Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
File: GWN5dpxXylsmosYfpdmsxSe-p4k.mft (raw, json)
Hash identifier: pnh6gARwxlmxcA8j6xcX3Qu+yHpkWLYRo/hNk7I5ehA=
Subject key identifier: EA:BC:BE:64:DC:BC:F6:5E:D9:6A:E9:C7:84:21:FE:1B:E9:8A:E5:D3
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Certificate issuer: /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial: 019F11F7F10F17D902C065CA73A242239F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
Manifest number: 1986
Signing time: Mon 29 Jun 2026 06:01:29 +0000
Manifest this update: Mon 29 Jun 2026 06:01:29 +0000
Manifest next update: Tue 30 Jun 2026 06:01:29 +0000
Files and hashes: 1: 3W77edW628jQxwd19lvVjtYuG1o.roa (hash: eeBqOwHI9v74XHIGFTRR/UVJPjywNaCr9KLzr8nBNf8=)
2: GWN5dpxXylsmosYfpdmsxSe-p4k.crl (hash: DBGxfF+6yQt/q2vLMoEBs85yK7lObZMw3ZNruawNR8U=)
3: bg16vmmigVbvm4o3Mdxq8cFNNQU.roa (hash: zFOo31LB1MSXG3aNBtx7FcoSwNGxRX0bLqGZpw+CvMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:f1:0f:17:d9:02:c0:65:ca:73:a2:42:23:9f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Validity
Not Before: Jun 29 06:01:29 2026 GMT
Not After : Jun 30 06:01:29 2026 GMT
Subject: CN=eabcbe64dcbcf65ed96ae9c78421fe1be98ae5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:71:aa:f7:a6:6e:29:56:f4:c9:a9:f0:c5:
f7:1f:a7:53:e1:b6:4c:58:67:3c:d9:28:44:4f:59:
a8:06:f3:47:1e:34:e7:37:4c:60:2d:a3:f6:74:f8:
8a:1d:24:20:61:58:ff:9d:c2:23:f0:73:0f:07:a3:
00:21:47:e5:bd:f8:c1:f9:46:c7:ed:49:27:cd:d3:
f0:55:bf:2a:a0:33:fe:07:4e:3d:52:52:00:44:73:
f7:9c:55:b4:94:df:2d:10:92:fd:e1:cb:67:15:03:
94:25:f9:d1:a2:94:c1:6c:54:e7:02:68:0f:b1:c8:
ac:4b:56:43:6c:09:22:e1:fa:bf:53:30:ee:a7:52:
58:e3:82:25:55:2f:9e:01:b8:b2:bd:49:9a:47:06:
b8:fc:a5:ee:2d:bc:10:fc:8b:c1:3e:d5:79:16:9e:
fe:b8:9b:1a:61:11:62:f5:d4:53:59:89:24:95:77:
bb:7d:26:aa:91:42:9a:5e:12:a4:78:8c:15:ba:89:
f8:e7:8f:5d:e1:41:c2:c3:12:b7:2d:f3:c2:6e:27:
82:98:6a:6d:c4:bb:ba:db:b4:42:75:88:65:0b:91:
64:12:55:e9:bd:7c:0e:0c:fd:6b:f6:56:c9:99:70:
77:93:da:11:09:5d:b2:eb:ea:45:07:60:0e:05:05:
76:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BC:BE:64:DC:BC:F6:5E:D9:6A:E9:C7:84:21:FE:1B:E9:8A:E5:D3
X509v3 Authority Key Identifier:
keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:da:90:6b:43:78:03:2d:5f:0c:fb:7e:26:b2:2f:b1:3e:4f:
58:64:bc:f8:17:ce:d2:44:1b:9f:3b:84:d9:a4:73:a0:ec:49:
10:cb:b8:a8:88:14:d4:83:70:9a:3c:4f:71:a2:e4:c0:6d:b8:
ca:0b:0b:9e:8a:56:8f:e5:26:6a:28:de:b0:0d:0d:72:06:d4:
a0:39:36:09:d4:6b:99:5f:65:29:c0:af:3d:f6:50:9b:30:a2:
cc:0a:f0:e4:e3:a1:a8:28:2d:2c:79:78:91:5c:ea:af:d8:55:
0f:db:1b:1d:d2:7a:b7:da:c0:1d:d2:45:9a:9f:d0:98:c1:85:
4d:0a:e2:38:da:62:9a:f6:2b:3a:57:9b:28:9f:3d:6e:ce:92:
98:5c:a3:f3:6f:cc:d4:81:c4:2c:c6:bb:31:51:02:e0:32:a9:
63:42:1d:b8:9e:8f:ff:9e:f4:80:c5:e1:c5:65:27:3e:30:f5:
93:a4:74:66:a0:82:e9:9a:24:da:90:d8:4c:e0:f8:ae:30:91:
ce:cf:6a:35:fa:ab:8c:60:a5:ed:35:09:1f:69:5d:0b:51:44:
3a:00:2f:e6:05:a8:e2:ef:52:96:e1:3f:22:95:42:39:36:a5:
85:db:b8:63:6c:c2:48:f9:16:06:77:80:32:2a:2f:c1:36:5b:
eb:ee:4f:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8R9/EPF9kCwGXKc6JCI5+DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NjM3OTc2OWM1N2NhNWIyNmEyYzYxZmE1ZDlhY2M1Mjdi
ZWE3ODkwHhcNMjYwNjI5MDYwMTI5WhcNMjYwNjMwMDYwMTI5WjAzMTEwLwYDVQQD
EyhlYWJjYmU2NGRjYmNmNjVlZDk2YWU5Yzc4NDIxZmUxYmU5OGFlNWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1lxqvembilW9Mmp8MX3H6dT4bZM
WGc82ShET1moBvNHHjTnN0xgLaP2dPiKHSQgYVj/ncIj8HMPB6MAIUflvfjB+UbH
7UknzdPwVb8qoDP+B049UlIARHP3nFW0lN8tEJL94ctnFQOUJfnRopTBbFTnAmgP
scisS1ZDbAki4fq/UzDup1JY44IlVS+eAbiyvUmaRwa4/KXuLbwQ/IvBPtV5Fp7+
uJsaYRFi9dRTWYkklXe7fSaqkUKaXhKkeIwVuon4549d4UHCwxK3LfPCbieCmGpt
xLu627RCdYhlC5FkElXpvXwODP1r9lbJmXB3k9oRCV2y6+pFB2AOBQV2JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOq8vmTcvPZe2Wrpx4Qh/hvpiuXTMB8GA1UdIwQY
MBaAFBljeXacV8pbJqLGH6XZrMUnvqeJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1dONWRweFh5bHNtb3NZZnBkbXN4U2UtcDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lYTM3NmQtOGVmYy00NDQwLThmNTQt
OTQ5YWE1Yjc1YTQ1LzEvR1dONWRweFh5bHNtb3NZZnBkbXN4U2UtcDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9lYTM3NmQtOGVmYy00NDQwLThmNTQtOTQ5YWE1Yjc1YTQ1
LzEvR1dONWRweFh5bHNtb3NZZnBkbXN4U2UtcDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtqQa0N4
Ay1fDPt+JrIvsT5PWGS8+BfO0kQbnzuE2aRzoOxJEMu4qIgU1INwmjxPcaLkwG24
ygsLnopWj+UmaijesA0NcgbUoDk2CdRrmV9lKcCvPfZQmzCizArw5OOhqCgtLHl4
kVzqr9hVD9sbHdJ6t9rAHdJFmp/QmMGFTQriONpimvYrOlebKJ89bs6SmFyj82/M
1IHELMa7MVEC4DKpY0IduJ6P/570gMXhxWUnPjD1k6R0ZqCC6Zok2pDYTOD4rjCR
zs9qNfqrjGCl7TUJH2ldC1FEOgAv5gWo4u9SluE/IpVCOTalhdu4Y2zCSPkWBneA
MiovwTZb6+5P3Q==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:08 2026 by rpki-client