Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
File: gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft (raw, json)
Hash identifier: SIXK+04pGfDDYL3oUdps7X4YsVGxPWkSnU12MuN+HP0=
Subject key identifier: DE:B9:57:29:FC:E3:34:77:82:E0:A9:AA:91:FC:B1:62:21:24:AA:CE
Authority key identifier: 81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
Certificate issuer: /CN=8166038385b343d55e76b728efe23c0731787668
Certificate serial: 01A08B67FC1CE9A57AFCEB556E9CCA106BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
Manifest number: 1349
Signing time: Thu 10 Sep 2026 13:00:42 +0000
Manifest this update: Thu 10 Sep 2026 13:00:42 +0000
Manifest next update: Fri 11 Sep 2026 13:00:42 +0000
Files and hashes: 1: 8YpwJkM4ApxJ79nY1Tn1a81nlqM.roa (hash: tcShowN5n/wg+sXuZ3o0xwGbFl1QoPNhkaf9D8szQoM=)
2: gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl (hash: 69YqVUXQ1/91yytnN//xOj6oiLuXT4eAIQdN6EP2FKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:67:fc:1c:e9:a5:7a:fc:eb:55:6e:9c:ca:10:6b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8166038385b343d55e76b728efe23c0731787668
Validity
Not Before: Sep 10 13:00:42 2026 GMT
Not After : Sep 11 13:00:42 2026 GMT
Subject: CN=deb95729fce3347782e0a9aa91fcb1622124aace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:f9:72:97:76:32:ae:3a:a4:3f:99:01:25:
b3:3d:c5:90:28:bf:9b:f2:8f:a4:5a:85:a0:13:e9:
3b:e9:af:a7:d5:c7:0c:cc:30:f8:63:e7:48:e1:9f:
f2:71:6c:55:fb:d4:41:07:b4:58:fe:8a:69:e5:47:
df:ee:cf:7f:af:13:ee:bc:6f:28:0f:34:47:ef:c1:
b7:95:81:01:64:68:f2:21:ce:59:ef:a1:67:e6:42:
44:11:b6:68:b7:7a:91:3f:4c:30:35:2b:b2:02:a0:
4f:0f:b3:8e:d4:48:b8:75:c8:f9:af:79:37:3a:54:
35:60:cd:a4:84:17:3d:b8:89:f0:a9:c6:58:32:67:
34:7e:be:67:dd:9f:b8:2f:b9:28:3d:bc:99:85:da:
29:29:96:78:08:8b:94:21:1a:b6:fc:46:4f:9d:8f:
a5:3c:87:0e:bf:09:1b:7c:bf:04:60:c0:a6:08:bd:
39:df:95:b6:c9:7c:82:38:e8:a6:5d:47:e6:ed:b1:
6b:5e:80:86:cc:d5:96:5e:de:b9:a2:0e:56:2f:d5:
1e:a7:fb:9d:95:2c:c6:1f:0d:5b:d0:83:52:6b:4a:
39:0a:05:94:c2:85:f8:dc:ce:6e:48:fe:88:bf:dc:
30:92:a5:df:57:ee:8b:4d:0b:23:59:b7:c6:39:22:
a6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B9:57:29:FC:E3:34:77:82:E0:A9:AA:91:FC:B1:62:21:24:AA:CE
X509v3 Authority Key Identifier:
keyid:81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d3:57:42:f2:95:2e:dd:ad:0e:34:b9:a7:ed:74:a5:93:25:
b4:a5:ad:de:5a:be:d1:3c:3a:6f:fa:89:27:1b:a1:ba:de:27:
04:fc:f2:84:a9:51:92:af:7f:c0:26:99:0f:e6:e0:0c:ca:64:
bd:9d:ba:5a:57:b7:68:d5:4c:12:7d:94:f0:80:48:8e:84:f9:
91:ae:f4:09:d1:58:5f:55:45:c9:2f:c3:0b:f9:c0:4e:e8:72:
85:19:bf:49:43:97:5e:d4:67:1e:b2:8b:2d:c1:fc:87:ff:5e:
2a:a0:d6:53:28:e5:55:9c:e7:1b:53:3a:fa:02:dc:2a:6a:60:
a2:9f:5d:98:d5:48:30:8d:aa:4b:a1:f8:af:e7:20:30:62:38:
46:3e:38:36:d6:54:84:be:45:f0:9a:aa:76:f6:53:ea:c9:b8:
1c:27:b7:a4:bb:f9:e5:e2:bd:a4:70:1c:0d:24:c5:d5:8c:75:
6a:b0:0d:90:7f:c9:52:7f:5a:ef:6e:d6:b5:97:6f:86:02:17:
37:bf:5f:56:91:68:fe:7f:03:19:47:73:48:0a:77:4d:ae:4b:
6f:48:13:be:ac:9d:38:c5:b1:4d:e7:a1:c2:86:7e:31:49:1a:
e0:16:52:1b:e8:d6:97:dc:fc:f4:0c:18:fa:11:5c:d5:72:d9:
c7:bd:74:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:56:23 2026 by rpki-client