Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.mft
File: gWsWnRn6OVDRRdWEr6YXAfzatdE.mft (raw, json)
Hash identifier: EvWeqzuJF+LxT6lfoVajc6MDrtQlQyEfrc75GCgi58Q=
Subject key identifier: A4:BD:D4:54:10:09:6A:1D:8F:4C:60:8F:1E:34:85:DF:BF:88:7D:FA
Authority key identifier: 81:6B:16:9D:19:FA:39:50:D1:45:D5:84:AF:A6:17:01:FC:DA:B5:D1
Certificate issuer: /CN=816b169d19fa3950d145d584afa61701fcdab5d1
Certificate serial: 01A08A8C2D1FEF42A7B478B06D3EA70A19CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWsWnRn6OVDRRdWEr6YXAfzatdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:00:37 +0000
Manifest this update: Thu 10 Sep 2026 09:00:37 +0000
Manifest next update: Fri 11 Sep 2026 09:00:37 +0000
Files and hashes: 1: NStI2c33ELu1MdgMNr4ASro5yxg.roa (hash: DGIV6y9JcITViqGIDqZJzNdiLNbdNYRRHPqeCBc+BJY=)
2: SzV7YXB0I-v32buFZVhcBfuK4b8.roa (hash: 9Bg/sMGFQWNrP6cNVtWMxuP3OzfvHUrPEKBcUfgdp5M=)
3: gWsWnRn6OVDRRdWEr6YXAfzatdE.crl (hash: FF+JkX9EQiWs698kg3m5rRF95jiG/5M6bPll1DSQfeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWsWnRn6OVDRRdWEr6YXAfzatdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:2d:1f:ef:42:a7:b4:78:b0:6d:3e:a7:0a:19:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816b169d19fa3950d145d584afa61701fcdab5d1
Validity
Not Before: Sep 10 09:00:37 2026 GMT
Not After : Sep 11 09:00:37 2026 GMT
Subject: CN=a4bdd45410096a1d8f4c608f1e3485dfbf887dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b0:0c:a4:e2:5c:bc:89:3f:b4:7b:22:0b:d9:
56:61:80:26:ca:32:46:f0:c3:9d:b3:69:29:4f:ee:
1f:bb:63:ad:94:44:3e:90:f3:87:75:ef:44:ab:84:
20:95:f8:66:08:fc:0b:4d:04:7e:de:d9:a3:b4:ed:
93:e6:bb:d8:6f:5f:d6:55:34:9a:89:cd:fb:17:10:
09:e7:ff:7a:90:28:4a:9b:35:f7:5d:85:0a:cf:5c:
36:76:6d:8f:d7:96:7c:89:c4:e5:c2:1f:61:21:a9:
ac:01:20:a6:6e:9a:c6:84:1d:50:45:29:98:8c:77:
f7:5e:f2:cb:e5:65:92:a7:05:27:af:68:56:24:78:
69:0a:bf:b2:7f:10:75:83:39:c7:5b:f1:bf:15:db:
3f:fc:4c:a1:78:1b:05:58:6b:12:71:bc:f3:63:20:
0f:b8:7b:04:2e:53:50:f5:41:e1:22:d3:9d:d6:ef:
75:ef:28:a0:65:40:a4:64:f7:fa:9b:c9:ab:39:d9:
6b:1d:98:e7:23:04:5c:41:ea:f3:0a:02:0d:ad:ef:
e4:ed:af:63:d8:01:89:d8:d4:a1:d2:33:ac:a4:9f:
02:cc:04:56:53:14:44:34:61:7b:98:d0:b2:0c:33:
f8:c0:f4:30:33:52:19:63:23:1a:03:88:5f:3c:0e:
5c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BD:D4:54:10:09:6A:1D:8F:4C:60:8F:1E:34:85:DF:BF:88:7D:FA
X509v3 Authority Key Identifier:
keyid:81:6B:16:9D:19:FA:39:50:D1:45:D5:84:AF:A6:17:01:FC:DA:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWsWnRn6OVDRRdWEr6YXAfzatdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:31:0a:70:9b:4f:80:ff:10:0a:99:9e:4d:fd:3b:80:00:3a:
68:43:1f:65:9d:ed:41:99:04:86:11:b9:82:5f:dd:e3:64:3d:
bb:60:56:ce:ff:f0:3a:a8:3d:a7:5e:0f:6c:63:ab:9b:13:a3:
51:70:31:ed:2e:0a:bc:29:20:26:cb:7c:9f:0a:d8:d3:33:47:
e3:5e:aa:6d:82:c2:55:93:ab:e4:87:4a:12:38:84:12:7d:9c:
06:4b:7b:51:8c:da:29:d8:1c:55:44:93:af:f1:4e:82:08:3f:
91:68:ad:7a:74:a1:54:73:69:88:4d:f3:5a:e2:d2:38:08:4e:
b4:ea:a4:8d:f8:52:be:36:0e:20:26:21:4b:20:07:1b:a6:3c:
98:3f:41:bb:72:23:2e:09:eb:89:de:93:73:dc:ea:44:37:73:
80:08:27:73:1f:1f:6f:8b:4d:a8:50:00:d5:72:1f:36:94:25:
2a:8f:14:3f:12:c2:0a:6a:a6:1b:31:19:2e:e9:0a:68:1c:31:
6d:e8:db:40:12:73:de:e0:17:71:fe:27:62:3f:c8:1c:71:7c:
96:19:33:ce:53:51:37:a9:b4:49:bd:a8:21:3f:79:c7:ed:50:
98:3f:88:a7:cd:aa:9a:38:53:57:70:de:55:ac:3f:92:2d:6d:
ad:58:4f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:17:13 2026 by rpki-client