Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json)
Hash identifier: GfAw3NYb20YEP/ry95WlpM5h0IZc8HK7O3dGYAxUWiU=
Subject key identifier: C5:6F:AA:31:97:E8:DC:56:05:1A:B8:92:BE:06:A5:EC:7A:91:10:CD
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial: 019FA44F0B5DB34212FC1D1FE0547B646DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
Manifest number: 04DE
Signing time: Mon 27 Jul 2026 16:01:11 +0000
Manifest this update: Mon 27 Jul 2026 16:01:11 +0000
Manifest next update: Tue 28 Jul 2026 16:01:11 +0000
Files and hashes: 1: LacuVLpbO3Mjs8bUfA4L-mMlUbU.roa (hash: gKgqt+xB14y4tjX9J2jVn1Ajs6kkgwnL+2zmYJeQx68=)
2: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: fIpnmKWXDPvORqGiKJ+iZF7DhZwTzklD9Od/9eEq9t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:4f:0b:5d:b3:42:12:fc:1d:1f:e0:54:7b:64:6d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
Validity
Not Before: Jul 27 16:01:11 2026 GMT
Not After : Jul 28 16:01:11 2026 GMT
Subject: CN=c56faa3197e8dc56051ab892be06a5ec7a9110cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0f:5b:1e:5b:ef:bf:3d:f4:1d:49:4b:69:57:
18:ea:1a:15:ae:3f:85:28:07:48:68:b6:81:cb:cc:
22:67:9b:8b:0e:23:b7:ef:9f:ad:86:6b:8d:4f:0b:
5b:43:79:30:3a:24:80:b1:37:99:d3:2c:a9:d6:73:
38:58:d2:be:ca:7c:86:51:f0:0a:1f:7c:62:00:a3:
27:6b:34:2a:53:f5:bc:73:23:18:56:60:2b:3e:bf:
c6:04:76:36:e2:d4:bc:2f:c8:d8:7e:1a:38:6a:d9:
5b:1d:15:21:0d:b4:40:3c:ff:38:33:b4:41:3f:b5:
e5:31:71:92:3b:13:3e:71:d4:72:20:32:c8:16:e4:
02:66:d9:5a:62:06:50:c8:7b:84:8d:1e:e9:71:ae:
33:ae:d7:af:b0:fa:bd:85:d4:0b:da:04:5b:88:88:
8c:43:f1:fc:2e:9f:9e:09:1f:a8:86:eb:5d:dd:2f:
1e:cb:16:15:54:5e:7f:c0:e7:ca:da:df:d6:de:0a:
4e:13:38:e2:e2:57:d8:d0:63:00:c3:8a:68:03:dc:
a1:c0:6b:12:ac:cc:a0:19:3f:89:c2:07:8c:62:d8:
9c:45:59:2d:5f:03:10:67:06:7e:3d:e0:94:b5:05:
fc:d4:9c:20:15:84:85:c3:f8:1e:a4:34:d7:5f:1e:
58:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6F:AA:31:97:E8:DC:56:05:1A:B8:92:BE:06:A5:EC:7A:91:10:CD
X509v3 Authority Key Identifier:
keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:21:f3:4f:a5:15:78:e9:93:e0:7b:aa:4c:83:9c:54:d2:8b:
30:6b:6b:2d:68:86:01:93:8e:32:a0:d2:be:99:13:f4:e6:d2:
91:c7:e5:11:1d:eb:c8:c9:07:c0:ed:df:e4:f3:81:fb:7d:71:
6a:9b:4e:ca:f9:16:86:db:32:ca:11:ae:d2:00:06:f8:cf:a8:
66:94:69:58:56:2b:85:9a:1b:c7:77:09:95:d0:4d:98:45:1f:
81:76:f9:d3:99:e0:2a:a0:86:b4:d9:99:fe:01:d0:29:68:7f:
5c:8c:7c:02:58:b6:9c:ce:70:cc:16:52:c2:b0:da:c8:65:fa:
ab:aa:9a:06:1b:0a:0e:6b:66:61:5c:b0:17:1e:a4:ba:1c:83:
90:d4:11:df:eb:a3:a5:5c:c0:3e:21:8f:3d:c8:b2:84:31:f6:
46:a9:55:43:df:e0:91:31:38:86:87:be:c6:0b:4a:ef:98:9a:
b3:d6:4c:92:ac:40:9a:f8:89:14:62:06:35:99:84:5a:89:72:
c2:59:b4:bd:44:2a:6a:c5:b0:b1:38:dc:fd:eb:3f:85:dc:d8:
04:d2:8e:0c:c3:fd:ae:e2:32:75:e0:da:67:f9:e6:30:23:01:
ed:88:cd:ec:8d:8d:3f:59:ac:8c:c8:b8:47:e6:05:d8:53:41:
85:78:89:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:13:25 2026 by rpki-client