Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
File: Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft (raw, json)
Hash identifier: NFfScG3fhsW8b8Sc6ho4ma0idlKBmQPOp2hfN9X/zHM=
Subject key identifier: 78:0E:80:4B:E3:C8:92:11:BD:91:73:52:15:ED:94:80:CD:7E:14:C2
Authority key identifier: 1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4
Certificate issuer: /CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
Certificate serial: 019E1DFE02F10C3C9AF905B0C466FEBD8502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
Manifest number: 18E0
Signing time: Tue 12 May 2026 21:00:46 +0000
Manifest this update: Tue 12 May 2026 21:00:46 +0000
Manifest next update: Wed 13 May 2026 21:00:46 +0000
Files and hashes: 1: 71owHX4S2u2lF3E_BCb4Gt1KJaM.roa (hash: C8aJgnSvLd5vqx93bG6/27ca+qWBm6BMec2VKfAW2bA=)
2: Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl (hash: x1X7Zxp6oDoUFdJq1As80veZajnZBZJ2wRMSrcFTwYo=)
3: dfesipwxH539hUdXKKyu2kqJ8wg.asa (hash: 7Uj9gk3YaMecDLkJ2OHkoQ1Jy1gH9VcQpYCUftt6ZVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:02:f1:0c:3c:9a:f9:05:b0:c4:66:fe:bd:85:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
Validity
Not Before: May 12 21:00:46 2026 GMT
Not After : May 13 21:00:46 2026 GMT
Subject: CN=780e804be3c89211bd91735215ed9480cd7e14c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:47:5b:b0:77:49:58:81:55:b6:b2:e3:35:9e:
7f:82:89:49:3b:21:b7:71:36:d7:5c:7a:12:ac:33:
72:f8:bd:05:e9:55:b1:e8:ec:9c:e8:d2:4d:ed:36:
ab:cf:2a:49:02:4d:4a:07:fa:28:51:2d:52:f9:be:
b5:ce:fc:f6:21:1d:81:7a:f1:03:79:f0:36:eb:19:
ac:a1:ee:bc:a5:f8:77:19:b0:67:fe:bf:98:27:e5:
21:d2:fb:13:62:ec:b4:9f:b8:d1:82:f1:10:a5:1d:
92:e2:cd:3f:01:2a:06:8c:ea:79:94:1f:05:c1:fe:
27:2c:e2:9b:b6:cb:bf:5d:df:9d:f9:3c:68:eb:57:
77:10:5d:c4:01:62:a9:e6:ec:5b:4c:87:43:ce:5e:
41:b3:64:cd:ad:0d:95:99:9d:b7:21:05:6f:11:95:
76:c6:2b:24:39:f8:d1:74:b1:9e:8d:5e:c8:00:a3:
f7:e4:c2:9d:d6:bf:b5:15:aa:b5:bf:a6:20:9c:bd:
a1:1a:02:3a:8f:95:fb:2a:49:71:3b:54:38:52:46:
8a:d1:c1:05:bc:73:c9:23:4d:3a:5a:55:71:a1:33:
1d:ca:41:63:e6:08:3e:d3:73:e0:ae:ce:d0:ab:46:
dd:a1:2f:91:2a:68:08:0a:3e:43:ef:8f:5b:e6:11:
3c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0E:80:4B:E3:C8:92:11:BD:91:73:52:15:ED:94:80:CD:7E:14:C2
X509v3 Authority Key Identifier:
keyid:1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e0:e2:27:46:3c:e2:75:ae:b5:36:7c:cf:5a:75:ee:88:66:
e4:77:52:9d:34:cf:9e:52:4b:dc:7d:ef:17:1b:f9:83:60:49:
f4:22:1d:a2:85:d6:ed:92:78:f8:78:56:4e:ff:de:8d:bb:89:
83:2d:87:d3:71:e4:1f:ca:4a:da:aa:df:62:49:29:5f:be:80:
5e:6e:75:98:68:a7:3f:1f:18:92:df:77:e0:07:ec:37:a7:93:
13:0f:86:30:bb:c2:07:13:d6:57:6a:5e:e8:a2:06:ae:96:31:
01:6d:f0:a8:2d:79:9a:87:0e:0b:23:4a:84:bb:e7:34:36:00:
f0:b2:d8:84:f9:00:5e:0b:8a:fd:26:6d:12:cd:80:52:7c:08:
c6:be:8d:34:9b:06:9e:a9:90:80:eb:75:c2:c6:f3:b2:c6:b1:
86:ff:87:bb:73:62:da:4c:6b:e8:79:36:8d:24:3e:6a:52:d3:
d1:f9:4d:df:24:33:e1:cc:89:f9:93:d2:c8:a1:9b:cf:5b:0d:
0d:56:0c:45:2c:9d:b6:7a:e6:9d:7c:21:6b:57:c5:c0:11:67:
1e:f5:02:f7:55:b7:f0:67:51:a0:e0:21:75:ae:25:32:f4:04:
47:5d:fa:30:91:66:44:e3:d2:8f:f7:55:1d:6b:cf:79:bd:f1:
96:57:aa:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:56:27 2026 by rpki-client