Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
File: gwn4FzfW8X58GtWISa_3HFAGTwQ.mft (raw, json)
Hash identifier: z+JyGi9XEUZ+mUlilEJWiZo2FQ5IO9f60DBvw8lAHU0=
Subject key identifier: 44:68:C3:54:5A:E7:63:5F:84:1E:9C:B7:EF:F9:5F:B0:11:F5:58:55
Authority key identifier: 83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
Certificate issuer: /CN=8309f81737d6f17e7c1ad58849aff71c50064f04
Certificate serial: 019D9A06D7B66B3D4F86AB5DDD1DDABDA447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
Manifest number: 16A9
Signing time: Fri 17 Apr 2026 06:00:32 +0000
Manifest this update: Fri 17 Apr 2026 06:00:32 +0000
Manifest next update: Sat 18 Apr 2026 06:00:32 +0000
Files and hashes: 1: b5oUI_QaX4CIrD9gVfpSglG-l0g.roa (hash: yb9qoXzX3+CuYySvgkHy2fr0k4HAjW35z3hNaIhuEm8=)
2: gwn4FzfW8X58GtWISa_3HFAGTwQ.crl (hash: FnDMSKLP1PCM6gaEsv5GYcIJkzZcADw3F082iqa/Y88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:d7:b6:6b:3d:4f:86:ab:5d:dd:1d:da:bd:a4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8309f81737d6f17e7c1ad58849aff71c50064f04
Validity
Not Before: Apr 17 06:00:32 2026 GMT
Not After : Apr 18 06:00:32 2026 GMT
Subject: CN=4468c3545ae7635f841e9cb7eff95fb011f55855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:a0:69:23:67:b1:77:7e:54:e6:cd:d2:66:
fe:92:e1:8b:f9:3c:c8:2b:8e:bb:c3:30:5b:6e:1b:
46:f0:9c:31:ed:b6:5e:e3:c9:56:16:70:3b:7e:07:
e8:88:0f:04:22:9c:5c:9d:81:e9:80:c5:a1:a4:6f:
fc:80:0a:03:fc:44:a2:9a:ed:35:b2:a7:bd:b0:7d:
92:e0:4a:73:92:1b:10:86:02:c2:4a:13:62:ec:d9:
a5:b2:ea:e7:0e:22:56:83:7a:a4:74:74:75:14:d6:
79:92:42:ea:13:6c:62:1c:9a:cd:20:39:5b:65:f1:
d8:83:45:96:dd:08:0f:e8:b1:6a:73:b0:8a:0f:ae:
6f:97:32:48:90:50:7a:ac:00:e4:e2:46:49:25:82:
f8:1e:3b:f6:e7:11:33:29:e6:bf:93:3b:9d:29:f5:
3e:63:fe:29:d3:5b:46:f0:52:e2:da:9b:57:7e:de:
cf:57:bd:24:6c:4a:63:58:e8:8c:5f:f0:6e:34:f9:
90:05:3c:9c:47:f9:e3:00:f1:f8:05:57:9f:c0:ce:
fc:71:cf:95:6a:b3:72:82:cc:0d:2f:dc:1e:70:35:
4d:ae:03:48:de:b8:29:4e:6a:f5:b9:79:5f:2a:b4:
74:01:14:63:e6:ac:f0:1f:da:58:53:7b:4a:17:4a:
c7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:68:C3:54:5A:E7:63:5F:84:1E:9C:B7:EF:F9:5F:B0:11:F5:58:55
X509v3 Authority Key Identifier:
keyid:83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b8:d2:99:9c:d8:01:7b:ad:a5:a7:f3:11:80:c6:a0:3b:87:
09:67:b6:38:03:d0:8b:e6:6c:2e:b1:b1:7a:08:a7:6d:b3:75:
19:ef:43:6f:e9:e8:08:db:c1:da:9e:eb:e4:d5:46:d4:19:91:
d0:b8:0c:0f:54:77:ad:aa:a9:1d:52:ef:cb:cd:77:79:3f:55:
14:25:c9:4f:4a:ca:cb:64:c9:dc:9c:e8:7e:35:ec:2c:e7:c5:
96:fb:5d:29:1c:1a:dc:32:3a:82:ce:15:0f:17:48:8a:8a:c9:
41:36:f2:a2:a9:f9:14:f4:cb:9f:e9:0a:f9:b7:a6:d9:53:b0:
39:c3:7e:96:3e:6b:84:69:69:12:92:5e:12:80:1a:c3:26:3f:
e8:e8:6b:55:a2:34:60:c7:f7:b8:51:b9:7b:36:0e:5b:34:d2:
aa:dd:d6:f6:c9:77:f7:89:aa:a7:09:83:28:82:18:e8:71:6b:
b2:cd:9e:96:3b:91:df:b1:79:87:c1:a7:a0:e5:0c:22:09:a2:
39:d2:a7:b7:97:5e:76:d3:97:7e:10:bd:73:ab:d6:19:9d:93:
c1:2f:eb:b6:d9:8a:11:0e:9f:f1:9a:43:1f:15:cc:06:a2:19:
18:cf:b2:80:32:4e:f0:88:c6:93:bc:fe:dc:43:da:24:9e:eb:
5e:1d:84:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBte2az1Phqtd3R3avaRHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDlmODE3MzdkNmYxN2U3YzFhZDU4ODQ5YWZmNzFjNTAw
NjRmMDQwHhcNMjYwNDE3MDYwMDMyWhcNMjYwNDE4MDYwMDMyWjAzMTEwLwYDVQQD
Eyg0NDY4YzM1NDVhZTc2MzVmODQxZTljYjdlZmY5NWZiMDExZjU1ODU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7KgaSNnsXd+VObN0mb+kuGL+TzI
K467wzBbbhtG8Jwx7bZe48lWFnA7fgfoiA8EIpxcnYHpgMWhpG/8gAoD/ESimu01
sqe9sH2S4EpzkhsQhgLCShNi7NmlsurnDiJWg3qkdHR1FNZ5kkLqE2xiHJrNIDlb
ZfHYg0WW3QgP6LFqc7CKD65vlzJIkFB6rADk4kZJJYL4Hjv25xEzKea/kzudKfU+
Y/4p01tG8FLi2ptXft7PV70kbEpjWOiMX/BuNPmQBTycR/njAPH4BVefwM78cc+V
arNygswNL9wecDVNrgNI3rgpTmr1uXlfKrR0ARRj5qzwH9pYU3tKF0rHVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERow1Ra52NfhB6ct+/5X7AR9VhVMB8GA1UdIwQY
MBaAFIMJ+Bc31vF+fBrViEmv9xxQBk8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3duNEZ6Zlc4WDU4R3RXSVNhXzNIRkFHVHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zYTAwMjYtMjg0Ny00Mjc2LTk2YmEt
MTc0NzM3OGU2NTk0LzEvZ3duNEZ6Zlc4WDU4R3RXSVNhXzNIRkFHVHdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zYTAwMjYtMjg0Ny00Mjc2LTk2YmEtMTc0NzM3OGU2NTk0
LzEvZ3duNEZ6Zlc4WDU4R3RXSVNhXzNIRkFHVHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYrjSmZzY
AXutpafzEYDGoDuHCWe2OAPQi+ZsLrGxeginbbN1Ge9Db+noCNvB2p7r5NVG1BmR
0LgMD1R3raqpHVLvy813eT9VFCXJT0rKy2TJ3JzofjXsLOfFlvtdKRwa3DI6gs4V
DxdIiorJQTbyoqn5FPTLn+kK+bem2VOwOcN+lj5rhGlpEpJeEoAawyY/6OhrVaI0
YMf3uFG5ezYOWzTSqt3W9sl394mqpwmDKIIY6HFrss2eljuR37F5h8GnoOUMIgmi
OdKnt5dedtOXfhC9c6vWGZ2TwS/rttmKEQ6f8ZpDHxXMBqIZGM+ygDJO8IjGk7z+
3EPaJJ7rXh2E+w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:10:38 2026 by rpki-client