Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
File: gwelIkrm2akuR-ZW3YAbEP-5Bys.mft (raw, json)
Hash identifier: ImBzCB6SZN7O72CD/zHpieePZAnMhVVRNcHLtKDu6u0=
Subject key identifier: 76:85:04:43:42:5F:13:14:9A:A6:BA:F1:B8:4D:BF:42:6E:44:23:AA
Authority key identifier: 83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
Certificate issuer: /CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Certificate serial: 019E2091C61445A55FE1EB8DB9FFC5DDE0F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
Manifest number: 0606
Signing time: Wed 13 May 2026 09:01:24 +0000
Manifest this update: Wed 13 May 2026 09:01:24 +0000
Manifest next update: Thu 14 May 2026 09:01:24 +0000
Files and hashes: 1: RdWRv5Q-rS2yC6uCgBMcFMzrMv8.roa (hash: fI9arYNvAPfUyU+E39rZuBfMlHVUr8jzRqIJWE8wtJ8=)
2: gwelIkrm2akuR-ZW3YAbEP-5Bys.crl (hash: J0JEVXk3HvdRHkUbK19PT9H6Tt1/XnzcgOQI+0gYBcA=)
3: wfxGYWiIUCP6iUkp5_pLsxm1lx4.roa (hash: ArA5MNsGoq16uu1LTXHkSoObxtkAg469b2rN/NS5HFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:c6:14:45:a5:5f:e1:eb:8d:b9:ff:c5:dd:e0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Validity
Not Before: May 13 09:01:24 2026 GMT
Not After : May 14 09:01:24 2026 GMT
Subject: CN=76850443425f13149aa6baf1b84dbf426e4423aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bf:41:13:35:62:df:6e:09:76:84:f5:e0:6c:
56:08:e7:56:41:f4:50:dc:1f:45:f9:e9:cb:19:cf:
cf:1f:a5:08:27:e1:80:b1:5f:06:cf:7f:77:ef:e9:
30:b9:97:5c:50:a2:93:5a:92:00:ac:dd:f3:67:fa:
e6:28:bb:6a:59:8d:6c:61:95:5e:32:b4:ac:49:49:
d2:ad:66:9c:58:7b:8b:47:53:dc:f2:00:ef:8a:1b:
cf:13:83:9c:8c:6c:b2:d9:77:7e:89:74:5e:6c:95:
8c:bf:a3:de:af:0e:5d:bc:05:25:d4:04:85:d1:43:
5f:09:b7:8c:9d:f1:8e:47:1a:37:85:42:75:1c:0a:
50:6d:78:b6:cb:b0:bc:84:1a:0c:b4:f7:0b:1a:4b:
0e:65:f1:84:06:de:89:b7:46:a8:1f:d7:06:e0:93:
c1:94:29:61:1f:c1:2c:9e:4a:8c:05:42:ea:17:f6:
44:cf:c2:09:5c:e0:fa:66:ff:52:8c:f7:06:8b:f8:
50:26:71:05:2d:b3:8e:29:6b:86:9f:9f:1a:c6:a4:
61:78:f2:ce:66:82:1b:49:50:ee:20:18:17:00:23:
35:32:4b:6b:4c:5e:cc:34:97:c2:51:dd:12:8f:2c:
3f:d1:a0:5d:b5:80:9f:57:e0:22:e9:b1:58:ac:6b:
e9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:85:04:43:42:5F:13:14:9A:A6:BA:F1:B8:4D:BF:42:6E:44:23:AA
X509v3 Authority Key Identifier:
keyid:83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5d:0f:9a:ec:8c:6c:82:56:ea:87:d8:04:02:c5:64:4e:0b:
ba:69:8c:37:ba:d3:a9:1d:57:0d:62:73:b7:84:04:4a:f5:45:
3d:a3:46:e3:9c:f6:4f:f4:2e:95:d7:0a:66:35:7c:c1:f2:41:
a0:b6:f8:fd:bf:f9:81:a2:02:ff:55:c8:84:5b:48:b7:f8:27:
11:94:3f:99:6a:b4:3b:54:59:36:cf:92:4c:71:b0:79:80:ee:
90:71:a1:2f:88:0a:37:46:1f:27:dc:25:e8:ff:1a:90:9c:24:
1d:89:ee:1d:0b:76:30:42:ea:16:56:48:a7:bf:88:38:bb:5f:
88:13:e5:35:bb:bf:0f:4d:50:a5:5a:fc:d0:77:73:8b:b1:f5:
78:82:c5:dd:45:b7:c0:48:d6:97:b5:a1:3f:be:b5:45:20:3e:
46:15:e1:bd:5e:73:e9:ef:a1:ae:38:1e:53:1e:8e:51:23:78:
51:dd:ca:12:7e:94:e1:c6:5b:38:a6:d2:0b:f0:65:76:0b:92:
b8:05:eb:c7:ab:e6:fc:c0:09:2c:d2:c2:d1:50:ff:73:55:ec:
01:69:db:36:f3:b8:a2:72:2e:b8:14:05:48:c5:cc:21:cf:be:
99:ba:49:02:d8:6c:0c:d2:1d:16:de:ec:5e:75:8e:db:a7:98:
7e:8b:00:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:10:20 2026 by rpki-client