
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
File: GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft (raw, json)
Hash identifier: 2Y0QwaHLfqZGy1cdjfUHLbJC4LupkBabJuIEDbG4/ds=
Subject key identifier: E5:EF:56:90:0C:91:83:8D:44:46:4F:41:99:7D:72:28:F2:5F:73:DA
Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
Certificate issuer: /CN=1b098412c984b89be38011a72a3c471975fc47a2
Certificate serial: 019ECABA11FBB3450EE292C9A9447D552F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
Manifest number: 0B5E
Signing time: Mon 15 Jun 2026 10:00:52 +0000
Manifest this update: Mon 15 Jun 2026 10:00:52 +0000
Manifest next update: Tue 16 Jun 2026 10:00:52 +0000
Files and hashes: 1: 3z35gDmHecdzIYEGmIKw6RYeXEA.roa (hash: j55RlWKFCQCXc2QwhpECXuc0I1p5c8gSybgzQ5rlp3w=)
2: GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl (hash: /S6ezQr1lwkm9YcOxvoNbxT47c7mCM0tuKvdjqlmhRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Jun 2026 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:ba:11:fb:b3:45:0e:e2:92:c9:a9:44:7d:55:2f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2
Validity
Not Before: Jun 15 10:00:52 2026 GMT
Not After : Jun 16 10:00:52 2026 GMT
Subject: CN=e5ef56900c91838d44464f41997d7228f25f73da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:5e:3a:8a:d9:02:e0:f3:df:3e:d5:f2:03:
60:b2:35:02:27:8b:79:97:eb:a8:12:83:22:fe:fb:
13:3e:11:77:93:bb:57:52:0c:97:27:4d:e7:f2:1b:
32:45:19:9f:6c:d6:1d:86:35:31:ca:07:16:3c:37:
f2:9a:cc:aa:3e:f1:ec:ca:f3:da:87:ff:f1:ae:dc:
ce:32:b9:ac:31:e1:4b:15:ed:0e:8f:49:99:e4:bc:
15:04:d8:8a:d2:63:48:16:9f:d9:d0:30:86:3a:87:
57:d9:7a:51:b5:c9:23:7d:ff:0b:b5:28:ff:c3:10:
9e:ff:96:4c:09:49:8b:af:44:11:d0:dc:c3:2d:51:
69:1d:a6:b5:35:ae:76:64:6f:7c:71:0b:c4:16:1d:
ee:12:c4:3e:c2:10:a2:9e:ec:91:a4:44:70:62:92:
a6:de:7c:f7:b7:04:19:e0:2c:e6:01:41:bf:78:f0:
8f:da:dc:ce:89:6f:40:ab:55:1f:d7:41:9d:6e:f2:
9a:4e:2a:0e:25:93:10:75:cd:2d:0f:6f:34:61:0c:
51:d1:54:c8:b0:3e:e5:22:09:41:1e:4e:a7:b2:f2:
e9:b2:b5:71:5e:3d:b7:41:f0:2a:51:02:e4:f3:b4:
89:d8:31:e2:88:c1:a7:41:11:84:d8:1c:ff:1b:f7:
08:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EF:56:90:0C:91:83:8D:44:46:4F:41:99:7D:72:28:F2:5F:73:DA
X509v3 Authority Key Identifier:
keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c6:16:60:97:17:94:ab:54:b9:b9:51:a5:c1:ad:40:20:25:
6e:b9:94:28:f7:3b:09:68:c9:63:ab:ed:29:5a:f3:6c:d9:eb:
b9:8a:ef:2a:20:9a:b2:0b:c3:be:97:c0:e5:bb:06:62:ce:f1:
14:2c:14:41:dc:77:63:47:c7:f4:68:2d:a4:a4:da:43:70:77:
3d:97:37:cd:7d:ab:a7:1e:c4:fa:dc:d4:7f:14:bb:9a:0b:93:
a4:c2:17:a5:48:de:11:28:d5:7c:36:dd:ce:0d:ad:41:ed:40:
e1:de:5e:9b:63:fa:0e:63:1f:50:43:c3:8c:a5:11:85:db:95:
d6:8e:18:0c:4a:0e:94:b4:cf:a9:91:c2:31:93:78:b2:78:dc:
b3:0c:ab:19:17:4b:da:6f:17:be:2d:ee:68:50:39:e6:23:cc:
05:cd:7b:87:59:8d:0f:d4:af:92:16:bb:01:a1:f6:52:dd:1f:
39:30:92:12:d0:60:5a:9a:ba:79:ce:ad:f9:47:6c:57:11:5d:
22:9a:34:b7:e5:86:77:4a:d6:4e:a9:6e:2d:48:f4:8a:9a:45:
48:a7:4f:67:ad:9f:d2:0a:57:b9:e8:77:50:52:00:5e:1e:0c:
1d:58:9f:30:89:56:97:7b:3b:e1:3c:68:73:b2:9d:ca:51:98:
b8:07:88:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7KuhH7s0UO4pLJqUR9VS+aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDk4NDEyYzk4NGI4OWJlMzgwMTFhNzJhM2M0NzE5NzVm
YzQ3YTIwHhcNMjYwNjE1MTAwMDUyWhcNMjYwNjE2MTAwMDUyWjAzMTEwLwYDVQQD
EyhlNWVmNTY5MDBjOTE4MzhkNDQ0NjRmNDE5OTdkNzIyOGYyNWY3M2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS1eOorZAuDz3z7V8gNgsjUCJ4t5
l+uoEoMi/vsTPhF3k7tXUgyXJ03n8hsyRRmfbNYdhjUxygcWPDfymsyqPvHsyvPa
h//xrtzOMrmsMeFLFe0Oj0mZ5LwVBNiK0mNIFp/Z0DCGOodX2XpRtckjff8LtSj/
wxCe/5ZMCUmLr0QR0NzDLVFpHaa1Na52ZG98cQvEFh3uEsQ+whCinuyRpERwYpKm
3nz3twQZ4CzmAUG/ePCP2tzOiW9Aq1Uf10GdbvKaTioOJZMQdc0tD280YQxR0VTI
sD7lIglBHk6nsvLpsrVxXj23QfAqUQLk87SJ2DHiiMGnQRGE2Bz/G/cIuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXvVpAMkYONREZPQZl9cijyX3PaMB8GA1UdIwQY
MBaAFBsJhBLJhLib44ARpyo8Rxl1/EeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xNWU5MDUtZmE0Zi00ZDgzLWJmZjYt
NzBkMTMzMDZjZDFjLzEvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8xNWU5MDUtZmE0Zi00ZDgzLWJmZjYtNzBkMTMzMDZjZDFj
LzEvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGMYWYJcX
lKtUublRpcGtQCAlbrmUKPc7CWjJY6vtKVrzbNnruYrvKiCasgvDvpfA5bsGYs7x
FCwUQdx3Y0fH9GgtpKTaQ3B3PZc3zX2rpx7E+tzUfxS7mguTpMIXpUjeESjVfDbd
zg2tQe1A4d5em2P6DmMfUEPDjKURhduV1o4YDEoOlLTPqZHCMZN4snjcswyrGRdL
2m8Xvi3uaFA55iPMBc17h1mND9Svkha7AaH2Ut0fOTCSEtBgWpq6ec6t+UdsVxFd
Ipo0t+WGd0rWTqluLUj0ippFSKdPZ62f0gpXueh3UFIAXh4MHVifMIlWl3s74Txo
c7KdylGYuAeIMA==
-----END CERTIFICATE-----
Generated at Mon Jun 15 16:53:47 2026 by rpki-client