Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
File: GWN5dpxXylsmosYfpdmsxSe-p4k.mft (raw, json)
Hash identifier: gZjupJlJHRKdXc29QSzt/XSn58KXAGL5WOmvcsDrjiQ=
Subject key identifier: 1A:BA:02:34:78:97:AB:5E:62:29:C2:60:6C:FF:18:6B:F8:3A:93:07
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Certificate issuer: /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial: 019D38D2E5C216B674E4F9E86904BCB8E22B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:00:38 +0000
Manifest this update: Sun 29 Mar 2026 09:00:38 +0000
Manifest next update: Mon 30 Mar 2026 09:00:38 +0000
Files and hashes: 1: 3W77edW628jQxwd19lvVjtYuG1o.roa (hash: eeBqOwHI9v74XHIGFTRR/UVJPjywNaCr9KLzr8nBNf8=)
2: GWN5dpxXylsmosYfpdmsxSe-p4k.crl (hash: HmclNkBm65diAD1L58IAr5BkQzSOaFzIc84z8BhLlJc=)
3: bg16vmmigVbvm4o3Mdxq8cFNNQU.roa (hash: zFOo31LB1MSXG3aNBtx7FcoSwNGxRX0bLqGZpw+CvMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e5:c2:16:b6:74:e4:f9:e8:69:04:bc:b8:e2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Validity
Not Before: Mar 29 09:00:38 2026 GMT
Not After : Mar 30 09:00:38 2026 GMT
Subject: CN=1aba02347897ab5e6229c2606cff186bf83a9307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:64:02:57:5e:fe:69:4c:70:b8:72:57:c6:
03:d6:91:cc:e2:64:4f:12:19:b2:d3:81:51:99:f5:
63:de:41:a9:69:ca:48:e3:84:4e:68:9d:3a:22:95:
fe:92:45:ae:f2:08:ed:16:f6:9d:f0:4e:d9:7a:ae:
b3:bf:31:fe:63:62:f0:26:fb:ff:99:a3:19:8e:46:
9b:aa:b0:c1:68:6e:f6:31:be:3f:3f:15:01:17:b9:
e4:39:27:5b:e4:22:4a:63:a8:36:33:9f:b0:24:f5:
76:06:55:ae:d0:b0:08:c9:38:b4:78:3c:a7:aa:e5:
e2:2a:00:fc:4b:b7:2e:b4:2f:0f:72:1a:d4:6b:43:
6f:16:c2:50:fd:de:88:de:08:fb:a3:52:ba:00:38:
ca:b6:ed:a5:86:87:2a:d4:db:e9:c8:44:ff:b8:fc:
6a:43:d1:fd:59:1a:40:43:3e:ae:f3:1f:2e:c0:69:
bb:93:9f:9f:a6:56:10:10:6e:8b:09:ae:04:82:75:
ac:ac:81:38:e0:7f:07:cb:25:7d:53:1b:81:f2:84:
21:c8:30:a2:64:f2:58:bc:a2:b3:4e:ae:df:26:fa:
ad:c1:6c:f5:46:40:05:e7:c7:4f:26:d0:68:99:fd:
61:97:f8:63:21:cd:34:ce:5e:60:8d:e9:07:02:08:
02:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BA:02:34:78:97:AB:5E:62:29:C2:60:6C:FF:18:6B:F8:3A:93:07
X509v3 Authority Key Identifier:
keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c9:8a:70:9e:05:0c:2b:88:25:e2:3d:07:78:fe:aa:66:ea:
ad:e7:54:4a:ca:e8:48:8f:c8:e5:5b:51:ff:8f:d7:83:8f:cb:
d1:70:91:d3:1d:a9:c6:a2:7c:29:fc:a0:93:85:69:42:7b:e6:
4d:97:bf:eb:ae:51:f3:4e:9d:6b:d8:97:e0:78:40:4a:12:2b:
11:2d:6b:8b:de:b0:0c:d3:d7:6f:58:83:95:3a:e1:4e:0f:d4:
df:b5:ea:24:18:c8:59:ef:aa:60:a7:18:0c:f1:19:97:a8:d4:
ae:b1:30:29:d8:0c:af:7c:0d:45:0d:80:05:b7:a5:ec:73:fa:
06:c3:a7:cf:02:d8:24:18:e9:25:8a:ce:4f:e4:1f:26:cd:ff:
07:ad:dd:5a:4d:24:5e:dc:02:3e:18:a9:50:3f:cc:21:a1:75:
68:33:31:3b:5b:fd:6f:f3:96:43:6c:5b:11:fe:f3:12:23:06:
18:ec:4a:7a:d1:4a:1d:16:7b:8a:09:c6:37:19:0a:7f:de:08:
dd:35:a3:3f:97:58:64:cb:0d:03:26:30:6e:99:46:cb:3c:17:
79:7a:79:5c:c8:b4:2d:37:8a:2e:1f:a9:ed:20:03:91:b4:a9:
9a:57:7a:2a:24:5b:8a:16:1d:de:ab:1e:fc:e6:0e:25:4d:cc:
8b:f4:aa:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:28 2026 by rpki-client