Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
File: gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft (raw, json)
Hash identifier: NyYcLoPoOETqMoSvbl0s+5UmNm6mTlV+vFHZLuoF+C8=
Subject key identifier: 4F:50:70:38:D2:B0:BF:05:C7:C4:18:15:05:7C:EC:FF:53:32:12:EE
Authority key identifier: 81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
Certificate issuer: /CN=8166038385b343d55e76b728efe23c0731787668
Certificate serial: 019CE0D8BBC42691179A7C878BC2940CCE16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
Manifest number: 1163
Signing time: Thu 12 Mar 2026 07:00:25 +0000
Manifest this update: Thu 12 Mar 2026 07:00:25 +0000
Manifest next update: Fri 13 Mar 2026 07:00:25 +0000
Files and hashes: 1: 8YpwJkM4ApxJ79nY1Tn1a81nlqM.roa (hash: tcShowN5n/wg+sXuZ3o0xwGbFl1QoPNhkaf9D8szQoM=)
2: gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl (hash: a36eAZvr1WKzRklUxKISunWiiYDu02lmIhMFf19Hefw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e0:d8:bb:c4:26:91:17:9a:7c:87:8b:c2:94:0c:ce:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8166038385b343d55e76b728efe23c0731787668
Validity
Not Before: Mar 12 07:00:25 2026 GMT
Not After : Mar 13 07:00:25 2026 GMT
Subject: CN=4f507038d2b0bf05c7c41815057cecff533212ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d3:a7:d6:9c:59:1d:77:c0:6e:ca:a0:42:dc:
b2:94:0a:47:1f:65:54:76:db:0b:16:f3:e3:2c:93:
b0:af:96:54:13:38:06:e4:1a:d3:0a:25:33:0c:b0:
8f:30:07:64:7d:a8:cb:81:53:47:d2:35:15:aa:85:
eb:c8:27:3f:13:b2:14:47:3c:73:7b:82:1d:9a:70:
e8:3d:b7:39:97:91:ac:8e:04:0b:43:a8:59:06:28:
73:44:f6:78:5f:c5:20:26:c6:dc:af:eb:f3:ff:9e:
ac:a0:57:ee:2f:a2:f2:05:6b:76:ff:26:46:f0:b8:
22:02:cf:5d:9b:1b:69:61:b6:10:d8:19:f8:b3:09:
4e:f0:ab:20:6f:85:4b:bd:ce:d9:8b:58:27:9f:c8:
67:7e:36:c3:aa:48:93:df:79:6d:57:1c:e5:14:d8:
73:ce:c1:d3:19:f5:d8:3d:eb:04:ca:a1:82:1a:cc:
46:fe:1e:af:aa:7d:74:31:21:89:bd:ec:57:bf:85:
b3:62:0f:bf:42:48:04:2a:93:fa:22:9d:61:c1:07:
18:a3:db:32:76:0d:66:ef:ea:ca:07:d9:65:19:90:
bc:0e:54:17:3d:4f:c0:12:31:22:56:37:22:b0:08:
84:bf:b7:f8:79:4e:d7:06:f3:b1:ab:36:a5:ce:cc:
92:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:50:70:38:D2:B0:BF:05:C7:C4:18:15:05:7C:EC:FF:53:32:12:EE
X509v3 Authority Key Identifier:
keyid:81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ab:c6:68:0c:d1:50:ee:80:48:21:86:16:64:6a:6b:2e:3a:
cd:74:7f:eb:59:58:bd:b0:d4:55:ed:62:8c:13:c0:ed:6a:7b:
80:fa:ad:39:61:cc:68:97:5b:b2:3c:52:21:f5:e8:f8:f1:2a:
4c:2d:2d:5e:d8:ae:b3:be:cb:f5:0f:28:57:cd:d8:a2:96:0c:
d3:43:2d:87:ec:1a:66:41:0a:e2:88:a5:6a:1c:6f:82:a2:7d:
a1:9f:13:6e:7d:99:f3:3c:62:5a:c3:72:2b:8d:5c:2c:d5:11:
4d:f3:61:58:30:a9:f6:37:9f:4f:8a:95:a2:7b:2a:19:04:c2:
c3:10:8c:32:54:d5:bc:52:42:62:73:fa:0d:9b:77:66:e4:ef:
5d:3b:b0:32:fa:7b:10:47:b1:fb:b3:b5:66:95:c4:df:50:a7:
4a:ed:da:5a:5d:27:bf:db:95:f3:c1:85:0a:3b:38:19:56:ac:
7a:26:f2:47:d2:53:84:e5:55:d7:d9:2b:5e:31:5f:2a:9e:07:
94:d6:3a:15:40:a6:e6:04:48:6c:10:6d:8f:aa:c6:b3:20:6f:
c6:64:3c:07:fb:b0:a1:c1:77:e1:5c:18:b1:f6:09:d9:ad:38:
7d:62:00:68:29:cb:96:40:7c:63:15:19:dd:49:e7:07:21:7d:
64:81:83:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 16:43:56 2026 by rpki-client