Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
File: gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft (raw, json)
Hash identifier: cJG25IX+WqkaH4CMl/gRznsjARNfo4518rrUA0MzIp0=
Subject key identifier: 59:6F:02:31:0C:B7:99:7C:AE:7B:8E:29:F6:53:EC:CF:1D:7F:F7:52
Authority key identifier: 81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
Certificate issuer: /CN=8166038385b343d55e76b728efe23c0731787668
Certificate serial: 019EB80EBF1B8CC8EDC4172831389BBD127A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
Manifest number: 1257
Signing time: Thu 11 Jun 2026 19:00:34 +0000
Manifest this update: Thu 11 Jun 2026 19:00:34 +0000
Manifest next update: Fri 12 Jun 2026 19:00:34 +0000
Files and hashes: 1: 8YpwJkM4ApxJ79nY1Tn1a81nlqM.roa (hash: tcShowN5n/wg+sXuZ3o0xwGbFl1QoPNhkaf9D8szQoM=)
2: gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl (hash: NgeHNSA+SIjhlLUPPxIrPEIlVPN/N4D+vC6HDaII9oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:bf:1b:8c:c8:ed:c4:17:28:31:38:9b:bd:12:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8166038385b343d55e76b728efe23c0731787668
Validity
Not Before: Jun 11 19:00:34 2026 GMT
Not After : Jun 12 19:00:34 2026 GMT
Subject: CN=596f02310cb7997cae7b8e29f653eccf1d7ff752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a7:b7:ea:c2:91:37:75:88:17:e0:67:f0:f1:
05:37:5a:cd:a2:9e:0f:5f:b2:2d:6d:4a:3c:65:b0:
18:1b:8c:a5:52:11:9e:8b:79:b8:cd:ae:e0:ac:c1:
cf:3e:24:de:88:b0:25:df:de:fa:19:b7:2c:19:69:
b2:6f:7f:e1:97:46:cd:18:6a:7f:ee:1f:fc:24:77:
4e:ba:10:63:f9:c8:90:8f:b4:28:f3:e0:c7:a2:a4:
ad:65:b1:26:cc:52:8a:ff:1c:4c:13:90:57:be:3a:
23:6c:8e:df:3d:27:62:5a:6a:8c:81:93:16:c5:e5:
99:ea:64:d5:1f:e7:43:10:48:58:3d:2d:98:46:41:
54:91:65:cf:45:eb:5f:cb:ac:a7:94:c6:a5:a6:5e:
da:0b:75:61:06:f8:78:57:78:f9:7c:4f:e3:f9:67:
cd:c8:f0:78:71:9b:82:6e:70:87:6e:53:87:ae:71:
af:5e:ea:b8:95:20:1b:14:dd:41:d4:19:86:01:25:
ac:3e:ad:21:23:93:de:24:cc:84:22:ed:c6:4c:d1:
6b:46:85:b5:0b:4a:52:86:e8:af:48:c8:37:0f:9c:
73:28:fc:b5:50:9d:94:8d:70:af:00:c4:ed:10:88:
2d:c6:00:c5:5d:c6:c1:43:35:54:c1:34:48:bc:35:
5a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6F:02:31:0C:B7:99:7C:AE:7B:8E:29:F6:53:EC:CF:1D:7F:F7:52
X509v3 Authority Key Identifier:
keyid:81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:39:a3:46:42:0e:62:00:61:e1:f9:ce:5d:14:98:80:0f:68:
6a:43:46:48:96:17:f6:5d:4d:69:b5:a2:c7:36:77:51:ac:54:
75:7d:b0:17:51:15:9d:f5:22:09:f7:a7:5e:67:ea:b3:d2:6b:
57:1a:2d:0d:9b:7a:cc:02:a8:68:34:5f:f9:03:eb:b7:8d:ae:
f5:6f:1b:95:df:1e:a0:60:3a:77:3d:13:2a:6f:be:53:9e:13:
f7:c0:72:86:64:b7:41:72:cd:a2:81:73:e7:6d:35:a6:89:77:
cc:76:73:ef:3d:9d:d2:1f:87:ec:ed:08:9f:a3:82:30:84:09:
88:91:36:35:da:92:78:71:cd:d1:02:1f:b2:99:eb:9f:ef:70:
61:5d:fa:39:5e:a0:47:d1:8e:8a:eb:32:90:13:ec:be:ab:7f:
51:9a:77:f7:23:94:48:36:8c:9d:1e:93:14:c8:e2:d3:c7:92:
2f:d0:47:70:26:a3:e2:77:22:11:6b:e1:cc:76:66:92:0a:ba:
2c:71:15:29:dc:a9:fe:be:6d:50:f5:33:99:d6:03:de:4e:e9:
b5:10:52:9d:2c:68:1b:d6:85:92:5f:ba:25:d7:3b:62:1e:aa:
60:41:f9:c3:29:b7:cb:75:ef:d3:49:d2:26:6b:f2:6c:87:53:
80:40:40:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64Dr8bjMjtxBcoMTibvRJ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNjYwMzgzODViMzQzZDU1ZTc2YjcyOGVmZTIzYzA3MzE3
ODc2NjgwHhcNMjYwNjExMTkwMDM0WhcNMjYwNjEyMTkwMDM0WjAzMTEwLwYDVQQD
Eyg1OTZmMDIzMTBjYjc5OTdjYWU3YjhlMjlmNjUzZWNjZjFkN2ZmNzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqe36sKRN3WIF+Bn8PEFN1rNop4P
X7ItbUo8ZbAYG4ylUhGei3m4za7grMHPPiTeiLAl3976GbcsGWmyb3/hl0bNGGp/
7h/8JHdOuhBj+ciQj7Qo8+DHoqStZbEmzFKK/xxME5BXvjojbI7fPSdiWmqMgZMW
xeWZ6mTVH+dDEEhYPS2YRkFUkWXPRetfy6ynlMalpl7aC3VhBvh4V3j5fE/j+WfN
yPB4cZuCbnCHblOHrnGvXuq4lSAbFN1B1BmGASWsPq0hI5PeJMyEIu3GTNFrRoW1
C0pShuivSMg3D5xzKPy1UJ2UjXCvAMTtEIgtxgDFXcbBQzVUwTRIvDVaEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlvAjEMt5l8rnuOKfZT7M8df/dSMB8GA1UdIwQY
MBaAFIFmA4OFs0PVXna3KO/iPAcxeHZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1dZRGc0V3pROVZlZHJjbzctSThCekY0ZG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy80OGNmZDAtMzIzOC00YWFmLWI2NjMt
NDM3M2I2NTc5MGI4LzEvZ1dZRGc0V3pROVZlZHJjbzctSThCekY0ZG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy80OGNmZDAtMzIzOC00YWFmLWI2NjMtNDM3M2I2NTc5MGI4
LzEvZ1dZRGc0V3pROVZlZHJjbzctSThCekY0ZG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDmjRkIO
YgBh4fnOXRSYgA9oakNGSJYX9l1NabWixzZ3UaxUdX2wF1EVnfUiCfenXmfqs9Jr
VxotDZt6zAKoaDRf+QPrt42u9W8bld8eoGA6dz0TKm++U54T98ByhmS3QXLNooFz
5201pol3zHZz7z2d0h+H7O0In6OCMIQJiJE2NdqSeHHN0QIfspnrn+9wYV36OV6g
R9GOiusykBPsvqt/UZp39yOUSDaMnR6TFMji08eSL9BHcCaj4nciEWvhzHZmkgq6
LHEVKdyp/r5tUPUzmdYD3k7ptRBSnSxoG9aFkl+6Jdc7Yh6qYEH5wym3y3Xv00nS
JmvybIdTgEBAkg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:16:06 2026 by rpki-client