Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
File: GWN5dpxXylsmosYfpdmsxSe-p4k.mft (raw, json)
Hash identifier: aFweg+U0wxgZR0M030HGgjMS6sdgyJxOw1rEcQT7kls=
Subject key identifier: 57:42:AF:BE:1A:DC:96:F0:EF:A1:85:4F:E2:F1:7E:DA:2E:37:17:24
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Certificate issuer: /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial: 019D29608478F8A23E281B95EA9839BC341D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 09:01:24 +0000
Manifest this update: Thu 26 Mar 2026 09:01:24 +0000
Manifest next update: Fri 27 Mar 2026 09:01:24 +0000
Files and hashes: 1: 3W77edW628jQxwd19lvVjtYuG1o.roa (hash: eeBqOwHI9v74XHIGFTRR/UVJPjywNaCr9KLzr8nBNf8=)
2: GWN5dpxXylsmosYfpdmsxSe-p4k.crl (hash: 2++C8bPvIyRUjnbRwLBZ6iTzCcr9lJJ+TAUfbvmdxeo=)
3: bg16vmmigVbvm4o3Mdxq8cFNNQU.roa (hash: zFOo31LB1MSXG3aNBtx7FcoSwNGxRX0bLqGZpw+CvMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:84:78:f8:a2:3e:28:1b:95:ea:98:39:bc:34:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Validity
Not Before: Mar 26 09:01:24 2026 GMT
Not After : Mar 27 09:01:24 2026 GMT
Subject: CN=5742afbe1adc96f0efa1854fe2f17eda2e371724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:03:a3:15:d8:a9:68:37:15:34:1e:ec:61:e4:
17:c6:96:da:47:51:59:6d:c4:c3:da:f3:f5:31:7b:
a3:0b:cc:f7:15:f7:67:9d:8b:3e:68:a4:20:a2:2f:
6c:ad:59:32:62:9a:f8:48:54:52:e4:0a:58:c9:73:
35:e3:da:1a:9a:2c:93:05:24:6f:18:d8:7a:d1:d9:
0c:26:38:5c:98:8d:cd:b6:29:d7:12:48:58:92:dc:
9c:8a:61:5e:19:c5:97:62:2e:75:70:4d:5b:e5:bd:
1a:bc:13:ba:ca:0e:ce:ad:ba:e5:b8:99:57:67:10:
dd:f4:44:b3:af:ff:34:51:1f:a1:a4:3c:ec:6b:f4:
4b:1d:39:2d:10:d7:99:7d:8b:fc:f4:cc:fd:c1:14:
eb:de:18:50:9c:e7:f3:2b:75:e5:27:46:7c:24:3c:
e3:e2:d2:c6:c3:97:b2:c5:71:6f:b6:ad:57:55:10:
2d:e4:0e:32:7d:50:54:75:4c:df:3e:f5:77:ba:28:
07:90:8b:fe:7d:83:10:f8:65:f8:22:a6:f8:8d:9b:
48:85:b1:cd:29:14:60:25:f5:11:90:0a:65:77:98:
a7:f4:6c:9f:68:20:bb:5c:66:ec:87:4a:cc:f6:f6:
be:62:1c:80:db:58:50:aa:88:81:70:79:a7:cf:3a:
ff:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:42:AF:BE:1A:DC:96:F0:EF:A1:85:4F:E2:F1:7E:DA:2E:37:17:24
X509v3 Authority Key Identifier:
keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:41:ea:c4:4a:f6:43:d2:e9:df:a9:f5:ce:b6:66:d1:26:bc:
02:7b:f6:32:9b:77:43:82:ac:13:55:b1:01:2c:1a:36:62:e8:
20:99:2a:b7:25:29:a0:a5:45:e7:23:1d:38:21:e0:7e:78:ed:
49:38:d7:fd:14:77:e8:cd:3c:e6:1f:49:bd:74:d6:ec:5f:70:
a4:12:27:88:40:6c:44:82:e6:59:54:13:f3:3f:41:17:cb:ed:
87:8d:18:34:b3:dc:b1:b5:41:b4:fd:e6:a6:a6:cf:24:2c:1f:
8b:bc:90:bf:84:46:9e:1d:39:6c:35:71:fd:d0:cc:fb:16:5c:
c7:9b:06:78:72:57:71:5c:b4:a8:bd:a6:cb:40:91:ae:39:09:
58:32:14:47:20:21:91:62:24:d2:7a:ca:88:1a:78:0a:ac:80:
26:35:d8:26:4c:d6:fc:37:d2:09:7a:97:d6:96:6d:34:cf:18:
f8:13:e1:c3:e9:81:31:7b:3a:df:97:68:22:98:e3:ef:21:85:
b3:a3:03:b4:71:81:f7:58:0e:17:9a:ee:c7:b0:12:a2:96:51:
00:14:7a:a3:82:5e:42:ca:4d:12:9a:d4:f8:f4:90:4f:0d:d1:
06:82:3d:e3:fe:68:ba:88:d4:7b:ac:f8:4e:82:fa:36:e5:ce:
b8:e6:11:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:34 2026 by rpki-client