Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
File: gwn4FzfW8X58GtWISa_3HFAGTwQ.mft (raw, json)
Hash identifier: mHCBMtPoQ1ecieryZvN2j4jt/srF965u2DSIpKpFHAU=
Subject key identifier: 31:3D:88:9F:04:80:C5:36:E0:0B:C0:6F:7B:20:D3:2C:32:BE:57:2C
Authority key identifier: 83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
Certificate issuer: /CN=8309f81737d6f17e7c1ad58849aff71c50064f04
Certificate serial: 019D3788FDBCC2B9AFB4E0DF3D113A2F6466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
Manifest number: 1676
Signing time: Sun 29 Mar 2026 03:00:17 +0000
Manifest this update: Sun 29 Mar 2026 03:00:17 +0000
Manifest next update: Mon 30 Mar 2026 03:00:17 +0000
Files and hashes: 1: b5oUI_QaX4CIrD9gVfpSglG-l0g.roa (hash: yb9qoXzX3+CuYySvgkHy2fr0k4HAjW35z3hNaIhuEm8=)
2: gwn4FzfW8X58GtWISa_3HFAGTwQ.crl (hash: nSbWgcaZrk/xH4TX3lqU9OHorbiBkSE87KOkFB5B9xI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:88:fd:bc:c2:b9:af:b4:e0:df:3d:11:3a:2f:64:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8309f81737d6f17e7c1ad58849aff71c50064f04
Validity
Not Before: Mar 29 03:00:17 2026 GMT
Not After : Mar 30 03:00:17 2026 GMT
Subject: CN=313d889f0480c536e00bc06f7b20d32c32be572c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:a0:ec:f8:35:f6:46:42:64:54:e3:6a:bb:
42:97:21:dc:85:f2:4c:34:84:f9:3f:aa:1e:51:74:
cb:92:24:34:ef:3a:35:42:f6:d9:06:2c:83:c9:f9:
2e:0f:68:99:b3:59:30:43:e5:2b:fb:da:cc:fb:21:
ff:b0:dc:23:29:c0:9d:ff:56:e8:08:a2:3b:82:e1:
8f:35:f5:1a:b5:dd:88:1b:db:09:1a:a4:ac:69:1c:
f7:8b:f5:e9:79:ed:c1:56:88:2e:af:e6:c8:15:41:
df:c1:4d:c4:ee:e0:c5:73:e5:77:83:48:af:38:a2:
e3:05:6d:e9:3e:76:11:2b:af:23:f8:32:66:bf:c7:
91:71:75:cf:0a:57:c2:6e:46:d1:3c:13:a4:31:53:
dd:5a:e1:ac:cb:ed:5c:9f:d1:c4:f3:ba:ac:18:b2:
fd:66:a5:0b:89:ea:38:df:6a:34:6d:52:b7:a0:71:
9a:05:ed:f6:f0:85:35:66:ba:e7:a9:20:73:cb:ca:
bd:1b:87:3f:8e:10:95:55:85:76:6c:29:ce:0f:b3:
e8:44:ec:12:91:be:df:b0:43:ba:6b:46:c9:a5:e2:
cb:a0:c7:ed:fe:ce:8b:f5:d9:73:10:06:7e:74:04:
e9:83:f1:1d:e3:52:90:44:2e:29:4c:3a:b3:2c:a0:
c8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3D:88:9F:04:80:C5:36:E0:0B:C0:6F:7B:20:D3:2C:32:BE:57:2C
X509v3 Authority Key Identifier:
keyid:83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0c:ad:f2:23:b9:45:db:77:8f:49:a2:1f:be:e8:a7:a5:02:
74:ca:78:40:27:90:2b:f2:5b:68:e4:2a:a6:9d:8c:3d:e2:10:
f6:28:71:30:57:59:07:1f:0d:cd:40:08:e5:bb:50:75:a3:f1:
e4:3c:db:5f:24:a6:a7:0b:cd:31:24:30:98:db:c3:3c:d6:8a:
88:24:1d:8a:91:ee:7d:7e:1e:6f:04:21:cc:d7:4a:49:32:32:
3a:d8:63:99:ff:d2:be:82:4c:d5:9f:5e:06:1a:2d:95:1c:b2:
2d:d2:68:96:37:c4:0d:2b:57:ab:78:4f:b7:e3:02:3f:ba:ca:
77:55:98:8f:ed:91:f7:23:f3:0d:2e:3a:79:48:f7:2d:53:db:
b9:24:8a:fc:cd:5b:aa:5a:58:4c:5f:97:cd:2f:e9:56:31:0b:
58:6d:72:af:76:10:a9:d3:96:f7:ec:a9:99:0a:fe:b9:fa:04:
cf:78:8d:4b:47:c2:90:95:19:e1:a6:b0:d7:97:1f:fc:d2:6a:
7f:37:aa:06:d5:59:2c:ff:20:f1:5d:d3:b3:e6:09:02:4a:50:
d9:7a:e5:33:7c:f4:4d:29:b9:57:58:96:3e:68:1f:e9:8a:a2:
d3:37:a8:70:26:e8:63:a7:34:cd:df:20:ca:a2:27:24:1b:44:
56:8d:be:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:20 2026 by rpki-client