Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft
File: GW1YekBaGQSWYyGhDzmJtoZvXmM.mft (raw, json)
Hash identifier: x6YZTofEUtj5wXbq5Z8e2vlsoewNiUixHmNEXN3ZpVU=
Subject key identifier: 41:B2:96:90:B2:CC:16:84:79:01:87:D7:3D:DC:8A:F4:54:12:41:0D
Authority key identifier: 19:6D:58:7A:40:5A:19:04:96:63:21:A1:0F:39:89:B6:86:6F:5E:63
Certificate issuer: /CN=196d587a405a1904966321a10f3989b6866f5e63
Certificate serial: 019FA8629FB1E8908A543F041DC502D9373A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft
Manifest number: 01EA
Signing time: Tue 28 Jul 2026 11:01:03 +0000
Manifest this update: Tue 28 Jul 2026 11:01:03 +0000
Manifest next update: Wed 29 Jul 2026 11:01:03 +0000
Files and hashes: 1: GW1YekBaGQSWYyGhDzmJtoZvXmM.crl (hash: ay+AJO1NZzZ6Tq2NsOwZlHQoDN0CVbuvOXMHR9m9T48=)
2: cJYpXB_oLGSwXDizlOh5NTU415c.roa (hash: mZv4pxKg6JT+luM0hXV3CCOhtyIkDC3zPkMJ6EEFxgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:9f:b1:e8:90:8a:54:3f:04:1d:c5:02:d9:37:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196d587a405a1904966321a10f3989b6866f5e63
Validity
Not Before: Jul 28 11:01:03 2026 GMT
Not After : Jul 29 11:01:03 2026 GMT
Subject: CN=41b29690b2cc1684790187d73ddc8af45412410d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7a:4c:e3:31:60:2f:af:fe:7c:5f:b0:73:69:
a3:01:a9:32:16:ff:9e:92:09:a9:4a:7d:30:21:5c:
1d:18:e5:05:04:f8:42:0b:a3:97:99:ab:9e:74:95:
83:75:a7:ec:3c:a0:99:95:22:77:00:8b:cd:ca:10:
0d:19:49:fa:01:91:82:85:11:17:6a:b4:8b:1b:65:
96:25:2b:87:97:d3:4a:5f:65:93:f4:60:28:c8:65:
be:1f:aa:3a:bc:9d:2a:3b:41:0b:2a:b0:1e:55:93:
63:5d:bc:37:2e:f4:9d:d1:8a:75:b3:70:26:29:f9:
ae:e6:fa:94:d2:7b:61:4b:6f:99:c8:d2:55:62:94:
2a:cb:2b:99:cf:e7:ab:7f:5f:6b:f4:18:b0:8f:97:
3f:1a:81:79:01:70:c5:c9:fc:cd:dc:36:d4:65:78:
52:01:f9:03:af:7e:21:9c:4f:6e:1e:d3:73:9c:7b:
f5:83:8d:f1:59:91:43:03:d8:67:89:9c:e8:00:00:
39:8f:de:be:8a:ab:1a:9c:32:e7:2f:df:a2:73:39:
56:51:67:17:dc:f3:48:ab:8c:d4:aa:aa:ef:4b:53:
44:48:c3:e9:49:48:f1:74:d8:f5:4f:d6:f2:3f:a2:
46:a3:41:21:2c:0d:c4:41:25:44:a3:35:0d:c6:05:
38:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B2:96:90:B2:CC:16:84:79:01:87:D7:3D:DC:8A:F4:54:12:41:0D
X509v3 Authority Key Identifier:
keyid:19:6D:58:7A:40:5A:19:04:96:63:21:A1:0F:39:89:B6:86:6F:5E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a0:e2:9e:65:6a:19:20:39:e8:eb:50:4a:93:b8:f7:ab:bb:
be:13:e1:21:6b:b6:50:8f:cd:df:a1:aa:07:b7:ee:2b:7e:34:
62:50:97:6f:f5:2c:7d:80:1d:cf:79:63:9d:0e:31:57:28:d9:
e3:ab:c8:53:03:a1:48:b8:10:5c:e3:2e:c1:ea:c1:dc:30:c5:
6c:e8:a2:42:5f:6c:e4:9c:03:6b:73:2b:6c:0b:d3:2a:e2:45:
3f:55:ef:e6:c3:43:bf:6d:dc:37:2d:52:9d:11:59:bf:5e:d1:
1f:60:41:32:59:00:70:ee:ef:2f:bb:67:f5:22:56:fd:cd:fa:
d6:ae:10:60:37:83:11:7b:c9:b3:b6:3c:04:ec:7c:43:f8:c4:
f6:d9:7d:34:38:b3:48:df:5a:71:b2:09:59:e2:66:bb:0c:7d:
fb:63:08:90:0a:d1:17:8e:e2:9d:e3:90:28:65:9f:40:f5:d4:
b3:7d:38:55:f4:78:ba:ed:30:65:1d:ee:81:57:30:60:eb:99:
d0:f9:69:00:6d:d5:19:63:a7:50:07:c3:5a:70:6b:fb:e4:fa:
bf:d9:97:cf:a9:da:99:73:21:07:bf:03:7e:45:58:ed:1a:50:
01:2e:fb:48:cd:5e:7c:a6:74:fb:d2:03:24:25:49:9c:8f:02:
18:50:50:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:07:08 2026 by rpki-client