Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
File: GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft (raw, json)
Hash identifier: KNWMw0OCSVQngxETbpCsZVikcrYJ3iAU4P4keSZBHz4=
Subject key identifier: 79:3F:7C:58:BD:03:4F:D0:96:6C:DA:80:FC:49:97:14:E0:FF:AF:68
Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
Certificate issuer: /CN=1b098412c984b89be38011a72a3c471975fc47a2
Certificate serial: 019D38D3963BCBB65D2936F02F67BFB02C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
Manifest number: 0A8D
Signing time: Sun 29 Mar 2026 09:01:23 +0000
Manifest this update: Sun 29 Mar 2026 09:01:23 +0000
Manifest next update: Mon 30 Mar 2026 09:01:23 +0000
Files and hashes: 1: GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl (hash: 8IOmi3WygMfH9+0ZqDSH7Rs56DqtcmAX5v8JHwMilVY=)
2: JZaH_jpSvzp_LB_dT1bUbnV7u6Y.roa (hash: PBsKlZt/RhXzdnMDW9mk8dmSBPIc5dC6MxwZF8UDWyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:96:3b:cb:b6:5d:29:36:f0:2f:67:bf:b0:2c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2
Validity
Not Before: Mar 29 09:01:23 2026 GMT
Not After : Mar 30 09:01:23 2026 GMT
Subject: CN=793f7c58bd034fd0966cda80fc499714e0ffaf68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:1c:6f:f6:0f:fe:b2:43:eb:d7:63:53:f9:
f2:e7:28:dd:b4:dc:5c:7b:3c:86:9e:f5:65:c3:06:
ba:e5:cc:e7:fc:cf:a6:92:4f:db:94:11:1d:80:fc:
eb:6c:c6:e0:af:e2:d5:c7:34:2e:84:ea:63:9a:60:
a9:e2:1f:1d:7c:07:4b:38:6f:8f:13:b1:36:4d:61:
ae:d6:57:00:2c:a5:c1:f4:9c:c0:01:d2:eb:89:64:
0f:ab:7d:21:f4:38:46:c7:a5:fc:0c:d1:b3:e6:b4:
a0:70:07:35:27:7a:ca:7a:17:b8:52:8e:f8:86:ec:
21:8e:1c:9d:9f:f3:8e:8b:1e:b7:44:fe:04:01:76:
6c:03:75:0e:76:a7:62:e6:76:a9:bc:5d:29:da:f0:
f6:41:5c:0a:a0:00:ef:93:9b:4f:b0:e2:0a:8b:7b:
82:4c:8a:f2:96:1b:bf:62:88:8c:78:db:22:fc:87:
62:35:f4:dd:b6:3b:ac:e0:af:21:54:0b:16:9f:1b:
13:ef:de:e7:ca:cd:22:a0:28:a2:5e:4b:58:52:40:
86:c4:b6:6d:88:28:c0:56:69:2f:b7:0f:42:a6:79:
e6:ca:2b:4b:82:eb:02:f4:59:1b:a5:0e:06:84:72:
d4:b0:c1:75:95:50:6b:cf:9b:8a:8e:f7:c7:f3:1b:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3F:7C:58:BD:03:4F:D0:96:6C:DA:80:FC:49:97:14:E0:FF:AF:68
X509v3 Authority Key Identifier:
keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:42:12:b2:c4:52:55:f6:88:2f:37:11:65:56:a3:09:98:a4:
f7:d7:bf:e9:83:53:23:da:d1:6c:69:7e:31:0c:4b:31:08:7e:
f6:a5:ec:0a:72:d4:bc:ee:8e:81:68:14:ad:60:b8:72:3e:03:
2f:89:d6:a0:b5:bd:d4:2a:5d:38:eb:8f:c6:f9:b5:7e:99:17:
5c:41:f9:b7:85:a6:8c:28:db:b0:0e:44:b5:ad:d2:53:43:be:
5e:ad:df:40:4b:ce:28:e5:73:d7:aa:30:a4:64:57:9e:01:b7:
15:77:16:e7:40:f3:85:15:2b:0f:8e:9d:a2:9a:60:2e:f9:d5:
5e:0e:5a:c3:69:97:e0:9f:be:61:56:cc:61:46:8a:75:f2:53:
8b:cc:9e:71:1d:fa:9c:a0:5a:67:13:64:74:7b:b7:73:62:e7:
1a:ad:66:c5:e1:e0:54:b5:4c:bf:30:60:e6:fb:97:c6:0f:80:
9a:2f:6c:ce:e9:57:34:75:dc:25:2e:13:a1:ca:6c:e2:e2:d4:
5d:1c:35:c7:fe:0c:28:24:b8:98:60:99:e9:53:29:1d:d0:78:
dd:75:e4:17:79:6d:97:a8:73:f5:9a:24:fa:1f:19:1d:a7:f4:
f4:0c:7a:7b:2b:96:e0:a7:f7:a3:52:7a:40:ca:7f:3a:38:e2:
89:94:e0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:49 2026 by rpki-client