Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
File: gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft (raw, json)
Hash identifier: xLER2jNG5aqqakK80nVvSWlLUkEwbx1FBMJmJ0QOgww=
Subject key identifier: 61:33:1E:5A:B3:37:D6:9A:35:30:7A:F0:E5:DB:22:79:F9:DF:35:BE
Authority key identifier: 81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
Certificate issuer: /CN=8166038385b343d55e76b728efe23c0731787668
Certificate serial: 01A18ED4D4A478BDAB132E798055CC944B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
Manifest number: 13D2
Signing time: Fri 30 Oct 2026 22:01:14 +0000
Manifest this update: Fri 30 Oct 2026 22:01:14 +0000
Manifest next update: Sat 31 Oct 2026 22:01:14 +0000
Files and hashes: 1: 8YpwJkM4ApxJ79nY1Tn1a81nlqM.roa (hash: tcShowN5n/wg+sXuZ3o0xwGbFl1QoPNhkaf9D8szQoM=)
2: EQcSnDEzv8FK_xJY9AK1FSIjcbI.roa (hash: yd6zB2ZMaqidG2yxAxCdRzrLByF+Ug+XA8C46cFlruo=)
3: gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl (hash: 8QFRe/fpkMnnUfP9tk4lw5A0yWJthhfyxHVSV8FT2/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:d4:d4:a4:78:bd:ab:13:2e:79:80:55:cc:94:4b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8166038385b343d55e76b728efe23c0731787668
Validity
Not Before: Oct 30 22:01:14 2026 GMT
Not After : Oct 31 22:01:14 2026 GMT
Subject: CN=61331e5ab337d69a35307af0e5db2279f9df35be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:55:bb:cf:8b:40:85:c4:fc:b1:4a:b0:46:8d:
60:51:a6:4e:4e:ab:dc:4e:eb:c2:8e:bf:85:bd:c1:
27:fd:58:e1:58:18:11:58:1b:8a:10:b6:3d:f7:e8:
f1:61:99:05:96:9f:0d:18:54:6d:90:c5:10:08:4a:
70:d3:be:b9:9d:99:4e:ca:d9:f8:db:22:73:cd:9d:
3c:05:f1:cb:7f:a3:c3:f8:e3:6f:cf:89:c7:97:f0:
0c:66:e9:39:43:ba:bb:a1:2b:a0:70:b7:31:f1:04:
17:f3:95:c3:32:99:16:c3:7e:24:d7:40:9e:0a:bf:
81:30:4e:7e:23:23:33:0b:17:d1:b9:d7:cf:c0:5a:
ce:3d:a1:56:7e:1f:4f:bb:01:b8:ca:e2:5c:1c:04:
7c:9a:28:e5:f2:01:2b:a5:a6:85:28:fe:ac:be:8e:
4a:ff:d7:60:b6:e4:0a:9c:13:c8:6e:a1:80:f9:fb:
e8:c3:d7:9d:bc:f7:3e:d5:95:59:e9:b5:fc:e2:49:
8b:8d:32:6d:4b:82:d1:d9:e3:fc:33:f0:c4:94:ac:
d0:94:17:e7:b2:65:0e:3b:a4:21:12:b8:5a:78:b5:
c0:d2:40:8d:8e:2e:be:6d:d9:a4:01:ab:50:ac:f6:
ac:c5:d0:be:4e:da:32:a9:f1:24:71:9f:18:37:50:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:33:1E:5A:B3:37:D6:9A:35:30:7A:F0:E5:DB:22:79:F9:DF:35:BE
X509v3 Authority Key Identifier:
keyid:81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:86:2a:21:ba:52:7e:fd:87:b5:77:49:c3:74:29:af:59:ec:
72:65:d8:2a:66:d8:5f:56:29:b4:50:79:2c:d5:c0:c3:9d:26:
22:82:86:e0:1a:53:7c:be:70:b2:cb:9b:19:e3:5f:ea:78:f6:
b4:db:c7:4b:97:d5:a3:a0:f2:cc:18:2b:fc:9e:67:84:a5:4e:
98:9c:6f:d9:01:d3:19:6d:28:4a:ce:93:c7:72:70:32:a3:61:
29:50:97:22:54:02:7b:c0:04:9b:81:3a:90:2f:99:7c:30:08:
1a:ac:f8:9d:86:a9:41:18:0f:ec:a6:3c:63:20:c9:6b:cf:3c:
27:fc:b3:d0:7d:fc:e5:aa:35:b8:5c:5b:55:83:0b:8f:09:74:
61:14:a3:cd:e7:22:1c:86:15:4e:50:e9:55:09:84:3b:65:88:
d0:79:f4:3b:31:5a:02:41:d9:bb:d6:89:37:4c:63:31:69:f8:
23:89:61:06:27:56:68:c0:42:fc:e7:89:49:f8:37:10:46:11:
7f:49:8e:f7:e6:42:1b:0c:e9:36:93:0a:48:e3:5c:df:2c:b7:
1d:fb:44:cb:b4:1c:f6:d6:97:0d:08:d4:b4:1e:5a:7c:27:e4:
42:92:df:e7:d1:7f:e1:6c:5e:26:3f:6d:96:91:41:80:bb:94:
40:d5:e5:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGO1NSkeL2rEy55gFXMlEuHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNjYwMzgzODViMzQzZDU1ZTc2YjcyOGVmZTIzYzA3MzE3
ODc2NjgwHhcNMjYxMDMwMjIwMTE0WhcNMjYxMDMxMjIwMTE0WjAzMTEwLwYDVQQD
Eyg2MTMzMWU1YWIzMzdkNjlhMzUzMDdhZjBlNWRiMjI3OWY5ZGYzNWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVW7z4tAhcT8sUqwRo1gUaZOTqvc
TuvCjr+FvcEn/VjhWBgRWBuKELY99+jxYZkFlp8NGFRtkMUQCEpw0765nZlOytn4
2yJzzZ08BfHLf6PD+ONvz4nHl/AMZuk5Q7q7oSugcLcx8QQX85XDMpkWw34k10Ce
Cr+BME5+IyMzCxfRudfPwFrOPaFWfh9PuwG4yuJcHAR8mijl8gErpaaFKP6svo5K
/9dgtuQKnBPIbqGA+fvow9edvPc+1ZVZ6bX84kmLjTJtS4LR2eP8M/DElKzQlBfn
smUOO6QhErhaeLXA0kCNji6+bdmkAatQrPasxdC+TtoyqfEkcZ8YN1AylQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEzHlqzN9aaNTB68OXbInn53zW+MB8GA1UdIwQY
MBaAFIFmA4OFs0PVXna3KO/iPAcxeHZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1dZRGc0V3pROVZlZHJjbzctSThCekY0ZG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy80OGNmZDAtMzIzOC00YWFmLWI2NjMt
NDM3M2I2NTc5MGI4LzEvZ1dZRGc0V3pROVZlZHJjbzctSThCekY0ZG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy80OGNmZDAtMzIzOC00YWFmLWI2NjMtNDM3M2I2NTc5MGI4
LzEvZ1dZRGc0V3pROVZlZHJjbzctSThCekY0ZG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4YqIbpS
fv2HtXdJw3Qpr1nscmXYKmbYX1YptFB5LNXAw50mIoKG4BpTfL5wssubGeNf6nj2
tNvHS5fVo6DyzBgr/J5nhKVOmJxv2QHTGW0oSs6Tx3JwMqNhKVCXIlQCe8AEm4E6
kC+ZfDAIGqz4nYapQRgP7KY8YyDJa888J/yz0H385ao1uFxbVYMLjwl0YRSjzeci
HIYVTlDpVQmEO2WI0Hn0OzFaAkHZu9aJN0xjMWn4I4lhBidWaMBC/OeJSfg3EEYR
f0mO9+ZCGwzpNpMKSONc3yy3HftEy7Qc9taXDQjUtB5afCfkQpLf59F/4WxeJj9t
lpFBgLuUQNXlzA==
-----END CERTIFICATE-----
Generated at Sat Oct 31 05:43:46 2026 by rpki-client