
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json)
Hash identifier: kLV+20B0qvm2EzTNStbo/LIrdUGXV4XTYNH+fmwYb/Q=
Subject key identifier: D8:76:BE:9B:26:3A:F5:11:19:CE:A4:0F:BE:9D:AD:EB:A5:07:1B:2D
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial: 019CE447F350D52B40003396AFB696287EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
Manifest number: 0370
Signing time: Thu 12 Mar 2026 23:00:46 +0000
Manifest this update: Thu 12 Mar 2026 23:00:46 +0000
Manifest next update: Fri 13 Mar 2026 23:00:46 +0000
Files and hashes: 1: DSegnNq3yKblQGxIHXTZ5tulaHA.roa (hash: dLv+A/vc7m1UxOoLmUkd/IJPf2dtcdjA2GKS9KV/zrs=)
2: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: Gnglz1X3pu8ZTbu7eoei7oPwa3WguGHwA1+Yq3v3o7k=)
3: tWypDnBAIWwZKWJj3d2zrshtc2o.roa (hash: VfkZmkJUOwrgNq3Ww1lzNtYXvW7fLaLXy/GNgbgT52k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:47:f3:50:d5:2b:40:00:33:96:af:b6:96:28:7e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
Validity
Not Before: Mar 12 23:00:46 2026 GMT
Not After : Mar 13 23:00:46 2026 GMT
Subject: CN=d876be9b263af51119cea40fbe9dadeba5071b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:fd:6a:8a:36:14:b3:1b:d5:db:46:f3:8c:
fc:c8:6a:33:0e:d0:c9:d8:3c:dc:9f:d1:84:3e:e3:
39:48:74:3d:18:0e:67:e7:a9:49:f4:27:36:cb:5b:
7f:51:c7:3d:49:62:a6:2c:9c:85:a6:10:7f:36:35:
8c:20:46:a1:31:91:02:06:29:d7:eb:5d:15:de:64:
ff:7b:0d:0e:7f:22:94:f3:cb:21:08:85:8d:ac:7a:
6b:c5:cd:7a:d2:a2:4b:9f:78:59:96:e2:79:a2:af:
61:0c:ff:75:84:c4:e4:56:2c:90:c4:a7:7a:ef:8b:
c9:5a:64:9a:b4:50:71:c0:40:1b:68:37:78:8b:e4:
fe:17:40:86:f9:fe:01:17:3b:0e:33:97:72:dc:25:
cb:84:34:f6:4d:a2:41:a2:ae:8a:23:2e:6a:87:09:
13:12:26:94:be:5d:50:1d:64:7f:aa:e4:76:28:4f:
09:26:7d:0e:2e:09:bf:cb:6a:a3:7b:27:e3:0f:af:
d5:b9:cc:a6:cc:a0:aa:49:9a:36:ae:fb:1c:d8:37:
56:58:be:c1:2b:88:d0:61:5b:8b:74:a7:82:de:cb:
d3:d2:38:85:3f:2f:7a:b0:67:ef:55:2b:cc:a9:86:
fb:bb:85:e1:74:51:53:48:76:57:5f:00:df:22:72:
7d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:76:BE:9B:26:3A:F5:11:19:CE:A4:0F:BE:9D:AD:EB:A5:07:1B:2D
X509v3 Authority Key Identifier:
keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:3f:34:a2:c4:e7:7d:09:7f:2f:23:4b:14:16:9a:0f:23:2d:
76:7c:eb:64:e4:43:3c:f4:b6:43:e5:3b:89:34:f3:d6:d5:64:
84:15:07:46:f3:40:1d:db:a0:04:69:11:9e:7d:9a:8d:88:f0:
5f:4e:1f:66:d4:60:c2:43:0c:d1:f5:22:a8:8b:a0:db:42:41:
54:7e:e6:1d:ba:cf:fe:d0:8b:c9:ad:ba:aa:b7:b4:7c:c7:d2:
4d:44:70:88:2b:00:cf:02:e0:65:a4:46:e6:7d:b0:07:0e:06:
75:fa:af:a4:6d:cb:47:c2:a4:71:25:1f:14:bd:a4:05:81:39:
7a:8e:3a:64:f4:73:fd:9b:58:a6:01:c2:50:84:6e:1d:db:05:
be:23:2c:df:3c:4c:99:26:ff:de:7b:71:f2:83:fd:59:06:14:
ab:57:e6:d6:cd:2b:a3:4e:89:00:00:99:a1:b4:dc:93:30:35:
04:51:f5:ce:12:54:96:b0:1b:48:a0:a2:bf:0c:a9:bd:a9:05:
53:4f:80:a5:4f:8e:a5:58:c4:f1:3e:9a:b7:d0:fc:03:37:2b:
9b:ba:e0:9f:54:c3:a7:bb:aa:32:fb:43:97:45:fc:ea:89:21:
67:70:6f:79:05:f4:82:e4:c9:b7:e7:f4:0c:4d:ab:38:8d:e8:
bd:a9:2b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:33:47 2026 by rpki-client