Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
File: GWN5dpxXylsmosYfpdmsxSe-p4k.mft (raw, json)
Hash identifier: +Rg0SceCNxEGFCDkUZRp+yjSnk72Of3mLy21kcnZNb8=
Subject key identifier: 54:46:85:B6:42:F3:72:63:DE:09:97:06:1F:0F:AE:B4:B0:D5:70:4A
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Certificate issuer: /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial: 019D9961F40694AE86E4ABB29F7DF6EE748B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:00:26 +0000
Manifest this update: Fri 17 Apr 2026 03:00:26 +0000
Manifest next update: Sat 18 Apr 2026 03:00:26 +0000
Files and hashes: 1: 3W77edW628jQxwd19lvVjtYuG1o.roa (hash: eeBqOwHI9v74XHIGFTRR/UVJPjywNaCr9KLzr8nBNf8=)
2: GWN5dpxXylsmosYfpdmsxSe-p4k.crl (hash: pcCoYYK7qGasc0fq+NCPLmIPzQ3wPqdh/WMR7/UF/Bs=)
3: bg16vmmigVbvm4o3Mdxq8cFNNQU.roa (hash: zFOo31LB1MSXG3aNBtx7FcoSwNGxRX0bLqGZpw+CvMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:f4:06:94:ae:86:e4:ab:b2:9f:7d:f6:ee:74:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Validity
Not Before: Apr 17 03:00:26 2026 GMT
Not After : Apr 18 03:00:26 2026 GMT
Subject: CN=544685b642f37263de0997061f0faeb4b0d5704a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a8:42:5c:67:3b:4f:02:2e:8a:e0:21:23:a8:
e1:e6:00:a8:c9:ce:1a:89:a9:2e:6f:7a:9d:f7:4c:
98:37:01:45:ee:36:63:32:91:0e:2f:38:5b:78:14:
5b:31:1a:bc:88:8e:54:80:83:0b:08:d8:70:63:d9:
f7:e6:d7:fc:a7:0c:be:92:56:f4:76:ad:c7:80:cd:
c0:61:ce:44:02:41:45:19:09:58:c2:8c:a3:e2:42:
32:aa:f4:09:88:58:22:c7:b7:7c:3f:ad:93:6f:9b:
17:78:23:4b:99:9d:93:a0:7e:04:2c:3c:ea:0a:13:
55:ee:6d:e4:ab:cb:91:92:69:cf:a4:34:65:8b:92:
df:65:fd:8e:fe:a2:6b:ec:a2:dd:a5:a9:b5:a5:f3:
9d:69:55:67:be:65:cf:fa:e5:67:87:20:de:30:af:
dd:fa:26:67:2d:5a:68:ab:38:42:cf:ab:ab:7d:ce:
6c:bb:54:3e:b1:49:15:db:1a:1f:3b:6c:4a:23:7a:
09:25:29:86:47:df:bd:45:36:ba:a2:d5:f0:1d:04:
ad:89:21:15:ab:87:01:32:00:ad:02:42:d5:18:3b:
65:5c:8c:58:6d:93:6f:75:59:00:9e:68:14:2f:1b:
e2:0e:d0:03:9c:9f:9a:a4:09:c9:b1:62:79:22:3e:
bd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:46:85:B6:42:F3:72:63:DE:09:97:06:1F:0F:AE:B4:B0:D5:70:4A
X509v3 Authority Key Identifier:
keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e6:7e:d3:e2:fe:a2:75:fc:b9:78:e1:a0:42:9a:81:89:99:
e5:67:1b:9f:80:ae:b7:52:94:fd:13:56:f9:07:07:3b:bc:c6:
44:1c:30:2b:63:c1:8b:1c:f6:82:3b:39:c1:f5:23:0d:6d:b7:
10:82:91:c1:21:e4:52:c7:50:8e:c8:16:a3:49:11:d7:64:b1:
15:2f:76:77:d3:12:0d:58:93:ad:ab:84:a1:3a:8a:26:76:73:
70:5d:4d:2d:6b:da:8e:9f:d2:26:59:d6:db:75:3a:f1:8f:c0:
ec:78:b5:18:89:b9:b8:de:52:32:93:44:e6:9b:6e:5a:93:9d:
59:3d:ba:ae:27:4b:66:38:f3:4e:f2:b5:b7:c1:27:bf:a2:c1:
fe:9f:ae:47:96:23:31:f6:65:99:19:a0:e3:6b:52:10:8e:5f:
78:0b:77:2d:9c:43:f0:30:3c:4a:15:59:a2:ce:47:61:90:d5:
1f:32:82:c6:58:df:d9:20:39:ff:ed:26:38:12:91:96:5e:28:
59:51:66:8d:1b:05:c9:ac:71:fb:48:76:e2:50:67:c8:9e:9a:
78:16:13:8d:44:b9:ce:a8:19:42:f7:4d:9f:0d:85:f9:2a:26:
c0:d9:02:99:9d:e9:3e:f2:f0:a5:e4:06:ac:d8:6d:09:a4:f3:
7c:b6:c0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:00 2026 by rpki-client