Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
File: GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft (raw, json)
Hash identifier: srOY8NoSA277Wr2JRnE4gMr8gkwO51RP9RcbLZEcYOM=
Subject key identifier: C1:9F:22:36:25:EF:4C:0A:FC:23:FF:18:C7:E5:39:40:1B:75:1D:F8
Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
Certificate issuer: /CN=1b098412c984b89be38011a72a3c471975fc47a2
Certificate serial: 01A180067EADC87447ED0B9183E7FDC5F4C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
Manifest number: 0CC5
Signing time: Wed 28 Oct 2026 01:01:11 +0000
Manifest this update: Wed 28 Oct 2026 01:01:11 +0000
Manifest next update: Thu 29 Oct 2026 01:01:11 +0000
Files and hashes: 1: 3z35gDmHecdzIYEGmIKw6RYeXEA.roa (hash: j55RlWKFCQCXc2QwhpECXuc0I1p5c8gSybgzQ5rlp3w=)
2: GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl (hash: 6zq9kK3N8S5dXE2g3sKXDHJhzKuH0mPleuIpBFwrjwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:7e:ad:c8:74:47:ed:0b:91:83:e7:fd:c5:f4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2
Validity
Not Before: Oct 28 01:01:11 2026 GMT
Not After : Oct 29 01:01:11 2026 GMT
Subject: CN=c19f223625ef4c0afc23ff18c7e539401b751df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:8b:16:cb:cd:94:b5:38:53:f9:5b:e7:28:
c1:87:de:76:f5:2e:f8:32:fa:ef:43:98:f5:2d:f8:
da:0c:a9:7b:34:72:c3:94:3e:8e:79:cd:1d:f6:9f:
35:2c:bd:95:2f:18:31:d3:f4:6a:63:b1:72:a9:48:
aa:19:e9:c2:8f:79:64:c0:a1:08:d8:05:6a:e1:ca:
f7:6a:e7:40:72:57:b1:79:cc:7b:8d:d1:5f:2b:9b:
3c:8b:97:b6:0c:36:2a:fb:3b:de:aa:34:a1:2e:1b:
35:a9:8d:5c:3e:8a:c5:c3:9d:9e:10:9d:8b:37:b3:
6c:bf:ae:c3:34:65:0c:3b:87:dc:f0:e2:9c:c3:27:
af:d0:d0:3f:4c:90:f6:84:9c:e0:d4:a5:fe:18:ab:
2c:ef:84:c5:db:64:ef:03:13:ec:32:17:7e:43:2b:
e5:59:cf:d2:cb:3f:76:f6:55:b9:b9:b4:24:aa:be:
0b:bc:bf:a0:8d:2e:5c:d9:ad:11:ed:02:29:56:16:
3d:01:27:bc:95:ac:95:1e:6a:45:e1:9e:b5:cf:02:
1f:02:4c:48:38:ee:de:9b:d4:60:38:d1:a9:b9:db:
bb:44:6e:1c:3a:f4:ee:da:44:08:f9:60:a4:eb:93:
4f:3b:75:5a:6f:cf:d5:0b:08:38:ed:17:a7:76:2c:
3b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9F:22:36:25:EF:4C:0A:FC:23:FF:18:C7:E5:39:40:1B:75:1D:F8
X509v3 Authority Key Identifier:
keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:83:62:7d:69:77:ae:a5:32:8d:cb:3d:a6:a7:e2:5d:4a:c6:
da:77:1e:80:86:26:bf:36:95:e9:59:6f:bf:03:3c:d6:fb:80:
2b:55:00:d4:58:87:96:9b:0f:f0:ba:7f:20:23:4e:ae:18:b0:
a6:ae:f0:78:9b:09:6c:89:ec:3f:b1:d7:1e:18:e5:69:da:96:
09:1a:9b:98:7c:3b:b9:6b:64:21:1b:ed:ee:74:b1:40:8e:e9:
4d:84:c2:45:23:88:dc:31:7e:ae:ea:4b:a7:97:62:8a:9e:7d:
4e:79:b4:60:70:f6:c5:b1:58:6f:e9:fa:43:20:02:3d:6c:05:
8e:e4:3f:48:ff:af:ac:bb:a8:ab:72:e4:24:76:af:24:44:59:
37:4b:a5:85:0e:15:ac:2b:2b:d2:62:28:4b:a1:d6:07:ab:87:
fc:ea:2f:a7:9e:df:02:a5:7e:ef:bb:69:7a:5d:40:35:80:b6:
10:ad:05:ae:f6:fb:63:09:f1:a1:ed:c9:7d:12:1f:ac:5a:50:
36:68:97:3a:d7:73:96:e0:5b:f2:c5:02:47:d6:82:1e:cf:12:
3b:f6:97:64:27:4e:84:01:f0:3e:73:f9:46:53:90:7e:c1:db:
34:aa:f1:09:b1:a1:ed:03:b7:e6:8d:1e:00:30:fb:fa:b5:3a:
be:0f:3e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:48:50 2026 by rpki-client