Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
File: GtwAk8WviUz1ILWTbjCyFQkN6fg.mft (raw, json)
Hash identifier: 6ifdvEEVxRbHVseM2ODgm6wZKQ4B82wiLlP6sl3w1Zo=
Subject key identifier: 6D:5E:C9:D4:47:94:E8:F9:2E:91:51:0D:C5:CE:EA:49:A2:39:25:E1
Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
Certificate issuer: /CN=1adc0093c5af894cf520b5936e30b215090de9f8
Certificate serial: 019DD0198CACB230998C32FCCE028F1677AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
Manifest number: 10A3
Signing time: Mon 27 Apr 2026 18:00:28 +0000
Manifest this update: Mon 27 Apr 2026 18:00:28 +0000
Manifest next update: Tue 28 Apr 2026 18:00:28 +0000
Files and hashes: 1: 22DYdmOvCLM948EoyfkUAxlACZo.roa (hash: kciKnNjBgHwlkB4sn576VFqmz6xPQ5AioU9khsx436M=)
2: GtwAk8WviUz1ILWTbjCyFQkN6fg.crl (hash: QCyYB6XQWFEb7zzyQjClQ3v6Uc/KW/0WSWajkoaFu8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:8c:ac:b2:30:99:8c:32:fc:ce:02:8f:16:77:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8
Validity
Not Before: Apr 27 18:00:28 2026 GMT
Not After : Apr 28 18:00:28 2026 GMT
Subject: CN=6d5ec9d44794e8f92e91510dc5ceea49a23925e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:19:41:0d:28:42:a4:0a:fc:a7:7f:68:06:
08:f9:e0:78:2b:22:bd:44:fd:8a:3c:9c:64:05:58:
eb:9c:79:f3:1a:2d:be:3d:0b:bd:a4:a1:85:c9:1d:
ed:8a:35:7f:a7:1f:20:e9:07:a0:07:d5:f9:0a:54:
09:f2:ca:39:9b:69:a3:f2:29:f5:88:6c:66:18:13:
a1:bb:8a:a9:71:ed:11:77:af:cb:08:45:3a:2d:d6:
fc:8d:8e:d0:13:8c:b2:ff:f3:78:4d:ed:f8:4a:d7:
26:32:60:3a:cd:34:77:fb:be:95:59:33:7c:50:35:
83:79:58:30:f6:f8:7f:d5:af:57:10:a6:11:65:ab:
f5:3f:e5:ae:2f:9d:11:68:06:9c:f4:6d:3a:5c:1d:
ea:3b:62:bd:4e:b1:4f:83:fd:cd:bb:40:22:6b:1a:
30:a4:06:63:72:66:43:9f:a1:fb:0d:44:d1:2a:a3:
ea:22:a8:0d:9a:f0:e5:38:c0:83:6b:3b:d9:49:76:
2e:78:69:cf:56:82:e9:c0:89:c0:1f:aa:e7:19:18:
be:c6:8e:ac:1c:53:52:ce:b7:cf:18:a6:88:51:9b:
cc:0f:82:30:ef:67:32:c1:bd:4a:f9:2a:fe:e8:e8:
1e:13:fd:b4:41:05:a4:a6:b7:63:24:7e:00:32:d5:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5E:C9:D4:47:94:E8:F9:2E:91:51:0D:C5:CE:EA:49:A2:39:25:E1
X509v3 Authority Key Identifier:
keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:03:34:ba:60:a9:a3:b8:30:c1:47:6b:1d:6b:9d:22:57:1f:
a7:98:98:4e:54:20:1a:ff:63:8a:14:1e:cd:bb:96:b6:43:a5:
d8:0e:ae:b6:45:d4:6f:57:f1:d3:45:d0:84:b9:dc:91:37:a7:
de:ef:9c:03:d0:30:cc:8a:02:89:44:76:a2:f6:24:9c:19:f2:
26:45:ac:92:33:c5:29:9e:6e:fb:40:f3:a5:21:71:84:e1:70:
48:97:92:2f:4b:4b:75:ea:38:ed:49:8d:3b:1d:29:cf:68:2f:
d7:e5:26:ac:2d:b4:76:ea:e6:9c:51:3e:bb:4a:d9:07:db:e9:
f1:46:7b:91:33:4b:8f:d2:a5:e1:bc:93:d5:c7:9c:c1:5f:d1:
ce:34:a1:81:98:d3:5a:07:c7:d8:09:24:23:a8:76:cf:b0:6c:
11:cd:ec:21:e2:38:e9:86:42:78:d2:e2:f5:d4:09:23:ad:98:
4d:dc:41:11:52:54:52:da:42:63:af:b8:df:db:d4:11:b2:7c:
0e:07:6f:56:5c:3f:05:04:fe:cf:7f:ab:b1:d4:97:b8:32:58:
0b:93:3e:37:40:fa:8c:88:0f:90:48:9c:b3:b7:b6:2f:31:7c:
9e:ac:fb:4d:aa:0d:5e:03:78:ec:de:29:c1:e5:1a:35:81:11:
a6:96:97:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 02:30:13 2026 by rpki-client