Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
File: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft (raw, json)
Hash identifier: D0UXt/s3DlEFd9bnZyhmTluxtW2LAEYwt42KCg8Y3wQ=
Subject key identifier: 28:DF:86:28:D0:61:2E:6B:0F:DC:B6:F5:6F:F3:03:D1:58:7E:40:11
Authority key identifier: 19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C
Certificate issuer: /CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
Certificate serial: 01A0D2DE921F34C1E7337FE4195865572D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
Manifest number: 0601
Signing time: Thu 24 Sep 2026 10:03:16 +0000
Manifest this update: Thu 24 Sep 2026 10:03:16 +0000
Manifest next update: Fri 25 Sep 2026 10:03:16 +0000
Files and hashes: 1: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl (hash: vZ9gNhyInUVta3k97wA1GOlmdsatxjFHP4TK46sffpE=)
2: aKJTM1Uf5WiFwk0xaQDn_EEx6LY.roa (hash: Bk0oWK0Lkt5p+4sdJT9WxyXxSp/0EFpvdzicJ3h6H0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:92:1f:34:c1:e7:33:7f:e4:19:58:65:57:2d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
Validity
Not Before: Sep 24 10:03:16 2026 GMT
Not After : Sep 25 10:03:16 2026 GMT
Subject: CN=28df8628d0612e6b0fdcb6f56ff303d1587e4011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:29:d9:a8:16:ee:67:a7:d5:78:2b:f4:c0:
0e:9f:01:9d:52:e8:bc:72:78:81:5f:59:23:86:81:
1c:2d:e4:66:7f:70:ff:0a:38:b0:1d:00:0b:a1:53:
96:81:e3:c8:d5:09:89:e0:3b:b8:54:c9:2e:5b:15:
7d:d5:95:cc:68:4b:3d:ff:c5:cd:8f:bb:c8:8a:6d:
5f:39:f7:c4:9b:35:bf:89:61:f4:3c:4e:34:03:7e:
61:e9:f0:fb:9d:7a:7e:30:3c:dd:43:0e:76:67:4d:
1b:7e:b2:36:05:e6:bd:04:01:a4:94:4f:38:c3:45:
23:9e:b4:c4:a5:6b:80:0c:e9:cb:da:cc:89:0e:9e:
79:de:8a:4f:52:ff:87:b7:76:83:d7:73:f1:d1:6f:
65:ad:97:77:fb:b6:37:be:21:ed:d5:37:60:c5:21:
c8:7a:a5:16:76:ab:71:7f:8a:68:15:aa:3e:7a:d3:
0d:67:e4:cb:40:67:80:4f:c6:f9:54:01:3e:b1:aa:
6a:4e:80:e7:24:cd:8d:35:bd:b6:b2:e5:ad:14:77:
26:77:23:f9:7d:b6:5e:87:c3:66:e1:78:26:df:da:
db:ec:6f:9e:00:ec:f0:32:c9:60:08:4e:c2:02:01:
fd:fc:c1:7a:47:e8:0b:5e:a5:3a:7f:4d:32:9b:b2:
ad:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DF:86:28:D0:61:2E:6B:0F:DC:B6:F5:6F:F3:03:D1:58:7E:40:11
X509v3 Authority Key Identifier:
keyid:19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e1:ef:45:67:3d:c6:54:a6:11:a7:f2:ce:71:8f:09:44:e1:
f9:23:72:b4:9d:75:9b:cc:85:1a:49:87:18:ea:68:7d:fc:ad:
17:c1:f5:4f:69:e7:77:dc:9b:f3:71:7f:42:4b:66:07:e2:1e:
6c:f2:91:22:e7:ee:9c:86:6a:d0:78:28:69:3d:e1:be:72:98:
32:73:1b:24:ec:fd:12:c4:7d:60:bf:21:4d:9c:66:53:95:e7:
4d:19:4c:ea:70:2a:c6:1e:de:aa:e2:02:c5:27:eb:17:b5:4e:
ac:dc:44:50:40:8f:bc:39:21:29:90:17:1d:65:7e:1d:9d:ba:
d5:92:00:ab:30:9a:ed:24:94:57:47:d5:74:92:4b:95:db:c5:
88:98:4c:0e:41:53:c1:cc:54:19:4d:8b:3d:56:8b:b3:5f:d1:
71:cb:af:3f:99:d3:c0:ea:b5:1e:ec:d2:39:d2:b9:ea:54:f4:
8e:d1:f5:24:8b:ae:2e:59:e9:73:6a:fe:3c:16:2d:cb:86:cb:
87:db:5e:2a:8b:e5:90:a7:5e:bc:16:bd:3f:46:6b:26:93:08:
ae:b5:8b:97:cd:b7:29:5b:30:20:b7:5f:ff:f2:41:b3:a7:57:
f6:76:d7:79:91:40:17:c4:94:75:7b:93:9b:ac:0b:74:cc:4f:
48:ff:ed:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:57:21 2026 by rpki-client