Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
File: GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft (raw, json)
Hash identifier: cW7PGHs3++ft1LKHy8SfiPs+pL4PG6nHbeBX4b6mvJ8=
Subject key identifier: 9C:03:69:1F:5E:5F:A8:BE:77:21:9E:C6:F1:94:3A:5F:75:9E:56:10
Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
Certificate issuer: /CN=1b098412c984b89be38011a72a3c471975fc47a2
Certificate serial: 019D29619770CA9491A1087FDC047F869A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
Manifest number: 0A85
Signing time: Thu 26 Mar 2026 09:02:34 +0000
Manifest this update: Thu 26 Mar 2026 09:02:34 +0000
Manifest next update: Fri 27 Mar 2026 09:02:34 +0000
Files and hashes: 1: GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl (hash: 8pm4H04Mg6lfBZjIm8kaPR3QGfvVEw7IvgPeB96gXMQ=)
2: JZaH_jpSvzp_LB_dT1bUbnV7u6Y.roa (hash: PBsKlZt/RhXzdnMDW9mk8dmSBPIc5dC6MxwZF8UDWyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:97:70:ca:94:91:a1:08:7f:dc:04:7f:86:9a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2
Validity
Not Before: Mar 26 09:02:34 2026 GMT
Not After : Mar 27 09:02:34 2026 GMT
Subject: CN=9c03691f5e5fa8be77219ec6f1943a5f759e5610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:45:08:7a:ae:b6:a8:be:f1:6c:69:6f:00:
28:c3:88:bc:d0:a2:c5:9d:e9:b7:1b:bc:b6:82:9b:
2f:b6:bd:94:bb:1c:27:e0:c6:ff:f8:14:9f:de:9b:
24:5a:d4:cb:c9:4f:26:5e:9d:6a:46:cd:2d:23:74:
34:31:1c:d4:9c:45:9b:97:a5:f1:e7:94:08:84:97:
4f:b7:77:3a:f3:c0:c0:30:47:f9:95:b6:67:93:ae:
0a:2f:6b:56:56:e5:ec:32:45:95:97:f6:45:17:32:
56:7d:4c:ed:08:35:aa:07:0a:ed:89:6b:de:ef:1b:
b0:f9:bd:08:f0:2e:95:13:3b:0e:28:e2:35:bd:57:
8f:a8:ba:ee:5a:f3:8b:94:0b:66:5a:f0:39:5c:9d:
91:26:e0:78:28:b5:6c:dc:c3:e6:f9:c9:e0:52:93:
4a:fd:94:d7:08:12:51:86:00:d5:ce:23:bc:8e:8e:
e3:04:34:04:a3:94:b5:86:d2:81:ed:2b:6d:26:d6:
46:ae:08:e8:3b:7a:e6:3d:65:f6:04:4e:e8:1c:2b:
18:83:73:7f:cd:0c:01:7f:ab:af:ef:31:22:ca:d5:
b1:04:07:5b:c7:ce:ee:42:30:47:d6:c6:4f:0f:8e:
7b:c8:4d:44:2d:6b:1b:50:4d:dd:a6:73:f8:9f:f8:
76:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:03:69:1F:5E:5F:A8:BE:77:21:9E:C6:F1:94:3A:5F:75:9E:56:10
X509v3 Authority Key Identifier:
keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c1:ec:39:a9:11:22:96:31:89:5b:74:6e:b3:52:38:2c:0b:
05:71:a2:04:aa:90:0f:1d:19:10:00:d0:cb:1c:63:f2:1e:61:
27:a8:f0:b5:42:8d:85:ec:0c:c4:33:f5:e9:3a:3a:c1:d6:ac:
33:fa:fe:cd:0f:22:f4:2a:7a:de:f4:d0:2a:bc:7f:a2:1d:c9:
82:0b:7c:dd:12:c0:cc:b2:4d:73:52:df:42:0d:4f:be:23:c6:
ae:9b:d6:6c:3f:60:9a:f9:b6:77:dd:d7:d1:ab:9f:8c:96:c3:
64:50:72:7e:de:28:63:cc:33:97:f1:df:be:69:4f:f8:45:39:
d0:f2:61:f2:ba:ad:1f:92:21:3d:d0:a0:11:87:34:5e:ed:37:
a7:cf:13:df:bf:ac:db:8f:9c:74:00:ea:01:69:f4:23:f7:6e:
67:f1:2e:2d:3a:f0:c8:32:f4:97:95:d4:4e:f2:e9:8c:9c:54:
65:c5:ec:c2:c8:30:ac:bb:b4:71:0d:68:b9:b8:44:34:8f:06:
77:1f:40:2a:28:f8:41:a6:f2:f7:c8:d9:13:fb:dc:6c:dd:e7:
d3:9f:e2:8e:c5:87:68:5f:84:f4:88:a4:d9:39:8a:07:3d:28:
52:27:60:20:e6:0a:93:88:df:36:c5:3f:a0:b4:05:85:04:66:
42:22:41:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:44:25 2026 by rpki-client