Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
File: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft (raw, json)
Hash identifier: 8EL+qkcdD34+VMkJJhTmSDrPuVd+w8npKSkS4Qw0UU0=
Subject key identifier: 46:05:AA:61:AC:A2:6A:80:E9:95:9B:81:C3:95:77:EF:DF:14:D1:6A
Authority key identifier: 19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C
Certificate issuer: /CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
Certificate serial: 019D37C0FD53B7913CF0CF2D2BA36E7C2F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
Manifest number: 0423
Signing time: Sun 29 Mar 2026 04:01:27 +0000
Manifest this update: Sun 29 Mar 2026 04:01:27 +0000
Manifest next update: Mon 30 Mar 2026 04:01:27 +0000
Files and hashes: 1: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl (hash: ckcjANZHt6tPGFA+IWFJaicqjwTGbudzCWbjtmMe7Pg=)
2: aKJTM1Uf5WiFwk0xaQDn_EEx6LY.roa (hash: Bk0oWK0Lkt5p+4sdJT9WxyXxSp/0EFpvdzicJ3h6H0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:fd:53:b7:91:3c:f0:cf:2d:2b:a3:6e:7c:2f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
Validity
Not Before: Mar 29 04:01:27 2026 GMT
Not After : Mar 30 04:01:27 2026 GMT
Subject: CN=4605aa61aca26a80e9959b81c39577efdf14d16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:47:09:e0:33:cc:d5:66:59:88:e7:45:d7:
43:75:65:ed:c4:d3:d0:a3:b1:c2:3f:06:d8:f0:c5:
12:93:fe:38:94:46:e2:2c:72:32:78:8e:fe:88:39:
72:a4:ec:92:be:ff:20:fd:f6:62:f4:b5:20:aa:21:
b4:d3:a2:f4:18:43:b3:c3:44:eb:ba:6c:cf:c0:f2:
a9:47:83:c3:9b:67:59:d1:89:b8:88:4d:69:ef:00:
32:d7:76:65:9f:ca:b3:2c:e0:fd:d3:53:b1:96:76:
c0:b8:db:5e:b8:2f:34:54:ba:c7:40:fa:d7:2f:b5:
0c:83:b6:58:49:ec:56:61:b1:5a:cd:2f:f0:ba:5e:
6b:0b:29:a6:ee:d0:f3:8d:80:20:4d:99:af:03:31:
2e:14:eb:d8:73:d1:b8:bf:5b:64:53:a2:8f:58:c9:
02:4a:54:37:75:6c:f5:48:f3:02:f1:db:54:92:52:
53:60:57:fa:4f:03:b1:8d:3d:11:f7:e5:dc:ee:ec:
c9:0a:6c:1f:c3:aa:02:f8:1a:94:d8:7d:c1:03:c8:
32:80:40:8e:1c:00:40:da:44:e3:c0:52:48:53:49:
94:8f:85:75:72:9c:87:63:3b:96:94:44:9b:0a:2f:
21:27:98:6f:cb:1a:b2:ac:d3:07:21:76:70:74:02:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:05:AA:61:AC:A2:6A:80:E9:95:9B:81:C3:95:77:EF:DF:14:D1:6A
X509v3 Authority Key Identifier:
keyid:19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6e:96:ff:da:42:87:01:01:80:b4:42:d9:81:e2:8a:2d:6b:
c6:7b:52:62:dd:c6:5f:b2:5b:99:2c:e2:0f:a8:1d:b6:f1:ef:
98:5b:3d:2c:44:35:99:63:90:4b:99:74:fe:19:8e:c6:0d:5b:
62:9d:eb:9e:92:69:62:7c:c5:a3:15:ed:d4:11:24:75:0b:4b:
01:f2:64:88:2f:09:82:71:64:ae:e1:31:83:a5:0c:ce:27:cf:
09:15:5e:dc:ee:32:7d:6b:6b:81:fe:58:41:e0:c9:d1:b7:95:
51:8d:29:1c:c2:d3:ca:26:e1:dd:12:9b:1a:2c:91:82:b6:80:
02:85:a5:ae:33:94:1f:1d:05:a0:89:41:35:fe:3e:2c:8f:09:
d3:76:02:03:ed:a4:f0:cf:d7:9f:39:86:f1:f6:7e:ae:d2:57:
4f:d6:94:2c:6f:97:d4:3e:ed:e1:3f:42:55:f5:0f:09:1b:da:
12:89:82:cc:9c:bd:eb:91:de:74:0f:94:d2:cc:de:a8:14:f8:
7a:7b:65:de:70:ca:8f:84:ab:73:54:99:31:3d:a2:08:ea:c7:
ca:38:16:3b:80:ab:50:39:6b:3a:c8:21:d1:91:b7:38:6c:5d:
83:7a:dd:a7:d6:0b:7c:62:37:6a:3a:62:52:6d:3d:7f:2f:6d:
1e:ea:fe:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:39 2026 by rpki-client