Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft
File: GW1YekBaGQSWYyGhDzmJtoZvXmM.mft (raw, json)
Hash identifier: oOogjq9yA69QAODp807JZChG1ce26x28D81WUgHIOcc=
Subject key identifier: B5:0B:13:DF:C5:4D:AC:70:E0:E6:86:06:EA:07:9E:41:F0:E8:99:E0
Authority key identifier: 19:6D:58:7A:40:5A:19:04:96:63:21:A1:0F:39:89:B6:86:6F:5E:63
Certificate issuer: /CN=196d587a405a1904966321a10f3989b6866f5e63
Certificate serial: 019D9B19AB5202984A4B74C041CF3ADF1AC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft
Manifest number: DA
Signing time: Fri 17 Apr 2026 11:00:43 +0000
Manifest this update: Fri 17 Apr 2026 11:00:43 +0000
Manifest next update: Sat 18 Apr 2026 11:00:43 +0000
Files and hashes: 1: GW1YekBaGQSWYyGhDzmJtoZvXmM.crl (hash: dz4YtX2ZSk3jBXZ1HQq/dBeHx2w+R4N1RBTcT9xr3tU=)
2: cJYpXB_oLGSwXDizlOh5NTU415c.roa (hash: mZv4pxKg6JT+luM0hXV3CCOhtyIkDC3zPkMJ6EEFxgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:ab:52:02:98:4a:4b:74:c0:41:cf:3a:df:1a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196d587a405a1904966321a10f3989b6866f5e63
Validity
Not Before: Apr 17 11:00:43 2026 GMT
Not After : Apr 18 11:00:43 2026 GMT
Subject: CN=b50b13dfc54dac70e0e68606ea079e41f0e899e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:58:b5:3c:82:fc:48:97:95:b8:5d:b1:a2:69:
61:25:62:29:48:30:6a:c9:62:9d:4e:b7:0b:8d:af:
1a:d5:1f:bf:20:49:61:8e:29:2e:25:64:05:bf:40:
26:cc:44:e6:0b:ea:b1:b7:ce:a7:8f:03:ec:f6:bd:
0a:19:77:77:55:7b:e2:7e:c2:3e:c1:57:fe:bf:11:
28:ef:4e:68:e2:43:b3:e8:c4:65:8e:99:e1:a9:ba:
e9:19:ed:aa:8c:27:d4:50:ae:a9:07:32:2a:f7:80:
c9:94:f3:24:07:0f:c5:bf:c5:a7:5a:d0:e2:99:c9:
2d:0c:fb:63:de:d3:05:bc:51:dc:1e:17:15:6b:65:
cc:e8:1d:5b:65:4a:98:31:9d:81:13:9b:b4:2a:fa:
35:9b:f1:0c:d4:43:b8:f2:9a:01:4d:a2:87:73:18:
66:58:8b:09:65:e4:e6:ce:ea:e3:25:e7:3b:b1:d0:
8a:62:eb:b1:f0:8d:f5:8d:a5:d8:52:03:54:f7:9d:
0e:4a:c9:40:92:71:73:76:b1:d3:e1:3f:01:d6:1a:
dc:97:e0:e1:85:4e:1c:c8:25:55:71:16:b9:36:11:
04:aa:73:66:31:c4:20:c2:50:fc:4c:da:14:07:fa:
8c:e0:9e:37:0f:1b:f4:c7:1b:1f:41:8e:07:22:2c:
f9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0B:13:DF:C5:4D:AC:70:E0:E6:86:06:EA:07:9E:41:F0:E8:99:E0
X509v3 Authority Key Identifier:
keyid:19:6D:58:7A:40:5A:19:04:96:63:21:A1:0F:39:89:B6:86:6F:5E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:71:b2:28:87:fb:ee:45:2a:f0:9f:4e:02:f4:9d:7b:c0:45:
ac:fc:a6:32:41:2e:3e:d2:b7:ac:1a:d6:fa:fe:e6:d7:90:5e:
23:54:e5:48:54:65:34:90:d0:f0:83:fb:bd:24:b5:99:21:dc:
b2:3c:1c:c9:7e:8a:1e:3a:97:06:94:4e:05:90:38:62:41:67:
b3:21:56:f0:92:0e:99:5b:fa:7b:c7:10:b8:53:c0:2d:6a:f8:
61:73:79:b0:c5:06:39:3d:d6:92:00:90:ef:24:92:70:99:42:
8a:e4:00:44:13:74:6a:da:3a:bf:27:07:87:2a:49:c8:f0:cb:
ae:f4:25:03:f7:8e:a7:70:7f:33:e8:12:64:58:78:04:fa:73:
a5:98:92:db:1d:69:f1:05:13:5c:85:3f:19:86:ea:1d:b7:78:
ea:cd:ea:18:9d:a4:10:39:46:f2:74:60:ac:04:c2:db:53:15:
28:d7:07:e7:a5:49:a5:33:55:b2:80:58:e8:5b:3d:17:f1:4f:
f5:79:4d:24:83:4b:9f:a1:00:37:69:15:49:94:3a:73:22:82:
f3:40:7f:8a:50:97:f7:0a:75:44:38:04:d0:1e:39:f4:80:71:
ee:f3:4f:76:79:53:5c:ff:73:9c:e0:42:38:2f:85:28:00:f7:
ba:ef:69:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:58:27 2026 by rpki-client