Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.mft
File: gWsWnRn6OVDRRdWEr6YXAfzatdE.mft (raw, json)
Hash identifier: Ux5X+3zZ+etWQmovEF/zJVUCNq3/7G3j2jcc4fCz24I=
Subject key identifier: FE:B2:1C:62:5E:7D:A2:BD:8F:45:70:1C:A3:A7:E4:6C:FF:59:F7:21
Authority key identifier: 81:6B:16:9D:19:FA:39:50:D1:45:D5:84:AF:A6:17:01:FC:DA:B5:D1
Certificate issuer: /CN=816b169d19fa3950d145d584afa61701fcdab5d1
Certificate serial: 01A17A03EE74EBFB40489E4CE6AB9954CB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWsWnRn6OVDRRdWEr6YXAfzatdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.mft
Manifest number: 013D
Signing time: Mon 26 Oct 2026 21:00:40 +0000
Manifest this update: Mon 26 Oct 2026 21:00:40 +0000
Manifest next update: Tue 27 Oct 2026 21:00:40 +0000
Files and hashes: 1: NStI2c33ELu1MdgMNr4ASro5yxg.roa (hash: DGIV6y9JcITViqGIDqZJzNdiLNbdNYRRHPqeCBc+BJY=)
2: SzV7YXB0I-v32buFZVhcBfuK4b8.roa (hash: 9Bg/sMGFQWNrP6cNVtWMxuP3OzfvHUrPEKBcUfgdp5M=)
3: gWsWnRn6OVDRRdWEr6YXAfzatdE.crl (hash: SfBhvZtmgqumNu/mLQnvgJxhn0iviNloBJNQznCGauI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWsWnRn6OVDRRdWEr6YXAfzatdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:03:ee:74:eb:fb:40:48:9e:4c:e6:ab:99:54:cb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816b169d19fa3950d145d584afa61701fcdab5d1
Validity
Not Before: Oct 26 21:00:40 2026 GMT
Not After : Oct 27 21:00:40 2026 GMT
Subject: CN=feb21c625e7da2bd8f45701ca3a7e46cff59f721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:c6:93:45:7f:ef:6d:e6:5e:45:8f:bc:68:
89:88:d9:75:5a:ea:df:f6:53:a9:3a:97:5b:44:a7:
87:af:7b:f1:3c:e7:fe:77:04:0d:66:a0:cc:e6:46:
04:65:4a:17:11:7c:97:c2:00:9c:3d:95:ae:22:b5:
2d:bb:ee:53:00:ce:35:d5:9e:94:a7:00:ef:fb:3e:
bb:3c:c3:7b:1e:d5:82:45:68:da:7b:fb:d0:bb:08:
56:1d:9e:d5:d1:f5:30:b8:98:2b:d7:05:5b:49:5b:
ee:00:0b:df:6c:c4:17:6b:20:8f:d5:29:64:33:03:
09:5a:9e:84:b2:67:52:56:dc:42:66:74:7d:1a:d3:
bd:17:be:6d:7e:ca:32:76:df:1d:d7:be:ad:4e:5f:
2f:b9:5e:07:32:b3:7e:cf:03:96:fb:f5:86:1f:9b:
f5:a0:69:d3:8a:f7:e1:86:22:27:ec:5b:35:89:ed:
2a:f7:e0:75:59:06:fb:99:29:8c:f5:95:9f:2c:50:
02:d7:ac:fb:17:2e:00:4a:56:50:f2:57:a4:e3:90:
45:bc:99:2f:43:60:dc:dc:2f:56:be:ca:02:0b:95:
8f:76:e6:bd:48:cb:d8:7a:f4:bb:ca:57:63:67:22:
2f:db:25:59:a4:a8:8e:38:02:fb:e0:b1:d4:20:1c:
65:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B2:1C:62:5E:7D:A2:BD:8F:45:70:1C:A3:A7:E4:6C:FF:59:F7:21
X509v3 Authority Key Identifier:
keyid:81:6B:16:9D:19:FA:39:50:D1:45:D5:84:AF:A6:17:01:FC:DA:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWsWnRn6OVDRRdWEr6YXAfzatdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e1:18:1f:24:6e:03:14:45:03:ca:04:a7:08:c8:a8:78:27:
61:b8:73:28:26:63:9a:2d:a0:15:d6:bc:02:0a:7c:c6:18:a3:
c3:12:c6:83:2a:ab:70:5f:b6:55:43:ca:f8:5c:74:f1:b6:d3:
7c:17:be:8d:4c:d3:29:10:7e:20:3d:d0:cf:75:24:25:44:18:
fe:df:9f:11:75:01:ab:fc:5b:01:44:ed:67:1b:9c:b1:95:7b:
f0:8c:e2:c7:0d:b1:99:10:d7:06:c5:5f:1e:a0:f3:31:d2:8d:
c3:9a:9e:f2:a8:b5:e9:39:b3:c5:0e:c8:5c:cb:0e:d0:60:26:
3d:b9:aa:d9:8a:6d:09:e7:65:27:96:a8:0c:3f:67:3c:5a:a2:
38:d2:c6:ab:86:e7:b0:f6:48:5e:cc:16:a1:24:9a:50:46:d0:
41:ff:0e:65:02:6d:9a:55:77:8c:b6:80:24:cd:95:3f:4c:67:
cd:b1:c1:97:6a:9a:35:71:20:1b:e6:6a:fd:13:57:61:70:4b:
33:52:dd:22:7f:b5:e9:95:73:cf:89:bd:c4:58:2e:ee:6c:f8:
9d:99:b7:04:7a:d1:dc:35:8d:de:2b:91:33:94:a7:3a:5a:64:
f8:fe:9d:28:d1:8d:f9:1a:9c:c5:25:21:37:34:5c:15:90:eb:
52:c1:72:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:54:59 2026 by rpki-client