Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft
File: GW1YekBaGQSWYyGhDzmJtoZvXmM.mft (raw, json)
Hash identifier: Sgtlwiu4OI2pIjwE8dJdPyHF/yp9N3n6IJcNU9L0nhk=
Subject key identifier: 16:FC:1A:ED:C8:65:A7:7C:36:9B:97:BE:AB:95:BE:61:F7:4A:63:2B
Authority key identifier: 19:6D:58:7A:40:5A:19:04:96:63:21:A1:0F:39:89:B6:86:6F:5E:63
Certificate issuer: /CN=196d587a405a1904966321a10f3989b6866f5e63
Certificate serial: 01A0CFDAE9E2860A8C42EB36EF85C2F21F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft
Manifest number: 0283
Signing time: Wed 23 Sep 2026 20:00:25 +0000
Manifest this update: Wed 23 Sep 2026 20:00:25 +0000
Manifest next update: Thu 24 Sep 2026 20:00:25 +0000
Files and hashes: 1: GW1YekBaGQSWYyGhDzmJtoZvXmM.crl (hash: yea+QodkGxMHVUiC1drI0jgK7sVJAinbLH8GBgFLeOo=)
2: cJYpXB_oLGSwXDizlOh5NTU415c.roa (hash: mZv4pxKg6JT+luM0hXV3CCOhtyIkDC3zPkMJ6EEFxgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:e9:e2:86:0a:8c:42:eb:36:ef:85:c2:f2:1f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196d587a405a1904966321a10f3989b6866f5e63
Validity
Not Before: Sep 23 20:00:25 2026 GMT
Not After : Sep 24 20:00:25 2026 GMT
Subject: CN=16fc1aedc865a77c369b97beab95be61f74a632b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cd:41:30:ba:aa:ba:2f:4a:a5:e6:3d:31:85:
5e:df:7f:aa:b9:1e:e6:e1:ef:0e:66:b5:ec:cc:c3:
53:c1:b8:d0:b4:23:fe:2f:07:5f:d7:55:c2:85:fc:
86:bf:89:76:05:4c:b4:32:35:4a:c7:94:85:f2:5f:
53:bb:db:3d:4b:9b:2c:8e:69:7c:1b:5b:88:aa:b2:
29:8e:0c:80:38:2d:3a:14:60:a4:35:1d:09:ec:7a:
6f:89:cc:36:4a:84:b7:e2:17:30:41:f9:a3:2f:59:
6d:9e:11:4a:74:c2:74:7a:e3:ff:26:57:09:32:34:
44:50:36:19:f5:95:74:d1:1d:01:90:e3:03:98:5c:
e5:16:bd:34:70:3c:47:a8:59:39:10:fa:c8:bb:c0:
57:80:16:b5:f8:94:c8:e5:b6:8d:4c:7e:09:c6:23:
d0:8b:62:22:02:09:59:09:9e:80:5b:46:9a:7f:ce:
38:d6:2d:6f:15:bf:a5:d6:28:a2:62:a0:22:d0:df:
f7:c4:e4:8f:7f:ba:41:c0:ec:ae:9d:16:8d:12:cf:
da:60:7c:15:e7:27:ee:0f:f5:55:02:d4:15:ce:5a:
86:f5:af:bc:39:c1:d7:30:71:9c:eb:7d:f1:e6:f9:
58:dc:d5:ae:ad:78:34:9b:4d:2e:38:81:04:66:56:
cb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FC:1A:ED:C8:65:A7:7C:36:9B:97:BE:AB:95:BE:61:F7:4A:63:2B
X509v3 Authority Key Identifier:
keyid:19:6D:58:7A:40:5A:19:04:96:63:21:A1:0F:39:89:B6:86:6F:5E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:72:45:30:e7:23:af:a8:17:94:a7:e8:9f:f7:23:f4:59:7c:
de:40:f8:20:ea:d1:55:30:43:e6:6b:3b:05:91:c1:fa:fd:b1:
2e:ba:cc:f3:8c:c9:6d:35:66:73:dd:57:9d:1d:76:09:b5:3c:
60:54:a4:0c:b7:56:87:78:61:7d:1f:f0:a1:b0:2f:56:4f:d0:
45:89:cb:1e:f8:2c:4e:c8:65:58:e8:8e:0e:a0:21:e6:39:c8:
b5:24:66:c3:8e:a6:59:fe:26:cb:b4:08:0e:39:4f:b8:ef:be:
2e:34:9b:1c:16:ba:bc:81:28:9b:db:7a:34:d4:0d:a4:a0:c1:
f3:b7:dc:5c:a5:dd:72:6d:e2:8c:1e:e9:57:dc:72:cb:1d:ac:
39:6d:ac:72:59:60:e8:ed:95:ff:d5:75:24:52:d4:38:97:25:
5a:89:ab:cc:2b:95:52:e2:5d:d1:a5:5e:0b:38:d1:19:58:44:
45:be:bb:6c:15:3a:57:8e:d6:61:35:68:7a:54:76:74:db:7b:
8a:b0:53:65:19:a3:88:87:da:2b:9a:02:ed:89:0b:ea:02:cf:
01:30:67:ca:60:d5:2d:53:54:dd:9b:95:80:38:06:91:2f:8c:
39:5d:bd:b2:a4:93:ce:dc:3a:9f:d2:a0:35:ef:bd:c3:91:d9:
5d:37:15:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:26:08 2026 by rpki-client