
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
File: GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft (raw, json)
Hash identifier: 88TJvX8J6dqNYxCVvFDngzqUHAfvPChVc4/oh/6HEdU=
Subject key identifier: 61:56:AD:37:50:1B:21:50:CD:EB:61:D5:A7:3D:6B:2A:D5:97:94:50
Authority key identifier: 19:61:0D:63:8E:2A:2F:95:A3:D9:0E:4C:FF:99:59:A8:59:FA:C4:F0
Certificate issuer: /CN=19610d638e2a2f95a3d90e4cff9959a859fac4f0
Certificate serial: 019CAAC6C45A2743902770EF5C1563FFFA5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
Manifest number: 046D
Signing time: Sun 01 Mar 2026 19:01:18 +0000
Manifest this update: Sun 01 Mar 2026 19:01:18 +0000
Manifest next update: Mon 02 Mar 2026 19:01:18 +0000
Files and hashes: 1: 6p0Coa8WgXiwwxdUvsd1X8Ybt58.roa (hash: 3Cayb9jMUgKGM8WDjcto+qSMUyrZE7ZyZEp5pOroe+w=)
2: GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl (hash: CV5Vw8HSdWJ40TFQ0EY0VwO1Q0futSjyp8F8WMNIbnQ=)
3: oK0VVYEphg6ETjlrW3F7s3hDxow.roa (hash: ZNtLfeyZuVFrapejmFdoQucl+PbRvv+SSHdnCiT576U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:c4:5a:27:43:90:27:70:ef:5c:15:63:ff:fa:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19610d638e2a2f95a3d90e4cff9959a859fac4f0
Validity
Not Before: Mar 1 19:01:18 2026 GMT
Not After : Mar 2 19:01:18 2026 GMT
Subject: CN=6156ad37501b2150cdeb61d5a73d6b2ad5979450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:87:06:87:72:b1:f5:f3:1e:2f:5c:0d:42:
22:e6:c2:0a:57:ea:c7:16:cf:46:25:fe:d9:c1:a0:
e4:53:10:08:5d:f2:8e:01:35:ec:98:f0:17:46:d7:
cf:ea:7f:39:1a:61:9b:4f:e4:10:38:7c:dd:1e:03:
93:27:02:18:3e:4f:b8:e6:32:cb:d0:22:33:d2:0c:
32:cb:a1:55:d0:75:11:a5:3f:fa:3c:88:6f:93:32:
19:e2:8f:e4:8b:86:df:2a:d0:d7:73:36:45:36:6a:
16:58:39:8d:cd:1b:23:65:5e:f0:a8:81:be:3a:69:
63:84:8a:6d:f2:11:e3:ef:c5:ac:19:41:53:7c:28:
ef:1d:76:b8:f1:69:79:74:d9:62:e5:a8:e8:69:af:
5a:6b:39:1b:a6:07:e0:3b:78:04:37:ef:f8:d8:d8:
ec:84:b8:05:b3:55:92:dd:54:93:3b:aa:99:71:b8:
55:8f:7e:cd:c5:3a:5d:a2:eb:13:e4:ae:21:b4:2e:
8b:43:d8:66:e1:32:46:6e:31:ae:37:8a:b4:45:de:
a0:d1:70:44:38:4e:17:90:6f:05:3c:7a:fc:b1:db:
1f:49:bd:e5:fc:31:3a:06:0e:d6:91:69:9e:61:7c:
76:a0:c8:af:80:cf:4d:95:7e:fb:94:6c:5f:38:76:
0c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:56:AD:37:50:1B:21:50:CD:EB:61:D5:A7:3D:6B:2A:D5:97:94:50
X509v3 Authority Key Identifier:
keyid:19:61:0D:63:8E:2A:2F:95:A3:D9:0E:4C:FF:99:59:A8:59:FA:C4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:ca:fa:84:f1:0e:56:32:b6:38:a2:64:b7:72:36:b7:5d:a2:
94:77:3a:c3:d7:03:67:b2:32:9f:38:aa:a7:43:70:9f:db:32:
3b:52:39:bc:7d:cf:3f:fb:3d:eb:f3:93:e6:15:c0:0d:fb:59:
c1:9b:15:cb:e6:12:80:4b:20:84:9b:37:67:30:b7:29:10:49:
ed:b8:5c:cf:32:84:ff:44:0d:70:c7:8e:9c:dc:3e:9c:64:12:
4e:65:ea:aa:a6:29:a6:ec:41:37:50:b0:f3:46:18:da:07:44:
e6:8e:23:db:db:bf:15:1d:45:66:f6:7d:70:44:36:0a:9b:f0:
02:a0:b8:7b:99:7f:dc:47:4c:e6:aa:af:cf:0e:a3:2d:74:fa:
54:dc:47:7d:f4:80:e7:f5:20:db:8a:29:9d:c1:db:6e:17:9c:
8c:a2:49:b9:57:83:2d:30:db:d1:6d:d1:07:7f:a3:cc:c1:f2:
da:1b:b5:ad:99:36:70:6f:11:2d:af:52:28:09:96:e8:59:8f:
88:66:bb:71:13:8d:f2:57:a0:1b:1f:73:bf:23:a7:c4:48:4e:
b0:1d:80:9e:8d:d3:08:b0:2a:1b:ba:e7:a0:ef:ec:bc:66:a0:
65:ba:ff:f0:87:c0:c4:d2:51:e0:2f:90:e9:8b:ff:cc:b9:72:
91:1e:cf:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxsRaJ0OQJ3DvXBVj//peMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NjEwZDYzOGUyYTJmOTVhM2Q5MGU0Y2ZmOTk1OWE4NTlm
YWM0ZjAwHhcNMjYwMzAxMTkwMTE4WhcNMjYwMzAyMTkwMTE4WjAzMTEwLwYDVQQD
Eyg2MTU2YWQzNzUwMWIyMTUwY2RlYjYxZDVhNzNkNmIyYWQ1OTc5NDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhqHBodysfXzHi9cDUIi5sIKV+rH
Fs9GJf7ZwaDkUxAIXfKOATXsmPAXRtfP6n85GmGbT+QQOHzdHgOTJwIYPk+45jLL
0CIz0gwyy6FV0HURpT/6PIhvkzIZ4o/ki4bfKtDXczZFNmoWWDmNzRsjZV7wqIG+
OmljhIpt8hHj78WsGUFTfCjvHXa48Wl5dNli5ajoaa9aazkbpgfgO3gEN+/42Njs
hLgFs1WS3VSTO6qZcbhVj37NxTpdousT5K4htC6LQ9hm4TJGbjGuN4q0Rd6g0XBE
OE4XkG8FPHr8sdsfSb3l/DE6Bg7WkWmeYXx2oMivgM9NlX77lGxfOHYMCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFWrTdQGyFQzeth1ac9ayrVl5RQMB8GA1UdIwQY
MBaAFBlhDWOOKi+Vo9kOTP+ZWahZ+sTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1dFTlk0NHFMNVdqMlE1TV81bFpxRm42eFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hZTE4YWEtN2MxNS00Nzc1LThmYzUt
NzcyZGNkM2FmNWY2LzEvR1dFTlk0NHFMNVdqMlE1TV81bFpxRm42eFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9hZTE4YWEtN2MxNS00Nzc1LThmYzUtNzcyZGNkM2FmNWY2
LzEvR1dFTlk0NHFMNVdqMlE1TV81bFpxRm42eFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Mr6hPEO
VjK2OKJkt3I2t12ilHc6w9cDZ7Iynziqp0Nwn9syO1I5vH3PP/s96/OT5hXADftZ
wZsVy+YSgEsghJs3ZzC3KRBJ7bhczzKE/0QNcMeOnNw+nGQSTmXqqqYppuxBN1Cw
80YY2gdE5o4j29u/FR1FZvZ9cEQ2CpvwAqC4e5l/3EdM5qqvzw6jLXT6VNxHffSA
5/Ug24opncHbbhecjKJJuVeDLTDb0W3RB3+jzMHy2hu1rZk2cG8RLa9SKAmW6FmP
iGa7cRON8legGx9zvyOnxEhOsB2Ano3TCLAqG7rnoO/svGagZbr/8IfAxNJR4C+Q
6Yv/zLlykR7PXg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:03 2026 by rpki-client