Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
File: Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft (raw, json)
Hash identifier: EkH4vVMdWvvGU0pC3O0KTAlCD+r+b1thQgReeKSqEFk=
Subject key identifier: 25:53:95:DE:FB:EF:D5:D4:3D:AB:3D:79:A9:53:03:54:E2:6A:30:8B
Authority key identifier: 1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4
Certificate issuer: /CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
Certificate serial: 019D24DE9E2886F6469DFB12260608296597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
Manifest number: 185F
Signing time: Wed 25 Mar 2026 12:01:02 +0000
Manifest this update: Wed 25 Mar 2026 12:01:02 +0000
Manifest next update: Thu 26 Mar 2026 12:01:02 +0000
Files and hashes: 1: 71owHX4S2u2lF3E_BCb4Gt1KJaM.roa (hash: C8aJgnSvLd5vqx93bG6/27ca+qWBm6BMec2VKfAW2bA=)
2: Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl (hash: 10HI09dM2U0+OhSIG30ebT/TtESMMFxmjliYYoUGQn0=)
3: dfesipwxH539hUdXKKyu2kqJ8wg.asa (hash: 7Uj9gk3YaMecDLkJ2OHkoQ1Jy1gH9VcQpYCUftt6ZVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:9e:28:86:f6:46:9d:fb:12:26:06:08:29:65:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
Validity
Not Before: Mar 25 12:01:02 2026 GMT
Not After : Mar 26 12:01:02 2026 GMT
Subject: CN=255395defbefd5d43dab3d79a9530354e26a308b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:74:ba:63:09:13:66:3e:03:64:17:06:bf:
6d:8b:f7:c3:d6:a4:67:63:4c:b3:1c:ef:2e:13:bb:
49:c7:f0:2d:2e:aa:e1:43:d6:82:7a:31:4a:43:e9:
e4:cb:cb:7c:85:56:c4:a9:1e:b1:9a:fb:b4:2a:7b:
46:4c:a3:18:67:b7:60:15:c6:0f:cc:ff:f7:10:79:
0b:43:e2:7f:c5:05:cd:9a:cc:41:49:e3:3a:b7:f9:
89:09:8d:e2:9e:e8:ce:f6:50:c3:58:9e:b6:f0:68:
1f:89:f6:19:2f:2e:3b:12:fd:ef:9c:2a:6a:9f:5c:
01:27:82:31:15:57:fa:61:19:d8:b8:99:28:3f:59:
5d:11:ca:c3:b4:6c:05:40:db:44:0a:2c:39:0f:d3:
1d:df:17:ab:6f:2e:d8:24:c6:ac:c9:29:0e:a3:a3:
dd:0c:70:70:66:31:46:ee:a5:35:ae:d5:77:98:15:
90:c1:5e:38:07:e5:54:e2:ac:62:b8:0e:08:7a:81:
9b:20:f2:b6:98:5f:cf:d2:19:65:52:15:e3:48:c7:
e8:ee:67:36:52:77:1b:86:39:e1:6b:61:3a:7a:53:
75:39:b3:b3:5f:2a:97:3e:ba:aa:bc:77:16:0d:ec:
af:a1:51:49:79:4a:0a:f4:95:6f:e4:14:7f:82:04:
35:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:53:95:DE:FB:EF:D5:D4:3D:AB:3D:79:A9:53:03:54:E2:6A:30:8B
X509v3 Authority Key Identifier:
keyid:1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bd:c2:c9:84:43:f1:f6:a4:33:cf:7a:2a:50:39:c2:5c:63:
6d:d8:7e:73:17:ed:06:ea:38:d3:5b:65:e4:3a:ce:41:55:77:
98:77:71:de:e9:9e:2a:47:2c:82:3d:19:d3:92:3a:81:a8:ec:
6c:9d:b8:fd:e7:8d:3e:1e:83:f1:11:31:df:0d:1e:11:c4:c6:
32:49:45:89:af:f3:bc:42:dd:a4:ce:90:a8:06:00:db:02:0d:
00:9a:52:05:c4:ad:0d:88:0a:64:70:8d:a5:34:4d:e0:68:ab:
84:ca:c3:ba:26:1f:66:0d:23:4d:a2:15:42:55:db:71:ed:08:
54:81:c6:0c:77:de:04:96:62:0d:68:66:9b:45:da:c4:70:06:
39:9f:4c:21:04:fd:c0:81:93:4d:f4:c6:6d:b8:7d:2a:cd:27:
59:49:77:f3:5b:de:3c:c8:47:60:4c:46:86:5f:da:b2:b7:ec:
42:1f:89:b2:12:6c:7a:72:ef:38:c4:73:58:2f:d3:9c:26:33:
95:dd:fe:e6:88:49:28:36:7e:da:87:65:c4:66:39:89:d6:83:
e8:e6:8c:9c:c3:9a:5e:0c:5a:fb:42:e9:ec:8d:58:7b:05:c9:
30:4a:6d:84:c7:4f:8d:ed:ea:33:1f:b5:d6:0e:3a:9a:98:60:
3a:d6:b5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:21:56 2026 by rpki-client