Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
File: GWN5dpxXylsmosYfpdmsxSe-p4k.mft (raw, json)
Hash identifier: wQ9Qmx1hDeu4gbYPMlyIC4rFXkMxMGFgyQnb1LsHHeg=
Subject key identifier: CB:37:A6:54:1C:A8:A2:89:3C:D8:8C:AD:4C:81:C8:7A:4F:3B:56:77
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Certificate issuer: /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial: 01A0E174BC06F13DBE7C2EEA39D99CDB332B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
Manifest number: 1A76
Signing time: Sun 27 Sep 2026 06:01:58 +0000
Manifest this update: Sun 27 Sep 2026 06:01:58 +0000
Manifest next update: Mon 28 Sep 2026 06:01:58 +0000
Files and hashes: 1: 3W77edW628jQxwd19lvVjtYuG1o.roa (hash: eeBqOwHI9v74XHIGFTRR/UVJPjywNaCr9KLzr8nBNf8=)
2: GWN5dpxXylsmosYfpdmsxSe-p4k.crl (hash: E5AfIbhVBlgJEZqWmWvmIseFvh88zwxvCa2ZpbbwpRE=)
3: bg16vmmigVbvm4o3Mdxq8cFNNQU.roa (hash: zFOo31LB1MSXG3aNBtx7FcoSwNGxRX0bLqGZpw+CvMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:bc:06:f1:3d:be:7c:2e:ea:39:d9:9c:db:33:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Validity
Not Before: Sep 27 06:01:58 2026 GMT
Not After : Sep 28 06:01:58 2026 GMT
Subject: CN=cb37a6541ca8a2893cd88cad4c81c87a4f3b5677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fe:72:cc:f0:4e:fd:25:3a:2d:57:28:43:e2:
7e:2c:94:e5:c5:d8:26:99:c6:b1:25:75:5d:2d:5f:
f4:21:57:11:2c:33:d5:62:f4:a4:9a:33:24:bf:e2:
f6:56:5d:82:74:c6:95:77:2e:49:fe:70:7e:fd:20:
be:97:ee:83:d0:81:59:40:33:03:91:98:6e:05:77:
01:1e:c8:26:ab:cb:33:97:65:bb:19:00:73:cc:38:
de:74:c7:fd:05:d6:1d:e2:91:88:d1:b3:71:b9:5b:
ca:f2:16:e6:4d:64:a9:51:5f:20:99:83:c5:4e:9d:
0f:5d:7b:09:3a:f9:d0:8a:a6:02:39:67:aa:33:4e:
f7:46:fa:c4:9b:13:2d:f0:5e:19:5e:ad:21:95:6e:
b7:c1:b9:ff:58:4b:1e:65:95:32:7a:da:45:b3:c9:
ab:32:1b:96:c9:09:63:3b:8a:d9:9d:db:03:99:da:
d5:71:2e:99:b5:a2:86:a9:2b:79:4c:d5:0e:8e:43:
38:60:5e:42:f4:86:23:dc:c1:e2:ce:20:8b:67:ce:
bc:80:94:20:26:7b:73:f1:3d:2a:d2:8f:c2:50:9c:
93:65:34:83:58:9d:51:48:56:35:3a:83:c2:40:92:
da:bc:7a:93:45:fd:7b:9a:9d:aa:ed:70:f8:52:a6:
19:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:37:A6:54:1C:A8:A2:89:3C:D8:8C:AD:4C:81:C8:7A:4F:3B:56:77
X509v3 Authority Key Identifier:
keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:49:07:22:ef:99:73:8f:1f:50:43:ce:9d:27:a5:ac:21:fc:
d7:df:0d:65:82:6f:cd:fc:22:c3:22:80:3a:ae:3d:74:87:2c:
68:cf:de:f7:30:d5:6e:0e:06:15:dd:6d:4c:a4:31:2a:6b:74:
be:d0:23:ab:6e:73:f9:00:2f:9e:22:7c:c1:80:88:75:fb:37:
5b:ba:4b:38:6c:7e:50:92:d6:4a:95:79:09:70:f3:d3:a3:d6:
96:4b:25:0f:ee:ac:80:5f:61:f4:f8:2a:c2:f3:91:4b:e1:4a:
24:0b:26:4c:93:a5:ae:9d:34:34:fa:81:4a:32:38:6f:f1:b9:
6f:58:b5:93:f2:a3:15:cc:44:96:f6:3d:4e:3f:14:bc:06:85:
18:4d:fb:46:a9:3a:c5:bd:31:7b:b5:f8:08:c9:1f:db:35:ae:
eb:3e:b2:99:7e:7b:d4:23:3d:55:72:89:29:2d:da:45:16:22:
5c:e6:dc:6f:e4:50:03:2d:3f:e1:30:84:17:30:d7:b4:8d:a6:
f4:51:f4:3a:5e:f3:7c:57:1a:88:b4:de:23:3a:38:ea:fd:87:
5a:45:27:a1:e7:16:14:bd:70:69:bd:9c:64:8d:0f:e7:d0:73:
47:0b:97:02:d5:17:90:80:1e:3f:37:1f:11:c3:14:21:c9:8e:
7e:e2:d6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:40:42 2026 by rpki-client