Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
File: xVfBW97s57ChtHfh4O6L_1P6_gw.mft (raw, json)
Hash identifier: nGOwjuPfuqRiHXLx2Zh1RZ8TCHud+iU0/nAkkcmz670=
Subject key identifier: 0B:9E:C0:D6:E6:7B:1F:C6:01:E4:95:6F:87:2E:63:95:C5:96:3F:1C
Authority key identifier: C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
Certificate issuer: /CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Certificate serial: 019D39AF15CA40FC2EC380ABB8CCB5861ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
Manifest number: 041E
Signing time: Sun 29 Mar 2026 13:01:08 +0000
Manifest this update: Sun 29 Mar 2026 13:01:08 +0000
Manifest next update: Mon 30 Mar 2026 13:01:08 +0000
Files and hashes: 1: hKf_RdYBNL00n5n-6RG-3ope_pY.roa (hash: i1hoGLnlnqGNDkEnX87y4lBEOlUW/mrfMdJ23VxMPJA=)
2: xVfBW97s57ChtHfh4O6L_1P6_gw.crl (hash: YacUXEVCmyNFbtta64Jyd8eCkgiHUFbKJpYfsS8TuTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:15:ca:40:fc:2e:c3:80:ab:b8:cc:b5:86:1e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Validity
Not Before: Mar 29 13:01:08 2026 GMT
Not After : Mar 30 13:01:08 2026 GMT
Subject: CN=0b9ec0d6e67b1fc601e4956f872e6395c5963f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:b6:fe:2a:5f:da:b1:af:7c:b1:5c:05:4b:
fe:08:d8:21:df:5d:02:22:8b:65:3a:c6:7f:32:36:
5f:e6:8e:6d:18:f6:9b:15:10:1e:ed:7b:7d:d1:d8:
07:d5:1f:a1:4a:ed:aa:ec:39:b9:a3:c1:26:a2:78:
c9:e6:0c:d3:5d:27:d9:5f:d0:bd:a0:5c:1a:6d:d7:
97:98:40:dc:70:ac:4e:e2:49:a9:f9:df:77:e4:64:
e2:70:8f:d0:53:f8:76:06:37:4b:bd:19:fa:af:a6:
85:c8:83:7c:8c:e6:e5:ea:cf:99:7f:84:de:53:73:
98:3c:23:6a:16:bf:89:74:1d:d4:6d:e7:16:73:e8:
46:bc:bb:ae:49:00:24:3e:39:71:3e:f7:dc:26:9b:
7f:b8:89:05:63:88:db:5f:56:cb:54:28:02:9b:1f:
d7:71:c2:ce:5f:8d:80:0d:be:97:03:b0:00:00:04:
06:01:c5:ae:70:b7:05:36:5a:2d:dc:ce:64:ce:6b:
2a:ee:54:6a:f5:1f:49:b9:47:94:76:50:be:e7:4f:
08:b3:23:35:6d:ac:5f:7a:02:e8:df:68:bf:91:e9:
08:c8:2d:d2:35:40:bb:f7:09:78:2f:d0:64:8d:1b:
5c:88:59:17:f0:85:5a:6d:21:21:e1:d6:c5:51:00:
9d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9E:C0:D6:E6:7B:1F:C6:01:E4:95:6F:87:2E:63:95:C5:96:3F:1C
X509v3 Authority Key Identifier:
keyid:C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:51:15:c1:4c:c0:27:0f:81:51:50:62:08:34:bc:d0:ba:c7:
20:28:0b:59:98:1c:f6:16:2f:a4:45:31:ed:26:4f:cd:30:62:
a1:02:b8:a6:79:24:47:ee:b6:8e:d5:46:c9:af:e1:c6:c7:f6:
1a:f6:e1:bf:c6:a0:e9:5d:5e:7d:13:b8:d8:90:c0:19:03:91:
52:70:c8:48:51:d9:f3:74:a6:77:dd:22:19:43:7b:8c:e1:6d:
7c:a4:f0:38:a6:56:41:4e:58:f3:cf:67:55:9d:09:cd:d0:cd:
67:c8:4a:ba:22:70:77:c4:e5:2d:30:9e:cf:ad:54:c8:56:4f:
2b:fe:d4:84:39:54:18:f3:7e:3f:4e:c4:ad:22:eb:3f:3b:7c:
e8:93:74:0f:b3:b5:aa:09:08:14:86:b9:5b:37:c9:19:4e:8f:
a1:f0:8d:5c:c6:a1:59:56:48:e9:64:e1:79:10:99:2a:d6:76:
92:0b:32:f4:a3:a0:0b:02:1b:2f:45:a1:09:4b:cc:4f:ad:9a:
c8:ae:59:45:54:1b:4a:e5:b9:d2:29:3f:48:76:dd:87:dd:37:
a2:60:f7:3a:ee:4b:8e:94:6b:36:d8:f7:76:af:7a:68:4b:77:
a1:b2:c3:48:e6:e2:ab:5d:f3:88:e3:11:db:76:c8:dc:cd:cd:
21:41:27:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:52 2026 by rpki-client