Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
File: gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft (raw, json)
Hash identifier: vNHcBrjt16srdPDODjtJVtiHPxOfqNHnkigK7de6sQ8=
Subject key identifier: 0E:31:F2:22:6E:31:1F:8C:FE:D1:AB:99:52:8E:39:23:CF:4A:E7:90
Authority key identifier: 81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
Certificate issuer: /CN=8166038385b343d55e76b728efe23c0731787668
Certificate serial: 01A190C3134131EF09BA9B4B8A827B0B57CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
Manifest number: 13D3
Signing time: Sat 31 Oct 2026 07:01:05 +0000
Manifest this update: Sat 31 Oct 2026 07:01:05 +0000
Manifest next update: Sun 01 Nov 2026 07:01:05 +0000
Files and hashes: 1: 8YpwJkM4ApxJ79nY1Tn1a81nlqM.roa (hash: tcShowN5n/wg+sXuZ3o0xwGbFl1QoPNhkaf9D8szQoM=)
2: EQcSnDEzv8FK_xJY9AK1FSIjcbI.roa (hash: yd6zB2ZMaqidG2yxAxCdRzrLByF+Ug+XA8C46cFlruo=)
3: gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl (hash: OL1DBlAhhyRvm2i7hfTA87luYe210pPsnEooHdyH8vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:c3:13:41:31:ef:09:ba:9b:4b:8a:82:7b:0b:57:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8166038385b343d55e76b728efe23c0731787668
Validity
Not Before: Oct 31 07:01:05 2026 GMT
Not After : Nov 1 07:01:05 2026 GMT
Subject: CN=0e31f2226e311f8cfed1ab99528e3923cf4ae790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:8c:01:68:ff:a3:4a:d3:18:d1:5e:9d:f5:
7c:91:37:f3:42:88:d7:79:a1:bc:57:ef:10:37:a0:
7d:17:e6:4c:2e:c4:52:b6:ac:16:f1:3f:ba:89:50:
2c:b5:c7:4f:2a:95:85:3f:d3:bc:2e:42:fb:34:53:
7a:78:bf:65:c9:6a:a3:0e:31:ac:15:75:9c:48:c1:
9b:ec:bd:af:97:ff:75:d6:f0:4b:24:66:85:06:3c:
e4:51:1c:53:3d:6f:f5:ba:20:d0:42:c4:41:14:df:
9d:c5:68:cb:1c:5b:29:84:e2:3f:c8:f5:68:19:49:
05:6c:ee:87:2b:ca:01:4c:f5:76:a7:3a:f5:11:ac:
49:09:1c:29:55:b1:13:c3:ce:2c:3a:10:90:84:1e:
76:32:4d:a2:35:dc:92:fc:f9:d4:69:96:2c:5a:fd:
3d:35:3a:52:4f:48:62:ef:06:e0:eb:66:2e:f3:cb:
10:d5:dd:d2:2b:05:66:34:23:b7:c2:45:6c:01:0a:
0a:0f:48:cf:59:be:09:74:0a:75:1f:ca:79:e5:5c:
a9:42:a1:ed:e6:f4:4e:cf:da:94:3e:8b:d2:4a:1d:
ff:51:9e:7d:b6:bc:99:f2:3f:29:5e:14:61:aa:ba:
96:a0:3f:4f:27:d5:8b:61:e1:04:f0:27:8e:a6:63:
e8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:31:F2:22:6E:31:1F:8C:FE:D1:AB:99:52:8E:39:23:CF:4A:E7:90
X509v3 Authority Key Identifier:
keyid:81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:27:cd:0a:08:c4:fc:e3:1e:f7:b4:9b:e2:a9:c1:76:00:ce:
64:7d:a3:6c:6a:0c:e9:96:f6:5f:9c:14:51:2a:88:19:db:79:
f3:cf:76:40:24:cd:c3:88:5f:83:2e:b5:3d:bc:99:06:49:68:
2d:4a:d6:0f:03:0c:07:72:d2:6a:22:ca:4d:7b:3c:b4:1b:95:
bc:4c:d1:ca:b4:9b:83:23:09:e4:98:03:45:99:94:35:06:b5:
27:e0:d4:b5:e0:62:6f:3a:5a:b7:72:34:c1:c4:78:96:14:d5:
4a:db:e0:37:09:67:53:2f:7b:32:5f:4a:1a:b4:14:b7:75:e0:
d3:d4:ac:f5:52:33:a1:63:c6:c1:1a:13:ac:cc:7d:ee:0d:e4:
04:8b:95:21:47:6e:46:7f:1d:3c:ef:c5:ec:a3:37:67:61:87:
70:8a:a9:4d:c1:4f:d1:bb:6c:38:85:57:00:ad:15:a1:aa:8a:
50:d9:5f:f9:91:3e:64:14:09:5d:2f:11:bf:8e:84:55:9e:7b:
6f:5b:5c:b7:db:fc:62:b4:b3:22:65:75:1d:ac:15:dc:c1:e5:
eb:64:90:63:54:1c:f9:0c:23:d4:21:8f:d0:b4:4c:35:fd:0c:
d9:2b:2b:c7:9d:6f:e0:c7:37:fe:2c:6d:00:1b:ea:3b:54:69:
c2:16:f9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:41:05 2026 by rpki-client