Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
File: gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft (raw, json)
Hash identifier: R1wDKoBH6rJJd6oB3ePKrwsl9EJ1hApknkSicwUj86w=
Subject key identifier: 7A:9F:85:5D:31:89:FF:55:12:BA:6F:63:FA:3F:28:B8:F7:70:2B:7F
Authority key identifier: 81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
Certificate issuer: /CN=8166038385b343d55e76b728efe23c0731787668
Certificate serial: 019DCE632DAF1E4300C51B737E467E9D6C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
Manifest number: 11DE
Signing time: Mon 27 Apr 2026 10:01:39 +0000
Manifest this update: Mon 27 Apr 2026 10:01:39 +0000
Manifest next update: Tue 28 Apr 2026 10:01:39 +0000
Files and hashes: 1: 8YpwJkM4ApxJ79nY1Tn1a81nlqM.roa (hash: tcShowN5n/wg+sXuZ3o0xwGbFl1QoPNhkaf9D8szQoM=)
2: gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl (hash: 2DNmimw1Vf9F7RX0GupBwGG6v0r3QXqjTJcrrShQT40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:2d:af:1e:43:00:c5:1b:73:7e:46:7e:9d:6c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8166038385b343d55e76b728efe23c0731787668
Validity
Not Before: Apr 27 10:01:39 2026 GMT
Not After : Apr 28 10:01:39 2026 GMT
Subject: CN=7a9f855d3189ff5512ba6f63fa3f28b8f7702b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0d:6e:66:39:b4:55:4b:a5:bd:5a:77:08:f2:
e0:7c:a6:f0:b4:79:8f:27:67:a0:57:83:0e:fb:a8:
72:71:78:34:a4:9c:58:55:c2:f8:0e:19:4c:53:4b:
00:32:91:12:78:fd:77:ee:0a:b0:68:55:0c:fb:43:
2c:70:37:f3:a8:ec:9d:c3:32:5c:5f:a7:6a:7c:eb:
ab:fd:55:d6:f0:f2:e2:8e:68:4d:2b:df:bb:83:b3:
fb:c3:93:16:6b:00:7b:eb:56:77:18:85:ad:5b:d5:
16:db:02:33:e5:e3:5f:16:10:af:65:5f:c6:c0:1a:
a8:1c:73:01:4a:df:0b:63:eb:91:c5:5b:8a:0c:92:
23:3f:ed:01:47:35:b2:8c:ed:20:e4:58:3c:0b:df:
3d:06:32:dd:38:06:11:13:ef:1d:50:49:24:74:34:
e8:51:1a:e9:1f:09:fb:e7:40:18:c6:5a:92:5c:db:
bd:68:d1:a3:65:ee:4f:e2:90:54:cb:c5:14:0f:90:
f0:7b:37:57:55:55:26:39:25:2f:12:6c:45:e1:3b:
8a:96:0d:89:a5:77:a4:f3:77:ff:29:e0:0a:25:e4:
f0:ca:03:e1:39:4f:34:69:b5:b0:c8:91:d3:d6:1c:
7a:2c:ac:c2:d6:73:74:e5:a9:34:19:80:cc:82:a6:
e1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9F:85:5D:31:89:FF:55:12:BA:6F:63:FA:3F:28:B8:F7:70:2B:7F
X509v3 Authority Key Identifier:
keyid:81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:15:c6:07:94:be:35:dd:89:ea:a2:5a:ef:e8:0b:6b:af:e8:
de:d7:e9:70:8b:2d:6b:bb:cb:a8:25:ca:1a:a7:17:54:b4:6f:
d9:5f:ac:fd:90:b8:d7:7e:ea:e3:2d:13:c5:7d:f2:e1:30:09:
37:a9:8a:22:bc:33:f7:b1:1c:c7:78:97:bc:fe:9f:d7:de:fa:
68:b0:66:be:ac:1a:8e:e2:1d:9f:93:b2:10:d4:5b:ba:a6:22:
5b:39:1c:57:44:ee:91:46:8f:68:7b:f7:51:26:3a:cc:39:42:
52:6b:58:7b:dd:c1:e0:27:d3:fa:64:b3:32:70:66:af:41:d5:
ae:a7:00:14:23:b1:4e:72:47:51:ea:e2:c4:7b:2c:0c:88:bb:
49:1c:d7:d3:85:22:f6:6b:f8:3b:bc:bc:50:15:10:78:17:05:
b1:18:74:d4:31:b9:47:99:bc:55:9e:99:8f:9e:82:9d:91:5f:
ee:f6:38:8b:46:55:e4:b2:34:c1:18:4a:58:9f:f4:35:d4:53:
8d:61:8e:ab:82:c5:f7:c8:da:ae:22:46:b5:e0:4a:36:41:1e:
21:35:97:1b:52:2f:39:4a:5f:ea:b7:c2:c5:f8:0d:2d:16:c7:
95:a9:d0:4e:3e:09:2a:e5:84:15:cf:90:09:6c:8b:44:14:bd:
d9:c9:fb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:06:10 2026 by rpki-client