Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
File: GawUmIYOK7CVgXOFS9BMhpo2kBc.mft (raw, json)
Hash identifier: DhXqOyR64RjVhNuuKcf1KSTiri7JnFPBfnjR7FJuTho=
Subject key identifier: 3D:5C:5D:CE:0B:7B:14:37:1D:BE:BC:C6:A6:BA:FA:ED:DB:D4:A7:BB
Authority key identifier: 19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
Certificate issuer: /CN=19ac1498860e2bb0958173854bd04c869a369017
Certificate serial: 019D2703B36019E134007DD08EB6A14265B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 22:00:47 +0000
Manifest this update: Wed 25 Mar 2026 22:00:47 +0000
Manifest next update: Thu 26 Mar 2026 22:00:47 +0000
Files and hashes: 1: CX4SjTdi-WVaIel19sRIG6HUUUw.roa (hash: UDsW/lOEequNbC4ieUO0oqmh57jt4K+cQMjTjOFaxBs=)
2: GawUmIYOK7CVgXOFS9BMhpo2kBc.crl (hash: dYHQKADgM+2IcxRskQ8cn+LGNhH/sPLVhS1h5a9BfrU=)
3: Lh8IZMqEqiAwn2VYmeg9sVGCFEo.roa (hash: 3Z8PMQ8sh56/aP3O9W1H0byuePE1WYuRdcvV9nD8Q2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:b3:60:19:e1:34:00:7d:d0:8e:b6:a1:42:65:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ac1498860e2bb0958173854bd04c869a369017
Validity
Not Before: Mar 25 22:00:47 2026 GMT
Not After : Mar 26 22:00:47 2026 GMT
Subject: CN=3d5c5dce0b7b14371dbebcc6a6bafaeddbd4a7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c1:42:ac:8e:29:cd:f5:d5:22:fc:fe:11:0f:
16:d3:b6:93:52:7a:70:9d:e1:8e:87:cc:fb:57:52:
42:10:a1:a7:24:cf:00:d0:d9:b9:4b:ad:9c:40:f5:
ff:23:0a:3e:3c:fe:b4:87:f6:58:4f:9a:c3:c7:61:
33:c8:52:3d:62:98:ef:eb:d8:74:d3:13:8d:9f:8f:
34:9b:c2:a6:05:5b:c5:e9:47:ef:0b:c8:44:e7:32:
4a:0c:62:21:c8:cc:a9:b9:03:07:59:10:84:37:d3:
9e:ef:5a:ef:80:3c:ad:86:b4:19:35:a1:64:7b:28:
bf:0d:20:73:96:76:37:2d:bf:c9:49:e8:69:ce:ab:
c5:f3:37:24:b5:2e:3d:53:fc:df:d5:17:ee:4d:cc:
72:80:e3:20:4f:e3:7f:30:13:d6:e0:9a:04:80:14:
7e:58:b6:27:96:56:51:2a:b2:80:c9:c5:0e:93:a0:
43:15:36:e1:a0:6b:2a:c0:eb:92:96:01:ab:37:95:
55:b5:80:48:6d:04:45:2e:36:42:9b:11:db:79:8b:
98:ed:77:2b:13:08:cc:fe:85:69:d9:40:0e:c2:c7:
29:df:5a:76:ea:21:70:0f:24:a1:e1:01:c4:6b:bb:
8d:70:af:61:7c:7d:79:a7:88:dc:08:0c:82:bc:4f:
a6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5C:5D:CE:0B:7B:14:37:1D:BE:BC:C6:A6:BA:FA:ED:DB:D4:A7:BB
X509v3 Authority Key Identifier:
keyid:19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:91:3c:90:40:b5:1b:36:f6:d9:3c:bb:97:e3:cb:55:d6:d6:
78:cb:d1:44:c5:fe:cd:5b:d2:82:79:b2:b2:a0:ba:f8:bb:2e:
12:ad:b5:a3:c0:55:e6:a6:7d:1c:60:32:90:19:d0:77:18:42:
56:6b:40:73:63:8c:43:65:3b:68:8a:ad:bb:86:94:37:63:ad:
31:49:69:c4:b3:68:2e:35:ba:5e:90:ca:db:20:5f:ae:8a:4a:
c3:29:6d:f1:76:e5:4c:b8:68:8b:34:f6:5f:98:3a:f3:0d:c7:
dd:09:3e:a8:e9:af:ac:ea:a4:a0:b9:f0:cf:b1:bc:d7:8f:0f:
b3:8a:ba:e3:1d:6a:a3:60:18:b4:b9:50:c0:28:3a:51:cb:e9:
56:85:9d:a0:81:d8:ae:a1:db:a9:b0:51:52:b8:b8:73:73:47:
5c:bd:c6:5e:e5:a6:e0:e2:24:45:8d:1d:bd:e7:c4:09:15:3e:
8d:fe:81:9c:96:9b:2d:c1:9b:0b:14:d1:5a:1c:07:6f:cc:62:
87:ec:4a:8d:e3:a6:8f:95:77:3d:f7:b8:22:c5:3c:07:04:9e:
76:0a:f0:de:05:cc:ea:66:8c:f6:98:78:82:68:42:eb:21:15:
a7:54:8f:e0:70:21:24:63:4a:e0:88:e9:c9:4c:44:1c:af:fb:
88:69:91:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:37 2026 by rpki-client