaJrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:4f:c3:f1:b0:22:be:cf:28:a7:6a:87:23:3d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830555f011be5e241eb0b425de5fd86cc6834a54
Validity
Not Before: Mar 29 10:01:10 2026 GMT
Not After : Mar 30 10:01:10 2026 GMT
Subject: CN=88611231b864037ffcca3f95747a7220e730ac7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:69:cd:50:02:f0:dd:6d:60:65:07:76:e4:90:
41:dc:b0:9d:03:e1:97:8b:d6:11:99:7d:a7:45:a7:
76:ba:0c:62:75:29:1f:72:4e:33:29:86:e2:18:3a:
c5:6d:4c:b7:44:a0:b2:68:3c:9a:44:53:06:fc:87:
cf:9a:48:95:36:1f:b2:ee:eb:20:50:52:4f:44:9d:
8b:ea:df:75:89:60:90:99:52:a3:ff:48:16:f1:04:
36:3d:e3:35:e0:00:e4:62:1e:98:57:f8:5c:f6:6d:
4d:89:73:20:c2:c9:56:ab:52:69:85:7e:5a:69:0e:
94:86:01:48:cb:b1:4d:74:1b:63:6d:4e:94:44:37:
5d:79:13:62:c9:9e:cf:62:c8:15:86:e7:8c:40:89:
4e:45:ce:c8:73:03:95:d9:aa:7d:48:ac:ac:7d:47:
57:fa:75:1b:f5:16:63:17:11:6f:18:08:ae:e8:14:
77:50:e0:89:12:85:ed:ab:e8:c3:a1:d3:32:fd:3b:
a1:e1:c2:5e:ee:93:3e:1d:70:8e:69:d0:67:10:7e:
81:e0:99:dd:87:a8:61:69:2e:76:c9:aa:d8:98:89:
63:0a:87:4e:63:fb:f6:5d:f1:51:b0:09:ee:de:8e:
f6:eb:14:70:b5:1c:ff:63:46:4a:07:69:32:2b:36:
31:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:61:12:31:B8:64:03:7F:FC:CA:3F:95:74:7A:72:20:E7:30:AC:7A
X509v3 Authority Key Identifier:
keyid:83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ef:05:31:72:4d:d6:a3:6e:74:43:1b:02:85:6f:77:98:d3:
1b:90:b0:c2:0b:63:99:25:4f:e3:3a:58:7d:de:52:62:38:72:
26:8a:8e:bc:4e:4d:74:a8:14:0e:90:68:0f:ea:50:06:aa:2e:
d7:08:b3:d9:c0:2f:6c:85:8f:6f:7a:c3:56:ea:0b:0b:66:fe:
e2:14:01:aa:05:b6:e9:31:3d:8d:ed:f7:0d:75:e5:27:78:11:
fc:b0:6d:a5:55:4f:5a:c6:e8:3d:90:38:ab:c9:42:f1:22:06:
3e:09:34:6a:72:44:74:d8:90:a8:80:13:f1:e1:06:56:c9:cf:
1d:c1:e6:14:ac:c5:aa:c0:90:fd:77:7a:74:86:12:d0:f9:97:
ad:bc:3d:52:37:41:dd:2c:a9:61:bd:5d:4a:13:7e:f1:60:1d:
4a:8b:fe:ea:37:95:1c:55:3a:d8:21:b9:b9:38:23:19:98:f1:
96:9c:76:58:d0:e9:cd:e6:a8:85:11:ec:cf:27:5e:38:d9:3d:
a3:7d:a3:04:98:d0:ab:ec:51:a6:4f:c5:0f:d6:6f:60:b6:23:
a5:9e:16:47:4c:cc:49:3c:32:8a:ce:73:8d:54:01:fb:38:4a:
2e:ba:00:91:cc:f0:5f:5d:44:92:94:6b:09:a9:65:3a:27:2e:
01:f6:42:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Ck/D8bAivs8op2qHIz3AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDU1NWYwMTFiZTVlMjQxZWIwYjQyNWRlNWZkODZjYzY4
MzRhNTQwHhcNMjYwMzI5MTAwMTEwWhcNMjYwMzMwMTAwMTEwWjAzMTEwLwYDVQQD
Eyg4ODYxMTIzMWI4NjQwMzdmZmNjYTNmOTU3NDdhNzIyMGU3MzBhYzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGnNUALw3W1gZQd25JBB3LCdA+GX
i9YRmX2nRad2ugxidSkfck4zKYbiGDrFbUy3RKCyaDyaRFMG/IfPmkiVNh+y7usg
UFJPRJ2L6t91iWCQmVKj/0gW8QQ2PeM14ADkYh6YV/hc9m1NiXMgwslWq1JphX5a
aQ6UhgFIy7FNdBtjbU6URDddeRNiyZ7PYsgVhueMQIlORc7IcwOV2ap9SKysfUdX
+nUb9RZjFxFvGAiu6BR3UOCJEoXtq+jDodMy/Tuh4cJe7pM+HXCOadBnEH6B4Jnd
h6hhaS52yarYmIljCodOY/v2XfFRsAnu3o726xRwtRz/Y0ZKB2kyKzYxHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhhEjG4ZAN//Mo/lXR6ciDnMKx6MB8GA1UdIwQY
MBaAFIMFVfARvl4kHrC0Jd5f2GzGg0pUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3dWVjhCRy1YaVFlc0xRbDNsX1liTWFEU2xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iZjAxNjItZmNiYS00MDg1LWI0ZjEt
ZDY5OWRkYzlkMDljLzEvZ3dWVjhCRy1YaVFlc0xRbDNsX1liTWFEU2xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iZjAxNjItZmNiYS00MDg1LWI0ZjEtZDY5OWRkYzlkMDlj
LzEvZ3dWVjhCRy1YaVFlc0xRbDNsX1liTWFEU2xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQe8FMXJN
1qNudEMbAoVvd5jTG5CwwgtjmSVP4zpYfd5SYjhyJoqOvE5NdKgUDpBoD+pQBqou
1wiz2cAvbIWPb3rDVuoLC2b+4hQBqgW26TE9je33DXXlJ3gR/LBtpVVPWsboPZA4
q8lC8SIGPgk0anJEdNiQqIAT8eEGVsnPHcHmFKzFqsCQ/Xd6dIYS0PmXrbw9UjdB
3SypYb1dShN+8WAdSov+6jeVHFU62CG5uTgjGZjxlpx2WNDpzeaohRHszydeONk9
o32jBJjQq+xRpk/FD9ZvYLYjpZ4WR0zMSTwyis5zjVQB+zhKLroAkczwX11EkpRr
CallOicuAfZCSw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:06 2026 by rpki-client