Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json)
Hash identifier: IfeN2GvCXDw7Wa5C5oUkPakiPRwW//hY5duzs+ire8o=
Subject key identifier: 07:A5:76:AD:EF:49:B4:F9:0D:AA:2B:A0:78:4C:85:10:18:19:B6:CF
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial: 019DCFE30392AA222491050AE8BF01A662FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
Manifest number: 03EA
Signing time: Mon 27 Apr 2026 17:00:54 +0000
Manifest this update: Mon 27 Apr 2026 17:00:54 +0000
Manifest next update: Tue 28 Apr 2026 17:00:54 +0000
Files and hashes: 1: DSegnNq3yKblQGxIHXTZ5tulaHA.roa (hash: dLv+A/vc7m1UxOoLmUkd/IJPf2dtcdjA2GKS9KV/zrs=)
2: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: xTg7ADwam1DLGUZRIMyH6oxTjvBecfvP6IuJlLRC7yQ=)
3: tWypDnBAIWwZKWJj3d2zrshtc2o.roa (hash: VfkZmkJUOwrgNq3Ww1lzNtYXvW7fLaLXy/GNgbgT52k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:03:92:aa:22:24:91:05:0a:e8:bf:01:a6:62:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
Validity
Not Before: Apr 27 17:00:54 2026 GMT
Not After : Apr 28 17:00:54 2026 GMT
Subject: CN=07a576adef49b4f90daa2ba0784c85101819b6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:a1:60:04:f1:e7:ae:c0:72:52:1e:45:40:
8f:9c:53:ee:af:ac:67:9b:e2:39:a1:0e:26:7e:97:
91:fc:45:f2:20:d0:63:07:ae:0f:8c:1b:d0:e8:b6:
e5:24:b7:81:5e:bf:8e:55:62:d9:62:9c:ee:af:16:
07:58:52:aa:69:de:0e:e1:8a:36:23:f9:3a:67:2c:
00:1c:ea:dd:d3:ec:9f:ab:00:74:e9:ff:19:4c:61:
2e:82:53:5c:27:3a:b7:e4:e7:11:9c:67:ea:5d:50:
0e:7b:cc:60:e9:51:e7:f7:6c:28:84:a0:5d:be:0d:
93:b8:b1:15:3d:55:e6:84:0f:c4:98:03:c1:3f:07:
69:20:d8:c7:80:66:92:28:94:a3:c8:4c:6f:fc:6d:
15:d1:cc:64:67:67:3f:8c:08:66:31:38:c0:b6:19:
b8:07:fc:61:35:6b:a9:c3:30:36:c1:7b:c2:13:e4:
4e:91:ef:9f:e9:0f:d5:49:88:56:a7:0b:26:3a:5c:
cd:b1:30:00:0e:23:66:68:ff:45:23:52:d8:f9:f6:
0f:ae:63:16:2d:14:c7:0f:b1:0d:a0:6a:99:60:69:
18:f4:07:49:c3:05:ee:c3:92:60:e7:ef:2b:ae:e8:
1b:01:49:18:a5:80:39:94:35:70:8e:92:e9:34:f0:
b9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A5:76:AD:EF:49:B4:F9:0D:AA:2B:A0:78:4C:85:10:18:19:B6:CF
X509v3 Authority Key Identifier:
keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:29:44:c2:a5:56:87:0e:df:1f:83:b9:e9:d3:6a:ab:d7:12:
af:6d:6e:42:4f:1d:d3:fa:dd:a4:4f:84:bb:ae:00:34:4f:a8:
ec:f5:da:3a:13:50:d0:5d:27:d0:8c:21:0c:13:a0:7e:f2:a5:
b3:b1:11:6d:df:9d:99:d2:99:77:01:31:fc:f4:8a:f3:aa:38:
07:0e:fd:22:0b:7e:d7:17:b1:6c:a5:2a:32:d7:78:e5:df:10:
dd:9a:e0:7e:b6:dc:e0:ed:d3:6a:d1:03:07:78:6d:b5:5d:b6:
aa:0b:d1:fc:45:41:70:a7:a1:57:50:75:33:67:35:8d:b9:76:
07:97:d0:8c:0d:9c:c3:da:ab:f6:ce:a4:3f:d4:ae:d5:ce:e8:
15:ec:f0:af:85:34:13:eb:80:29:1f:b4:00:b8:97:a8:40:ff:
28:3e:fe:67:20:f2:16:7a:d4:e2:d8:35:b6:77:3e:b4:cb:20:
f2:20:70:7d:5d:3b:08:23:2f:7b:a0:8b:4a:7f:c9:91:40:60:
19:6b:14:52:50:fd:c6:0d:41:86:1d:a1:b6:bf:d8:77:69:53:
59:3a:fe:77:74:4e:4a:c8:9e:25:be:cd:e3:cf:bb:fd:ec:05:
e9:a6:87:76:a7:57:ca:56:f0:50:03:22:96:f4:42:1a:cf:8a:
ee:99:2d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:12:30 2026 by rpki-client