Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
File: GWN5dpxXylsmosYfpdmsxSe-p4k.mft (raw, json)
Hash identifier: SI02bGHCNThlPaOHIilSql6zkTToWuxdQirqPxJmdiA=
Subject key identifier: 23:9E:DA:7C:2A:80:D9:91:0E:60:8A:71:9B:F7:19:1F:D6:D9:11:FB
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Certificate issuer: /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial: 01A15365798B1B01F15ADC16B6BBB6EE81AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
Manifest number: 1AB1
Signing time: Mon 19 Oct 2026 09:02:01 +0000
Manifest this update: Mon 19 Oct 2026 09:02:01 +0000
Manifest next update: Tue 20 Oct 2026 09:02:01 +0000
Files and hashes: 1: 3W77edW628jQxwd19lvVjtYuG1o.roa (hash: eeBqOwHI9v74XHIGFTRR/UVJPjywNaCr9KLzr8nBNf8=)
2: GWN5dpxXylsmosYfpdmsxSe-p4k.crl (hash: GSw5TutGzLcAekKI4a27MV5pb+WMhR0OCqhi5vrln0Q=)
3: bg16vmmigVbvm4o3Mdxq8cFNNQU.roa (hash: zFOo31LB1MSXG3aNBtx7FcoSwNGxRX0bLqGZpw+CvMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 09:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:65:79:8b:1b:01:f1:5a:dc:16:b6:bb:b6:ee:81:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Validity
Not Before: Oct 19 09:02:01 2026 GMT
Not After : Oct 20 09:02:01 2026 GMT
Subject: CN=239eda7c2a80d9910e608a719bf7191fd6d911fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cf:21:61:d0:f5:a9:39:58:3c:75:fd:6d:eb:
6f:22:ca:2e:bb:9f:2f:5c:ac:1f:ac:d9:53:bf:5e:
a1:cb:e6:c1:01:af:03:76:3b:43:b1:63:c5:f4:06:
cb:01:40:8d:01:16:9c:ff:56:ef:5f:95:ed:2a:b6:
bb:08:b8:b0:17:96:99:1e:55:6a:52:8c:36:a0:64:
13:23:61:e8:7b:91:6f:4c:1a:1b:ff:fa:93:c4:ed:
b5:ae:92:7c:89:bb:7d:5e:96:44:5e:d9:a7:32:0d:
c7:e5:e8:67:ea:d6:7d:b5:85:45:8d:8d:bf:a7:8c:
d5:54:06:86:1b:fb:ac:25:ee:be:97:5d:1c:a9:c8:
98:db:33:c7:6b:f6:19:35:34:da:0a:5c:3f:81:d8:
95:c1:37:74:b0:00:5c:77:21:fc:e6:00:51:8e:54:
55:46:10:65:f3:da:2a:48:6c:18:7b:b7:d8:6c:22:
31:61:67:b5:d1:a9:2a:a3:4d:64:dd:eb:95:7a:f6:
5f:9a:e2:ef:61:30:b3:62:c6:ea:8b:3b:3f:58:57:
b7:bc:86:0c:2a:1a:63:cf:85:71:c1:eb:a2:d9:19:
4c:8a:37:11:41:b7:63:35:93:75:22:8a:c8:50:48:
99:c2:22:95:6b:51:36:94:6e:53:98:fe:f9:2a:60:
25:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9E:DA:7C:2A:80:D9:91:0E:60:8A:71:9B:F7:19:1F:D6:D9:11:FB
X509v3 Authority Key Identifier:
keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8a:a4:8a:d4:3b:f9:90:f9:df:39:16:21:ae:55:de:29:87:
db:d9:45:b1:fe:de:b0:95:bd:c8:52:3a:27:9b:1b:cb:e3:45:
07:de:71:27:16:93:40:2e:b6:2c:1c:d0:1c:6d:d2:51:b9:49:
2a:04:c3:44:a7:2a:ee:7a:92:98:a2:5c:44:75:03:5f:0b:a7:
da:f6:d6:8d:29:b7:0c:39:72:98:9f:d8:80:91:ce:06:a2:79:
68:51:fa:49:71:49:f4:05:6f:98:28:91:03:f0:cf:fb:84:e0:
f0:86:20:e2:8a:eb:56:a6:bb:22:99:be:f3:71:f8:97:aa:38:
a5:91:e9:6e:ba:f5:59:19:77:a9:2f:3d:14:d3:13:ed:de:bc:
5d:7c:ae:7d:9e:df:13:4f:d5:71:04:f4:c9:e3:32:79:01:f9:
84:63:46:21:03:a4:0c:41:80:4d:8d:93:43:55:d5:83:c5:a1:
b9:a6:18:6d:b5:5e:49:8c:fb:c1:2d:d8:f8:dc:21:8e:ae:6e:
73:fd:75:12:04:8d:95:79:9f:c6:7e:af:6f:ad:da:8f:3d:58:
b4:78:29:43:b9:fd:ec:cd:76:c5:7e:90:e3:ae:9b:2c:7a:59:
3a:ae:3e:a2:53:7d:33:a1:34:b0:94:a2:2e:c4:95:c9:aa:64:
ae:de:d9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:43:22 2026 by rpki-client