Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
File: GWRkVJwHkby2YRd_l67c851Uw5U.mft (raw, json)
Hash identifier: nhoiysutsbPEtaNnquCmgEf219Epa4vvCALkHTEReBA=
Subject key identifier: 36:BA:36:33:7E:23:29:C5:3A:AE:10:EA:1C:A5:13:87:F1:6D:B5:F9
Authority key identifier: 19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95
Certificate issuer: /CN=196464549c0791bcb661177f97aedcf39d54c395
Certificate serial: 019D37C0BD5BEA94338481ED70516017B13F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 04:01:11 +0000
Manifest this update: Sun 29 Mar 2026 04:01:11 +0000
Manifest next update: Mon 30 Mar 2026 04:01:11 +0000
Files and hashes: 1: GWRkVJwHkby2YRd_l67c851Uw5U.crl (hash: U4gPguUS3pHhH8FBygRqaI1wA/Eg+wkmiaOupC+K5UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:bd:5b:ea:94:33:84:81:ed:70:51:60:17:b1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196464549c0791bcb661177f97aedcf39d54c395
Validity
Not Before: Mar 29 04:01:11 2026 GMT
Not After : Mar 30 04:01:11 2026 GMT
Subject: CN=36ba36337e2329c53aae10ea1ca51387f16db5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ce:da:e9:b8:44:73:cb:86:19:36:25:9c:c1:
05:cb:d1:06:fb:9e:d1:22:56:0d:12:cd:ac:7e:82:
55:ad:ca:46:77:31:85:f9:ab:c0:ca:38:56:62:00:
f3:5f:de:59:fc:06:0c:10:2e:83:f7:3f:63:88:57:
29:e8:ba:ad:46:fe:7f:41:49:12:86:2a:be:9b:ba:
73:b5:77:27:86:70:cf:71:ad:71:c1:11:a7:65:06:
c9:cd:b8:91:f7:43:06:15:99:95:75:8e:b9:52:7c:
de:1d:dc:89:44:45:26:74:89:2e:0e:9c:23:a3:6b:
ef:02:e9:09:bd:c3:d0:17:80:d9:d4:f9:32:58:5f:
05:6a:43:96:9d:65:00:fe:5e:0c:20:ae:26:ee:b9:
b4:55:1b:14:e5:d9:bc:c0:60:79:1e:cc:b4:59:5e:
fc:b5:3a:96:2c:1b:79:81:89:70:53:1e:79:29:74:
7e:d5:07:6e:7d:55:fd:1a:9a:30:2d:39:81:76:61:
71:a1:fa:72:89:e1:5d:cc:75:0b:f3:c2:8e:4a:b7:
c5:07:50:ef:a0:dd:bd:7c:b7:c2:4d:4f:ca:1c:04:
42:a7:94:30:69:cd:53:5f:a3:13:56:04:29:a2:2e:
52:2c:6b:0d:b4:16:9c:3e:a8:5e:49:f8:06:dd:41:
77:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BA:36:33:7E:23:29:C5:3A:AE:10:EA:1C:A5:13:87:F1:6D:B5:F9
X509v3 Authority Key Identifier:
keyid:19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c6:4b:a5:d8:5b:08:f1:e6:85:87:1b:f5:3e:3e:ac:aa:4f:
fa:33:b0:73:a3:62:78:84:5c:ad:80:38:59:92:3d:9d:93:36:
77:fe:e0:17:ea:99:73:5f:b3:ec:6a:29:fe:72:c2:a1:76:ef:
90:be:b8:67:79:45:07:ec:e2:e2:53:43:5c:a2:fd:ba:7d:55:
00:29:0e:72:9c:78:22:b2:92:2b:dc:5d:f0:41:95:df:77:12:
af:1b:ed:df:0e:b7:d9:46:bb:ca:ea:ae:b4:7d:d5:02:f4:33:
27:95:cf:d8:2e:1f:08:42:a8:ba:2d:ac:5c:2e:80:d1:98:91:
2b:17:b2:c4:4c:41:9b:27:d8:be:dd:46:be:16:7b:e0:d7:bb:
cf:17:08:f3:6e:0d:03:9f:11:c1:4f:e6:dc:53:8a:ef:1e:f6:
bc:65:de:bc:94:be:57:02:3b:20:da:d7:ec:20:fb:5a:2a:6a:
42:da:1a:aa:f4:e7:47:fe:df:eb:43:d7:cc:a5:d9:ee:6b:a6:
08:79:c8:cc:65:9d:9d:c9:64:a5:7f:49:ef:5e:c3:32:ca:44:
e8:35:89:ab:0a:6e:74:1b:da:d4:c2:12:af:11:a2:2a:50:14:
67:46:e3:ef:8c:46:a7:fd:7b:9f:65:7e:32:79:e0:f7:e4:0f:
7e:c4:3e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:03 2026 by rpki-client