Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
File: Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft (raw, json)
Hash identifier: jLr5BiGZicH+2zCfPjeNrHITcdivDwysytZ2Iu9QcQI=
Subject key identifier: 2D:54:27:CC:71:2E:15:A3:4D:3F:3C:99:A8:45:44:D4:90:63:8C:38
Authority key identifier: 1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4
Certificate issuer: /CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
Certificate serial: 019FA7BD977901542BDCFF4F5C45B58BE262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
Manifest number: 19AC
Signing time: Tue 28 Jul 2026 08:00:47 +0000
Manifest this update: Tue 28 Jul 2026 08:00:47 +0000
Manifest next update: Wed 29 Jul 2026 08:00:47 +0000
Files and hashes: 1: 71owHX4S2u2lF3E_BCb4Gt1KJaM.roa (hash: C8aJgnSvLd5vqx93bG6/27ca+qWBm6BMec2VKfAW2bA=)
2: Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl (hash: MFveQdkLV8yUNsqaFCgqNUhm2KnyGWCHW1jMhUs3d04=)
3: dfesipwxH539hUdXKKyu2kqJ8wg.asa (hash: 7Uj9gk3YaMecDLkJ2OHkoQ1Jy1gH9VcQpYCUftt6ZVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:97:79:01:54:2b:dc:ff:4f:5c:45:b5:8b:e2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
Validity
Not Before: Jul 28 08:00:47 2026 GMT
Not After : Jul 29 08:00:47 2026 GMT
Subject: CN=2d5427cc712e15a34d3f3c99a84544d490638c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:e2:f9:43:f0:4b:36:fd:d1:e0:79:14:b1:
bc:7d:0d:e3:f6:de:c2:02:ca:f3:1f:be:98:32:3a:
b3:7f:b1:15:7c:f6:7c:e6:93:bb:12:f4:49:f8:32:
ef:77:81:a0:b9:cf:ec:af:a1:98:5a:21:aa:ee:f3:
db:41:98:3f:91:d5:ab:44:fb:c9:83:2d:1d:12:09:
5a:d8:68:2c:22:71:12:83:c0:47:8c:d9:c8:00:cb:
ad:a5:d6:05:9d:11:e4:7f:5b:bb:10:e8:ac:6a:5f:
9f:c3:35:f4:16:c1:91:d6:58:b7:e4:59:6f:31:ec:
02:23:2c:cc:80:11:b5:94:9e:02:e7:3e:4d:24:08:
6b:fe:7d:f3:ed:c8:44:69:6f:33:e5:33:0f:5a:34:
9f:2e:6e:fc:1d:2a:ac:28:e3:7d:9e:3f:19:3a:86:
b7:fe:3b:90:00:cb:1d:2e:4f:01:1c:c9:c5:77:38:
17:01:25:6c:57:63:24:82:0a:cb:53:3a:b7:f2:ed:
30:c5:6f:03:4c:d4:4e:44:25:b7:62:bb:0e:b0:ca:
8e:c5:99:ad:8b:89:b0:8f:db:09:48:f9:95:79:51:
b7:45:4b:92:fd:76:90:18:3e:b5:74:a8:e7:f4:b9:
41:32:70:2c:ab:16:71:0e:ee:c1:34:1a:a6:79:d7:
eb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:54:27:CC:71:2E:15:A3:4D:3F:3C:99:A8:45:44:D4:90:63:8C:38
X509v3 Authority Key Identifier:
keyid:1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c5:c4:31:8f:51:8a:98:2f:ca:75:56:20:8d:2e:fd:8a:ac:
74:7c:6a:d3:11:e3:bd:c1:af:00:d9:18:11:13:7d:f1:c5:72:
1a:41:81:a7:02:3d:9d:d3:cf:70:21:bd:03:12:d2:d7:de:65:
19:51:dd:7b:04:ee:44:0d:3f:48:f0:9c:3a:ae:6f:38:ff:f0:
1e:f3:c2:cb:5e:aa:fb:1c:e1:64:cd:1b:4e:af:95:47:ce:47:
b6:2d:bc:23:76:8c:db:1d:0e:70:04:68:d8:aa:20:d3:ee:7d:
1a:0e:94:49:f2:d1:0c:e3:b7:98:31:c9:0a:a5:fb:bf:6d:95:
f1:12:eb:b6:a0:24:be:75:7a:64:89:b0:53:ae:bb:99:bc:ab:
db:fb:e6:b8:41:20:4d:a1:fe:23:a8:d9:c5:e6:9c:95:a6:97:
b9:d6:b2:6f:58:f8:ef:9b:dc:fd:50:a6:44:5e:31:e0:c6:33:
f3:f6:2f:b0:05:b4:e6:05:92:b9:f5:14:b3:7f:ad:d3:61:cc:
e1:12:92:2b:75:2a:66:ec:3f:55:c0:5a:ff:a2:e6:3e:30:85:
09:0c:11:76:34:0f:2f:f4:d0:6d:7e:41:b4:ad:cb:4e:87:05:
50:f1:1e:6d:bf:7c:83:db:39:2f:46:54:8d:a4:94:cb:0e:35:
ca:d1:4c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:10:36 2026 by rpki-client