Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft
File: GW1YekBaGQSWYyGhDzmJtoZvXmM.mft (raw, json)
Hash identifier: kRpYx2gMFZC/HT1Vt8E4cFouTp28R3OOu3vmkF9Atho=
Subject key identifier: AC:F7:17:5B:8D:66:83:2E:0F:EC:62:2D:95:FE:1D:86:D7:7A:45:18
Authority key identifier: 19:6D:58:7A:40:5A:19:04:96:63:21:A1:0F:39:89:B6:86:6F:5E:63
Certificate issuer: /CN=196d587a405a1904966321a10f3989b6866f5e63
Certificate serial: 019CAD905612EEC74F4224DD1BA86D9EE21B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft
Manifest number: 5F
Signing time: Mon 02 Mar 2026 08:00:43 +0000
Manifest this update: Mon 02 Mar 2026 08:00:43 +0000
Manifest next update: Tue 03 Mar 2026 08:00:43 +0000
Files and hashes: 1: GW1YekBaGQSWYyGhDzmJtoZvXmM.crl (hash: a6pIuMEgcn1PcNKMtoB1dbwywdGq6TWWXplDijHSZhY=)
2: cJYpXB_oLGSwXDizlOh5NTU415c.roa (hash: mZv4pxKg6JT+luM0hXV3CCOhtyIkDC3zPkMJ6EEFxgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:56:12:ee:c7:4f:42:24:dd:1b:a8:6d:9e:e2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196d587a405a1904966321a10f3989b6866f5e63
Validity
Not Before: Mar 2 08:00:43 2026 GMT
Not After : Mar 3 08:00:43 2026 GMT
Subject: CN=acf7175b8d66832e0fec622d95fe1d86d77a4518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5a:2f:d6:a8:b9:e5:f2:1a:71:38:dd:f4:42:
45:a4:0d:64:39:d3:6c:47:6e:55:e6:b3:5d:42:87:
9b:42:9f:92:58:ec:cf:6a:2d:c0:f4:14:b4:7a:f7:
0d:32:13:26:fb:b0:f3:c0:fd:09:c6:df:24:2d:b3:
56:e6:c0:e1:01:b8:54:3e:7c:39:5f:b6:e2:72:51:
04:4b:e7:3c:cf:a6:f4:cf:e2:27:cf:f8:51:7a:23:
50:38:97:e5:a9:7f:e6:8b:c3:8f:6c:38:0c:31:38:
c8:56:b5:71:6d:a8:89:ad:0f:a4:c0:fd:3a:a2:02:
11:a3:2e:21:0b:e5:97:0e:5f:a8:0a:8b:c5:06:0b:
5c:cc:13:38:03:43:a9:6b:1c:1d:a2:20:46:39:b5:
1f:d9:38:08:8c:2a:68:99:ea:cd:ea:15:81:ab:f1:
62:e2:e1:b6:5b:59:9c:f5:fe:af:07:2a:19:72:51:
62:50:78:bc:43:fe:c0:73:bd:c3:04:49:81:2b:3e:
ce:b6:85:f7:21:8b:5c:da:9b:96:ea:47:43:71:16:
c0:72:10:6b:1f:49:ef:c6:60:e4:09:78:ee:b9:f8:
42:07:c3:31:32:04:40:55:ea:c3:f2:cd:2e:37:ee:
b2:cf:a6:4e:a5:41:8e:04:b2:04:4c:7a:e8:ca:7f:
c8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F7:17:5B:8D:66:83:2E:0F:EC:62:2D:95:FE:1D:86:D7:7A:45:18
X509v3 Authority Key Identifier:
keyid:19:6D:58:7A:40:5A:19:04:96:63:21:A1:0F:39:89:B6:86:6F:5E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d1:ab:1c:25:f1:e3:d3:0a:5c:36:57:71:34:20:2b:a4:29:
e8:b5:64:17:94:86:65:e3:d3:b2:9d:e9:34:e1:22:d2:87:3e:
b2:24:26:54:fe:28:b8:6a:52:cd:24:8f:29:c5:cc:8d:af:59:
ae:1d:d7:88:c1:ab:7a:63:6d:a6:c7:27:12:fb:2a:fe:40:a7:
c9:4d:11:ab:82:3a:1d:00:29:1f:35:be:2c:4f:4d:fa:77:31:
7a:cd:fc:96:0d:d3:80:6e:23:a3:38:1c:ac:7c:0b:fc:0a:40:
26:77:3d:05:9c:0f:4a:db:d6:87:eb:e7:c3:e6:c1:24:61:13:
d8:24:2b:29:d2:0e:b9:3f:e4:3e:7a:5b:b5:a5:e1:f8:f4:c0:
a7:1a:9a:41:c0:c9:20:17:6d:29:9f:8b:8f:36:92:83:7a:a5:
5e:93:be:99:c9:07:52:60:6d:40:91:5a:22:e5:1b:82:38:b7:
20:ff:eb:31:e9:1d:63:f6:14:92:89:6c:73:cb:da:1a:30:49:
af:5b:c2:36:52:6c:10:d3:26:8d:53:71:56:67:d5:a9:e6:e2:
c2:90:4b:fb:2f:69:cd:aa:d6:12:2d:76:52:d3:2f:83:fd:ef:
f5:3d:5c:6e:b0:88:93:5c:4d:09:39:6c:6e:aa:cf:26:74:a0:
f5:a2:a5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:56:01 2026 by rpki-client