Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
File: GWN5dpxXylsmosYfpdmsxSe-p4k.mft (raw, json)
Hash identifier: dFBa2/CGFOJ1C+YAhCVQpgvKgH/jtcBRplJHcUF8Z7s=
Subject key identifier: 62:24:DA:58:00:B0:BE:D9:2B:CF:EA:5D:B2:2F:96:6E:55:AA:F1:54
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Certificate issuer: /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial: 01A0016FFD6C496635613ED984EFE8DD6789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 18:01:51 +0000
Manifest this update: Fri 14 Aug 2026 18:01:51 +0000
Manifest next update: Sat 15 Aug 2026 18:01:51 +0000
Files and hashes: 1: 3W77edW628jQxwd19lvVjtYuG1o.roa (hash: eeBqOwHI9v74XHIGFTRR/UVJPjywNaCr9KLzr8nBNf8=)
2: GWN5dpxXylsmosYfpdmsxSe-p4k.crl (hash: 17QAjgGilcFquGPAugypeQKADn0wmT0rNCrjhUmKAAY=)
3: bg16vmmigVbvm4o3Mdxq8cFNNQU.roa (hash: zFOo31LB1MSXG3aNBtx7FcoSwNGxRX0bLqGZpw+CvMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:fd:6c:49:66:35:61:3e:d9:84:ef:e8:dd:67:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Validity
Not Before: Aug 14 18:01:51 2026 GMT
Not After : Aug 15 18:01:51 2026 GMT
Subject: CN=6224da5800b0bed92bcfea5db22f966e55aaf154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:7e:5a:8a:04:3b:4f:ae:bd:4a:3b:eb:b7:
c2:6d:ad:cb:d2:f8:e2:ad:3b:17:24:f9:52:8c:f5:
5e:34:b0:11:dd:dc:6c:24:e7:b1:8b:9c:43:5d:d2:
de:38:02:70:8a:01:ce:ff:46:e4:23:92:b8:f8:7a:
13:57:7f:b5:af:c6:0b:38:4f:cf:79:9a:ae:70:fd:
35:78:e7:60:c4:8c:d1:55:10:71:51:3f:dd:3d:3b:
d5:61:8e:3e:b6:0b:4a:58:b4:a7:74:74:b9:23:67:
61:02:6d:c3:3a:0e:1a:14:12:11:48:c4:89:8e:75:
9c:72:cb:b4:fc:9e:89:91:a8:ee:2f:47:80:c0:2c:
8b:80:dc:1e:35:62:3e:2d:39:c8:67:4d:6b:ba:96:
a4:8e:2a:77:e7:73:68:f9:10:df:f9:56:91:29:b2:
69:aa:bb:69:e7:f8:17:93:c7:77:ac:3c:71:10:80:
04:52:9e:06:7b:2b:46:21:25:34:c3:9f:ff:65:25:
13:0d:d4:38:6f:af:09:dc:98:3a:4d:07:38:2f:a2:
9f:66:2c:65:0d:75:16:88:17:0f:f0:43:92:5a:d2:
58:f5:d0:c7:23:80:c6:8f:48:d3:f8:42:73:f3:13:
8f:b6:9d:6f:1e:f4:8c:2b:bd:d4:eb:04:bb:91:08:
d8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:24:DA:58:00:B0:BE:D9:2B:CF:EA:5D:B2:2F:96:6E:55:AA:F1:54
X509v3 Authority Key Identifier:
keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e4:7a:30:6f:97:98:a2:75:f5:82:0b:58:b7:fa:10:9f:64:
ae:31:63:e7:8e:76:80:72:d6:7b:e4:33:3b:65:ec:25:74:73:
19:ca:18:63:cc:69:89:34:c6:e0:f9:44:26:b7:24:29:78:35:
df:c8:da:54:52:f6:d4:9f:86:cf:85:aa:c9:48:aa:d9:f9:1f:
a4:a3:53:ff:81:cb:6e:d9:2b:8a:6e:fa:b7:f1:e4:80:49:21:
89:cb:78:f5:e6:e4:50:12:87:53:de:0e:dd:e8:f3:fc:1e:04:
63:2e:90:47:5b:6c:80:34:75:45:20:6d:20:fc:c4:2a:cc:c0:
4e:ca:97:35:27:a9:4c:7e:11:f8:fd:fb:95:54:d0:b6:af:48:
bb:c9:28:79:bb:42:d9:8a:8f:bd:58:e7:01:e4:3b:97:1b:3e:
1a:71:b3:29:81:30:55:78:cc:51:98:64:19:4d:34:af:b8:78:
c5:3a:df:a8:c0:00:45:87:83:83:ed:f0:1c:26:3d:c4:b8:b6:
32:21:b7:e4:ad:d7:b6:41:f3:d2:d6:b0:fa:eb:d7:62:43:0c:
a0:6f:5f:65:bd:c1:70:44:fa:2e:58:e1:e7:b1:f4:99:33:df:
87:b6:c3:81:6d:15:dc:d6:f8:52:82:36:fd:c1:45:ab:97:95:
e4:92:dc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:41 2026 by rpki-client