Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
File: GWN5dpxXylsmosYfpdmsxSe-p4k.mft (raw, json)
Hash identifier: Mif9l6M6xZXrjpu57LDTVU8wqvw5K30xo4iJMFRrcd4=
Subject key identifier: C0:E1:EB:FF:44:D6:40:E9:F5:27:95:79:9F:16:C9:05:4E:9D:4F:65
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Certificate issuer: /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial: 019FA89A664541272E2718BF84C90E888F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 12:01:58 +0000
Manifest this update: Tue 28 Jul 2026 12:01:58 +0000
Manifest next update: Wed 29 Jul 2026 12:01:58 +0000
Files and hashes: 1: 3W77edW628jQxwd19lvVjtYuG1o.roa (hash: eeBqOwHI9v74XHIGFTRR/UVJPjywNaCr9KLzr8nBNf8=)
2: GWN5dpxXylsmosYfpdmsxSe-p4k.crl (hash: u4U/DqFWeePJUt84mdLHEtH1sh1buyrM2hHuHoF+QgA=)
3: bg16vmmigVbvm4o3Mdxq8cFNNQU.roa (hash: zFOo31LB1MSXG3aNBtx7FcoSwNGxRX0bLqGZpw+CvMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:66:45:41:27:2e:27:18:bf:84:c9:0e:88:8f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Validity
Not Before: Jul 28 12:01:58 2026 GMT
Not After : Jul 29 12:01:58 2026 GMT
Subject: CN=c0e1ebff44d640e9f52795799f16c9054e9d4f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:18:a1:96:5e:0b:b3:d2:af:de:5d:77:8c:2c:
9c:35:b8:18:8b:b0:81:6d:a9:f1:b5:31:49:3a:56:
32:58:ba:e4:69:f2:13:78:ea:10:61:06:36:89:7d:
4d:b5:54:a4:dc:34:16:8a:71:e9:9b:20:90:42:ec:
27:72:98:28:71:c4:ef:d9:76:0e:67:da:1e:d8:23:
47:d7:b9:9e:eb:d6:4c:27:11:c9:1a:32:a3:ed:00:
ce:9d:ee:e6:d4:b2:f8:5c:2a:be:35:20:fc:2a:ed:
07:76:c3:b0:0f:85:e4:85:40:70:1a:5e:cf:e1:52:
d2:4e:13:72:10:d9:d5:84:b4:58:b7:d8:8f:44:e9:
61:8b:d5:0b:fe:f2:70:a6:a7:c9:a2:57:04:a6:23:
a7:23:98:bc:36:cf:ed:66:4c:1f:08:99:a0:71:8e:
e3:6c:c1:8e:e9:9d:3e:f8:cc:33:5a:2f:67:64:95:
02:f4:d6:8b:37:07:32:34:f4:0d:df:88:fb:81:f4:
84:68:7d:70:91:7a:ab:9f:c6:98:40:92:9b:65:2c:
53:31:dc:bc:3a:be:53:2d:4b:ad:22:e8:c8:c5:19:
20:56:53:13:90:cb:3f:f0:8f:6d:d1:73:e0:a2:64:
1f:dd:40:1e:37:8d:83:ad:1d:75:46:14:9f:8f:ac:
66:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E1:EB:FF:44:D6:40:E9:F5:27:95:79:9F:16:C9:05:4E:9D:4F:65
X509v3 Authority Key Identifier:
keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d8:50:c0:3c:17:eb:73:f2:98:27:56:39:7c:5e:91:49:1f:
7b:77:b8:9d:9d:e0:20:92:f7:94:43:a8:a8:fa:ac:32:76:4b:
4b:da:e0:58:95:58:25:a0:af:8c:3a:91:09:4b:94:00:00:19:
c6:8d:18:c0:8a:9e:e8:14:0f:55:90:e4:bc:d6:ef:59:ba:b3:
ed:37:3c:a6:88:36:28:2c:25:57:bd:69:b2:78:8d:bb:47:7e:
7c:63:e2:a9:05:f3:5c:a8:59:24:8d:a8:8c:66:44:91:03:a5:
87:56:73:2a:73:91:74:e5:5d:71:d9:17:cd:dd:b8:8b:4c:ba:
d3:c7:c5:61:e0:5a:9f:a4:a8:d8:5b:dd:8b:70:ab:bb:f4:d9:
d0:c6:13:2a:3f:c6:20:7d:ac:f9:91:dc:18:e7:05:bc:67:07:
a5:2c:68:40:23:16:d8:96:9c:f0:66:47:5c:ff:3c:e9:8a:c3:
7f:50:ab:b8:b9:ab:cb:79:e7:ef:91:4e:a2:e5:d7:5c:aa:f8:
19:49:8b:fc:ae:72:e1:7d:21:55:61:3f:4a:f5:af:7f:83:4b:
77:a4:93:68:66:7b:17:3c:87:59:22:3f:9d:1f:fc:fa:2b:1f:
6a:c7:e1:24:d6:e4:03:7c:ff:28:ee:4b:40:4a:27:a8:b1:9c:
d2:58:bc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:23 2026 by rpki-client