Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
File: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft (raw, json)
Hash identifier: DcmpVuo53Uz9MCuzAyA34yJoRwnrNluRtR5kWJaKNZs=
Subject key identifier: 0A:2D:D4:85:B3:0F:74:EC:2E:0C:E3:64:EA:49:B3:86:79:73:F3:3D
Authority key identifier: 19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C
Certificate issuer: /CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
Certificate serial: 019D265F89195333538B56C28901A419C5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
Manifest number: 041A
Signing time: Wed 25 Mar 2026 19:01:28 +0000
Manifest this update: Wed 25 Mar 2026 19:01:28 +0000
Manifest next update: Thu 26 Mar 2026 19:01:28 +0000
Files and hashes: 1: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl (hash: gJ3XrHlD7HKETmag9vOJdGDvYdGywhHOyQPK5MmjuGA=)
2: aKJTM1Uf5WiFwk0xaQDn_EEx6LY.roa (hash: Bk0oWK0Lkt5p+4sdJT9WxyXxSp/0EFpvdzicJ3h6H0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:89:19:53:33:53:8b:56:c2:89:01:a4:19:c5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
Validity
Not Before: Mar 25 19:01:28 2026 GMT
Not After : Mar 26 19:01:28 2026 GMT
Subject: CN=0a2dd485b30f74ec2e0ce364ea49b3867973f33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:05:2e:a8:c8:8b:72:0a:68:94:ad:1b:0c:29:
69:15:38:32:b1:e6:4e:0e:53:01:da:83:55:9c:64:
5d:a5:03:01:e9:de:03:b4:1a:73:be:d3:30:d5:02:
41:ff:6b:70:1c:66:65:c7:63:75:1a:41:9e:58:fb:
b0:26:12:1b:a9:62:52:c3:b2:34:13:11:31:ef:8e:
a6:4c:49:5d:81:1b:82:8f:7f:e4:f3:bb:ae:7f:fc:
6a:68:8e:fb:bf:d5:08:28:d7:4d:47:c8:93:47:fc:
57:cd:ce:cc:33:1b:c3:1f:a2:b7:e8:3e:f2:61:37:
a4:19:d4:b4:74:07:40:e0:b1:a2:4f:b7:2d:10:06:
98:f7:5d:77:44:c3:4b:03:4c:de:b3:88:fc:ce:52:
ae:03:09:58:a3:30:fd:9e:e0:84:fe:83:42:ad:b9:
f3:3a:72:00:2e:c5:0e:0e:03:01:97:e4:1a:d7:f3:
d0:91:d4:b8:6e:e3:88:36:9c:cb:e5:cb:0a:9a:ab:
40:72:5b:f5:67:ad:26:6e:ae:3d:cc:79:61:67:55:
12:5b:4a:1b:24:06:e9:f1:c6:84:b9:37:f0:73:c5:
48:8a:ae:ec:47:0e:e2:b8:e9:d0:b9:46:bb:8d:95:
56:b8:31:cf:7f:a0:17:82:0d:93:e4:9e:42:b9:0b:
00:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2D:D4:85:B3:0F:74:EC:2E:0C:E3:64:EA:49:B3:86:79:73:F3:3D
X509v3 Authority Key Identifier:
keyid:19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:48:bf:e8:33:e5:6d:8e:51:9e:97:12:51:e9:79:20:34:60:
bc:ea:a2:db:b5:b2:c3:82:0f:2a:e4:77:64:8a:f4:0a:e2:0f:
4a:22:d3:9e:54:83:14:74:1c:e4:bb:1d:93:92:88:85:07:50:
cc:74:65:e4:3a:dc:e1:b7:07:e6:22:3d:f8:ed:93:1d:ac:51:
7b:80:4c:e6:b6:b4:c6:cf:d6:55:ce:60:09:cc:f4:f0:31:8a:
e3:84:da:e0:ef:26:12:b9:5e:16:5e:10:42:c2:89:9c:49:53:
44:c8:25:e9:72:42:7d:45:41:63:90:53:97:d8:4b:c6:b6:59:
eb:4f:24:de:d1:47:de:52:66:8b:d4:5b:1c:6e:b0:80:dd:dd:
8f:93:82:86:96:e4:45:8e:72:00:ed:69:e2:4b:1d:b6:ee:36:
e0:ac:83:4e:e4:06:6a:cc:b5:df:ea:bf:35:25:45:88:83:47:
a2:44:c8:12:3c:ec:94:90:ea:3f:94:0c:57:e2:a0:89:99:2c:
52:5c:fc:4b:c0:0d:d0:75:f7:b8:0f:bc:3e:7b:ed:f1:00:66:
ee:ff:64:0d:a5:df:bc:ed:06:52:ec:d1:16:21:0d:cd:9c:d2:
ae:a6:bd:6c:5b:3b:fe:df:3c:20:bd:cb:ef:44:2c:ea:2c:a5:
67:48:e8:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX4kZUzNTi1bCiQGkGcXmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NjUyM2ZlMGQ2YmQ5YzY3ZTBiY2IwMDk4YTNjMzYzZjJm
OTBmN2MwHhcNMjYwMzI1MTkwMTI4WhcNMjYwMzI2MTkwMTI4WjAzMTEwLwYDVQQD
EygwYTJkZDQ4NWIzMGY3NGVjMmUwY2UzNjRlYTQ5YjM4Njc5NzNmMzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQUuqMiLcgpolK0bDClpFTgyseZO
DlMB2oNVnGRdpQMB6d4DtBpzvtMw1QJB/2twHGZlx2N1GkGeWPuwJhIbqWJSw7I0
ExEx746mTEldgRuCj3/k87uuf/xqaI77v9UIKNdNR8iTR/xXzc7MMxvDH6K36D7y
YTekGdS0dAdA4LGiT7ctEAaY9113RMNLA0zes4j8zlKuAwlYozD9nuCE/oNCrbnz
OnIALsUODgMBl+Qa1/PQkdS4buOINpzL5csKmqtAclv1Z60mbq49zHlhZ1USW0ob
JAbp8caEuTfwc8VIiq7sRw7iuOnQuUa7jZVWuDHPf6AXgg2T5J5CuQsAlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAot1IWzD3TsLgzjZOpJs4Z5c/M9MB8GA1UdIwQY
MBaAFBllI/4Na9nGfgvLAJijw2Py+Q98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1dVal9nMXIyY1otQzhzQW1LUERZX0w1RDN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83NDM4ZGQtZTM2Mi00MDM0LWEwNDAt
ZGU4MzU0NThkYThkLzEvR1dVal9nMXIyY1otQzhzQW1LUERZX0w1RDN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi83NDM4ZGQtZTM2Mi00MDM0LWEwNDAtZGU4MzU0NThkYThk
LzEvR1dVal9nMXIyY1otQzhzQW1LUERZX0w1RDN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUi/6DPl
bY5RnpcSUel5IDRgvOqi27Wyw4IPKuR3ZIr0CuIPSiLTnlSDFHQc5Lsdk5KIhQdQ
zHRl5Drc4bcH5iI9+O2THaxRe4BM5ra0xs/WVc5gCcz08DGK44Ta4O8mErleFl4Q
QsKJnElTRMgl6XJCfUVBY5BTl9hLxrZZ608k3tFH3lJmi9RbHG6wgN3dj5OChpbk
RY5yAO1p4ksdtu424KyDTuQGasy13+q/NSVFiINHokTIEjzslJDqP5QMV+KgiZks
Ulz8S8AN0HX3uA+8Pnvt8QBm7v9kDaXfvO0GUuzRFiENzZzSrqa9bFs7/t88IL3L
70Qs6iylZ0johA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:31 2026 by rpki-client