Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
File: gwelIkrm2akuR-ZW3YAbEP-5Bys.mft (raw, json)
Hash identifier: gbA+MOUBrIImCAmSVK94n4vL3V10P0ZkE/vIjPHhB9I=
Subject key identifier: 94:F2:98:E7:CB:96:0C:3B:7D:5C:E9:E3:38:5C:38:52:5E:41:23:CF
Authority key identifier: 83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
Certificate issuer: /CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Certificate serial: 019D34F5F2D15B47C24C712C8A23F0726A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
Manifest number: 058C
Signing time: Sat 28 Mar 2026 15:00:26 +0000
Manifest this update: Sat 28 Mar 2026 15:00:26 +0000
Manifest next update: Sun 29 Mar 2026 15:00:26 +0000
Files and hashes: 1: RdWRv5Q-rS2yC6uCgBMcFMzrMv8.roa (hash: fI9arYNvAPfUyU+E39rZuBfMlHVUr8jzRqIJWE8wtJ8=)
2: gwelIkrm2akuR-ZW3YAbEP-5Bys.crl (hash: gHoGy4wuw2dlSvhdudRTy+Ru9cagQcZW1PGoiJpvAhA=)
3: wfxGYWiIUCP6iUkp5_pLsxm1lx4.roa (hash: ArA5MNsGoq16uu1LTXHkSoObxtkAg469b2rN/NS5HFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:f5:f2:d1:5b:47:c2:4c:71:2c:8a:23:f0:72:6a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Validity
Not Before: Mar 28 15:00:26 2026 GMT
Not After : Mar 29 15:00:26 2026 GMT
Subject: CN=94f298e7cb960c3b7d5ce9e3385c38525e4123cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cb:13:33:45:6d:41:07:3d:6b:c4:76:36:a4:
1e:26:b9:64:10:f9:a0:12:98:15:28:31:36:d6:74:
6b:d7:b2:7b:9c:4d:1d:14:ee:b9:f7:bd:2b:eb:b0:
a2:6b:7d:e0:8b:34:25:8c:4e:1c:07:7b:78:e4:24:
e4:ce:09:ac:b3:a1:da:a9:8a:9d:3e:9e:8a:4c:2c:
f9:85:dc:ce:37:7f:74:ac:55:11:4b:d8:78:18:0c:
70:86:ca:48:e3:da:81:b2:8e:ee:c0:1f:eb:c5:de:
4a:ad:00:40:44:c7:4d:f0:66:c8:a0:96:e6:d4:a2:
e2:b0:5a:af:a5:b6:5c:bc:cd:22:ca:53:d6:f5:0b:
94:79:e9:56:fe:2b:ac:ce:95:0c:6a:76:48:3b:da:
cb:61:a6:9f:6a:97:42:cf:b8:95:e2:2d:b0:05:df:
f3:2e:30:7f:db:64:fd:1d:b4:cb:29:07:75:f0:50:
25:fd:47:b2:d9:8c:39:c4:c8:c0:1b:8f:0a:93:74:
ab:b6:b8:54:3e:0d:61:2c:05:91:41:d7:ce:6c:c0:
0d:34:e6:08:7b:2d:91:8f:73:4d:4e:e9:c7:85:ad:
6f:e3:99:6c:ef:60:de:b8:6b:ef:05:f1:bb:db:16:
4a:4c:25:18:3c:bb:0b:bc:67:0e:0f:04:33:0f:57:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F2:98:E7:CB:96:0C:3B:7D:5C:E9:E3:38:5C:38:52:5E:41:23:CF
X509v3 Authority Key Identifier:
keyid:83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:86:e1:dc:48:d5:b0:73:ca:52:ec:d7:fd:3e:4f:74:13:15:
b1:67:c0:0b:13:b7:64:3f:06:23:19:43:e3:d8:24:b4:da:e7:
86:21:54:0f:b7:8c:41:88:46:e6:97:a5:23:66:32:68:ee:0e:
39:d2:3c:cc:a1:e8:ee:35:58:b0:76:09:99:4b:ba:33:f3:1a:
df:76:46:31:b3:05:a9:c9:f6:5d:ae:3c:8e:3f:74:e6:e6:3a:
2c:c7:b1:7b:f0:ce:0c:e4:e9:50:66:37:27:f6:aa:06:5a:02:
13:2c:ba:dd:7d:41:7a:ba:4a:67:de:ca:9e:04:98:5c:fe:bd:
6f:e2:57:b5:33:b3:fe:9b:f8:d8:41:be:da:66:09:9d:93:4a:
55:23:e0:04:fe:b7:ba:5c:a2:ca:e2:94:ea:7d:8d:35:d3:80:
09:2b:d6:ba:5b:46:91:39:8e:8f:f1:33:16:6f:7f:d6:dc:2c:
0d:e0:97:f3:6f:02:99:fe:9e:42:af:64:9a:d7:d4:a9:0b:1e:
ea:7f:7a:15:42:c8:5a:00:ff:15:17:ee:55:2c:80:4a:97:e8:
31:1e:f6:4e:9b:15:30:b9:4c:66:ec:c1:73:6d:e6:b8:22:3e:
b0:11:25:51:9e:b8:d0:e9:9f:a3:95:35:c7:37:41:97:fb:52:
8a:1f:1c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 19:49:51 2026 by rpki-client