Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
File: GWImUASBB5GK3xsizfCHyKg095w.mft (raw, json)
Hash identifier: 7GmhVjW3T8aWmJEGAmMB09aW//oLpmAVGUxBBygXeHE=
Subject key identifier: 42:3D:11:EF:43:78:0E:6B:BB:0B:9B:A3:DE:93:BA:4F:18:A9:F4:95
Authority key identifier: 19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C
Certificate issuer: /CN=19622650048107918adf1b22cdf087c8a834f79c
Certificate serial: 019E20FF9B8566F6560A7BF51D38BCA2E188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
Manifest number: 0D09
Signing time: Wed 13 May 2026 11:01:22 +0000
Manifest this update: Wed 13 May 2026 11:01:22 +0000
Manifest next update: Thu 14 May 2026 11:01:22 +0000
Files and hashes: 1: 8QpoO-rxJHsqUjRex5_olbhYxQc.roa (hash: SX9oUFynqnM4YrEmctmRd+yYGKV06PoodiFRGZH6voc=)
2: GWImUASBB5GK3xsizfCHyKg095w.crl (hash: mN2FulIygbOaqU62Sl545vXLMl6s60BsQM+CpX+xDQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:9b:85:66:f6:56:0a:7b:f5:1d:38:bc:a2:e1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19622650048107918adf1b22cdf087c8a834f79c
Validity
Not Before: May 13 11:01:22 2026 GMT
Not After : May 14 11:01:22 2026 GMT
Subject: CN=423d11ef43780e6bbb0b9ba3de93ba4f18a9f495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c6:0c:bf:0d:5f:34:2d:62:27:d7:9a:6b:ce:
f8:41:a4:38:4c:58:b8:08:7d:94:0d:5d:b4:0f:e5:
3a:2a:99:29:92:56:6e:ab:45:fa:dd:b1:77:2d:25:
17:1a:3e:e4:7f:4c:ef:9e:7f:78:6b:5d:76:9b:1f:
6e:63:9a:86:f1:25:09:83:fa:a0:ea:3f:cc:3d:88:
48:0e:b3:bc:da:f4:00:0f:62:31:f1:61:99:92:6a:
3f:28:06:07:3e:f0:0b:7c:3c:45:d5:35:cb:ec:54:
e4:21:ac:3d:85:27:5f:87:40:b7:9b:56:3f:cf:19:
bb:cc:9f:7b:fb:d7:21:2c:09:02:65:57:b3:e6:4d:
14:90:8f:a7:76:c2:a4:6f:90:25:d1:88:b4:a1:1b:
79:e5:b8:26:68:33:ee:b2:e2:d8:73:b1:37:ca:b5:
32:aa:56:2c:c9:94:e6:fb:5c:36:2f:4d:b2:ed:3f:
d7:a2:be:ad:07:52:12:ea:f8:61:ee:05:37:76:dd:
d4:6b:0f:bb:6e:ff:27:92:ba:8a:8b:ba:1e:6b:89:
d9:e3:a6:e6:1a:af:c0:2b:9e:dc:42:80:a9:6b:c0:
ee:b7:45:1d:d2:4c:0f:83:45:6c:9d:18:e1:6e:cf:
0b:5e:97:82:6d:ff:df:f5:59:79:07:2d:21:ec:6d:
e0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3D:11:EF:43:78:0E:6B:BB:0B:9B:A3:DE:93:BA:4F:18:A9:F4:95
X509v3 Authority Key Identifier:
keyid:19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a7:99:47:c0:d8:11:06:80:fa:e5:dd:52:6d:5d:25:fb:88:
6d:dc:ce:fd:98:50:f4:28:6f:93:15:3e:cf:bf:49:31:43:17:
b1:79:27:e4:aa:3e:1b:db:c5:08:75:2c:16:52:32:29:20:4f:
75:44:56:d5:19:8b:11:6c:43:5e:e2:5f:db:b1:b4:89:58:71:
1f:12:7e:bc:25:2d:43:b9:9f:d0:f7:76:2b:6b:63:99:82:52:
1a:a5:6a:76:e4:d7:f9:d0:65:8e:4e:94:a4:8b:b7:77:14:74:
4e:9d:09:76:d6:2e:a3:5a:49:61:61:9b:91:2d:b9:01:3d:11:
e6:df:44:0e:1b:f3:66:d0:e8:ea:9b:3b:93:e9:a8:40:e9:8a:
e4:31:03:85:3c:75:b6:5a:cb:48:0c:bf:35:a1:11:ca:33:6f:
07:3e:9f:b5:d0:8a:e6:d7:73:db:e8:40:31:b7:ce:fb:0a:21:
26:8c:9e:0e:1a:2f:1c:fe:2a:b0:0f:0a:93:21:1c:92:ab:06:
fc:0e:14:64:9f:d3:a6:e3:4c:39:4b:41:bb:5a:2a:d3:05:6b:
d5:23:68:e2:c7:3f:74:ef:f9:e8:e5:5a:12:43:20:9f:59:1c:
4c:32:73:1e:de:5a:ba:75:f3:6c:ea:96:f0:27:63:c5:1b:14:
7b:51:3e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:51:16 2026 by rpki-client