Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json)
Hash identifier: 4vqI9nrjLVvGZTOUma+Tq55jit5UWEHu2qDDAV29LU8=
Subject key identifier: 38:77:F8:41:4D:0E:B5:0B:E4:ED:28:B7:C3:9B:F5:FF:38:DC:BB:EA
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial: 01A08DFB71C0A90BBEC2F0FC8ADDAACB677B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
Manifest number: 0557
Signing time: Fri 11 Sep 2026 01:01:01 +0000
Manifest this update: Fri 11 Sep 2026 01:01:01 +0000
Manifest next update: Sat 12 Sep 2026 01:01:01 +0000
Files and hashes: 1: LacuVLpbO3Mjs8bUfA4L-mMlUbU.roa (hash: gKgqt+xB14y4tjX9J2jVn1Ajs6kkgwnL+2zmYJeQx68=)
2: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: Hh+8zlFOMEnSz5uCCnQR9MDGtTNJuAWtqJTFLHwzRFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:fb:71:c0:a9:0b:be:c2:f0:fc:8a:dd:aa:cb:67:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
Validity
Not Before: Sep 11 01:01:01 2026 GMT
Not After : Sep 12 01:01:01 2026 GMT
Subject: CN=3877f8414d0eb50be4ed28b7c39bf5ff38dcbbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:99:0f:22:35:58:e2:6c:a7:0e:4b:d9:1d:
a0:cd:51:40:f5:e3:64:9c:9d:7d:af:d3:7b:1c:e5:
99:7d:0d:94:02:d6:be:48:d0:b1:18:e6:44:b0:d2:
7e:98:6e:9e:60:51:e0:aa:a4:92:17:68:7c:0b:3c:
7a:10:88:d9:aa:b3:d6:63:9b:74:fe:ac:41:86:de:
02:e4:53:13:85:a4:37:47:2b:8e:e9:07:14:64:55:
9f:b7:9e:0a:41:e6:c2:86:ad:5a:95:b4:d4:41:be:
6d:91:eb:5b:88:d8:3f:24:08:9b:32:8a:5c:ef:d6:
34:0a:09:8c:47:f4:ff:f0:aa:f1:82:f1:23:e9:4d:
8d:4e:f1:87:90:8c:7d:07:9e:85:6f:72:b4:23:49:
7e:25:d9:98:aa:75:86:8a:69:b4:10:39:a2:fd:e5:
5e:ee:36:0e:86:95:4f:09:39:c8:fc:82:85:a1:04:
7b:6d:22:a5:63:38:14:0d:a5:f5:ff:47:15:b6:87:
c3:dc:ce:2b:a2:bd:78:95:84:c6:34:b9:88:35:90:
47:ad:29:77:4e:b2:a5:30:f8:9e:38:50:62:b3:01:
be:6d:65:eb:11:7b:8a:71:61:59:c8:cc:ad:c2:65:
12:33:b7:58:c8:e5:3b:ba:82:25:d6:7e:06:df:ea:
7f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:77:F8:41:4D:0E:B5:0B:E4:ED:28:B7:C3:9B:F5:FF:38:DC:BB:EA
X509v3 Authority Key Identifier:
keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:98:c9:ee:c5:d4:80:b2:c2:b8:e1:68:23:62:54:10:f9:d7:
90:10:67:c2:8b:6c:2d:05:44:d9:81:82:43:be:3e:1e:4a:c6:
44:1b:a0:69:5f:b0:a5:e1:39:d2:61:37:5e:04:34:b6:13:cc:
b8:2b:3c:88:00:47:a7:bd:44:bd:8b:f6:eb:81:03:ef:bd:a6:
20:cb:32:00:d8:2f:39:29:ed:47:9a:58:2b:bf:f2:60:f5:55:
ab:49:0e:38:df:1a:bd:c3:dc:96:fa:de:59:92:7c:a2:07:44:
cd:4e:54:e4:76:c1:fc:d6:ea:a2:ac:80:e8:d0:6e:b0:7f:75:
31:26:ac:02:17:59:48:1a:41:f6:56:4f:e7:f1:57:cd:59:52:
b0:62:87:f0:68:6f:f9:71:a8:c5:3d:26:35:d9:20:9a:c2:d5:
19:68:03:25:f1:01:7b:5f:e4:8f:43:87:89:8a:62:c8:32:e8:
0d:70:b3:33:5e:37:ca:ff:ae:b2:b5:ce:97:44:08:3f:32:6e:
25:40:13:aa:9e:c4:44:37:d0:b1:4c:3d:47:d8:2a:25:43:4f:
13:70:52:a9:90:4a:36:4b:3f:93:e9:4e:ca:c3:c1:ca:e0:7f:
79:5e:e1:fe:f9:40:65:8c:4b:4a:d0:8f:b7:9d:f1:fd:b8:77:
db:ee:24:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:31:43 2026 by rpki-client