Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
File: GWN5dpxXylsmosYfpdmsxSe-p4k.mft (raw, json)
Hash identifier: EnhWN08XwT7hHKTMk7wPsCR7wTjkeZr2MDIi4U4L4RM=
Subject key identifier: B3:D6:BD:CD:3D:63:36:C0:37:63:9F:42:A3:DF:C8:73:EB:3A:60:5B
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Certificate issuer: /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial: 019CABD8EFD5523FC769D97C6B58EFDF8708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:00:46 +0000
Manifest this update: Mon 02 Mar 2026 00:00:46 +0000
Manifest next update: Tue 03 Mar 2026 00:00:46 +0000
Files and hashes: 1: 3W77edW628jQxwd19lvVjtYuG1o.roa (hash: eeBqOwHI9v74XHIGFTRR/UVJPjywNaCr9KLzr8nBNf8=)
2: GWN5dpxXylsmosYfpdmsxSe-p4k.crl (hash: t4wRHcRrItEq8/2Xmp1dKALktTxa9+/sT5yRLwrvFvo=)
3: bg16vmmigVbvm4o3Mdxq8cFNNQU.roa (hash: zFOo31LB1MSXG3aNBtx7FcoSwNGxRX0bLqGZpw+CvMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:ef:d5:52:3f:c7:69:d9:7c:6b:58:ef:df:87:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Validity
Not Before: Mar 2 00:00:46 2026 GMT
Not After : Mar 3 00:00:46 2026 GMT
Subject: CN=b3d6bdcd3d6336c037639f42a3dfc873eb3a605b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fa:53:cd:6f:8f:4f:a1:fe:88:11:e1:dd:31:
80:82:73:08:dc:46:c0:ed:50:9e:1a:84:d6:0d:e8:
9f:a3:88:f2:7d:27:a7:cb:67:31:63:72:c0:5b:82:
5a:86:1c:6c:55:ad:51:9a:c8:82:c8:c7:46:e4:2a:
1f:de:9a:4e:40:ab:23:af:42:15:a7:2c:25:0f:8c:
ee:d5:82:e8:9d:0d:74:5f:28:90:ba:98:e8:a2:f0:
fa:6a:12:b2:df:88:b8:fc:6c:92:14:80:f2:3d:66:
6c:9c:21:68:40:de:83:85:93:1e:c9:c4:7b:06:8d:
74:f6:bb:dc:02:5d:65:90:b8:6b:b2:01:3b:56:ef:
e1:8f:0b:b5:1d:6e:03:0d:61:fe:50:a7:e1:1f:67:
56:0d:4e:e0:c5:41:fa:47:f6:77:47:c8:b2:66:69:
16:c2:78:3d:38:5c:07:ec:6c:d1:c7:65:29:03:b1:
31:a4:64:89:b2:d6:dd:3e:83:d7:8f:fb:4f:78:e9:
a2:b3:79:4f:21:69:72:92:7d:85:32:11:cb:d5:64:
17:e7:10:ef:47:e8:01:29:76:00:bb:aa:c1:0b:61:
07:33:06:7a:46:c0:39:9a:cd:d1:cf:64:8d:4a:4b:
54:0d:ee:38:08:2e:55:29:31:ae:7f:ba:56:77:ca:
b7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D6:BD:CD:3D:63:36:C0:37:63:9F:42:A3:DF:C8:73:EB:3A:60:5B
X509v3 Authority Key Identifier:
keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f6:6d:04:6b:0b:76:ba:27:10:3e:c7:31:81:c2:84:5d:da:
7d:85:51:0d:ec:55:f9:42:d2:64:59:f7:b7:8a:2a:f0:11:86:
8e:61:b8:61:61:23:ce:f4:a8:95:65:c6:00:b9:8e:16:7f:7b:
61:77:94:93:72:fb:c4:80:0d:d1:92:d3:0d:63:86:be:26:39:
a4:a5:23:e5:a2:03:17:a5:68:24:10:57:26:20:78:cd:83:1b:
d8:24:7e:6c:b5:33:60:4b:0f:85:dd:d4:6c:02:fc:4a:f0:ae:
12:73:22:a6:da:8d:5a:be:a1:97:d0:c6:4e:a2:b5:41:42:7a:
87:f1:ba:12:bd:b2:ff:f4:3d:b6:58:96:cc:10:be:27:a0:d2:
d6:2a:3f:45:9a:36:d3:55:69:9d:df:38:de:84:43:a3:20:60:
4f:b6:76:c3:aa:23:9b:df:26:31:31:73:56:9a:28:f4:0c:dd:
e0:3a:fa:09:14:fe:ac:04:1f:b4:7a:88:95:57:19:33:41:70:
82:c4:80:8c:d9:41:76:fc:39:33:22:79:9d:31:a8:bf:d5:2c:
cc:f7:b0:ca:88:d2:79:a2:bf:fa:b3:8e:9b:15:ef:f4:4b:05:
f4:d2:bb:83:05:cf:37:66:4a:d6:02:df:26:28:6f:28:ac:ff:
40:0f:dc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:38 2026 by rpki-client