Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
File: Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft (raw, json)
Hash identifier: 8DOrUQI2mO+nhfMENBYEs6OiTNaJdidvZX97UJuhjkk=
Subject key identifier: 08:2F:81:9E:21:84:2A:B8:74:9F:BA:B4:5F:A7:68:F1:FB:A8:2F:69
Authority key identifier: 1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4
Certificate issuer: /CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
Certificate serial: 019D382DE58371ED62E34A8514DA4F48C122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
Manifest number: 1869
Signing time: Sun 29 Mar 2026 06:00:24 +0000
Manifest this update: Sun 29 Mar 2026 06:00:24 +0000
Manifest next update: Mon 30 Mar 2026 06:00:24 +0000
Files and hashes: 1: 71owHX4S2u2lF3E_BCb4Gt1KJaM.roa (hash: C8aJgnSvLd5vqx93bG6/27ca+qWBm6BMec2VKfAW2bA=)
2: Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl (hash: n54LHTSeHHgJMd6TsuosuCdJYj515iRvuzmEdjiTcL4=)
3: dfesipwxH539hUdXKKyu2kqJ8wg.asa (hash: 7Uj9gk3YaMecDLkJ2OHkoQ1Jy1gH9VcQpYCUftt6ZVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e5:83:71:ed:62:e3:4a:85:14:da:4f:48:c1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
Validity
Not Before: Mar 29 06:00:24 2026 GMT
Not After : Mar 30 06:00:24 2026 GMT
Subject: CN=082f819e21842ab8749fbab45fa768f1fba82f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:b5:af:b7:b1:a1:dc:1a:cd:0d:91:53:1c:
ed:f7:25:90:fa:24:a8:06:04:68:26:37:91:69:45:
9a:41:2b:fd:1c:d7:ac:20:fa:0d:08:78:5d:b8:11:
fe:cf:b2:4c:b5:98:c2:35:4e:ea:30:4d:7f:9c:17:
31:be:df:0d:f9:0c:ec:8b:90:60:dd:6a:cb:04:96:
8c:c1:ad:6b:38:86:c6:24:91:0f:5b:b0:15:2b:2f:
38:1d:28:b5:35:17:6b:47:9c:1e:a1:e8:1b:93:4a:
59:17:f9:77:fa:7b:45:02:64:d4:1b:0b:63:7b:6d:
11:35:f2:9b:fd:d1:07:7f:48:d9:04:e0:64:af:d0:
65:e8:22:93:2f:86:32:e2:1c:aa:d9:80:e8:68:a3:
f7:84:ac:27:e9:08:b3:76:6b:d2:36:85:65:cb:0e:
39:b8:6e:00:01:1e:8f:20:13:e7:bc:d1:2d:80:9e:
b2:50:08:5e:ce:8d:af:ce:c3:f0:22:14:b7:92:12:
64:e8:f6:a5:a2:3f:ec:25:a6:6d:25:f1:eb:a7:8c:
29:1e:e9:89:b8:70:c6:5a:58:72:6a:06:b5:95:c4:
bf:3b:e6:e7:44:a4:4b:ba:97:22:9c:89:00:fd:13:
a9:d1:95:12:07:a2:c0:a9:3b:bc:21:73:f3:37:be:
5c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2F:81:9E:21:84:2A:B8:74:9F:BA:B4:5F:A7:68:F1:FB:A8:2F:69
X509v3 Authority Key Identifier:
keyid:1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8f:f7:60:3b:f1:92:f2:1c:94:e3:00:0f:b6:61:3c:98:2e:
5b:24:b9:81:59:ff:27:e4:b2:96:02:e0:04:9a:64:3e:50:7f:
92:cd:bb:fb:a6:21:ee:22:08:47:fb:78:21:8e:c0:c2:1d:7e:
a1:6e:4e:98:59:a3:84:7c:f8:79:9c:bc:fd:f3:f2:43:ce:a4:
10:d3:c5:9a:82:65:0b:a5:ac:16:01:83:aa:3e:77:df:66:58:
d1:91:a6:98:00:a4:f5:a0:c7:07:4d:83:8c:e5:73:fa:65:c6:
82:b8:5f:a1:48:ee:a9:d3:1b:ac:88:93:b8:ba:bc:de:6a:b9:
89:61:41:66:03:be:e6:6c:e3:a2:aa:69:b8:2a:98:bf:8b:5b:
74:b0:c0:11:ec:62:f1:6e:2c:ae:d3:26:6b:ae:ae:35:f1:79:
28:bf:e9:31:1d:bd:31:33:a0:0b:32:a7:96:5c:90:3a:55:8e:
d8:32:83:0f:77:a1:91:50:ef:48:52:6f:d2:96:51:11:17:8a:
b5:02:d5:0a:78:33:29:48:c8:00:5d:f0:a9:b1:3d:e1:c0:9c:
7e:a8:15:d7:d8:33:49:41:6d:22:9f:f9:36:31:49:a4:ee:ba:
77:0d:49:5a:30:60:b0:a7:e1:7c:bd:d0:6e:3d:f9:a5:03:a5:
0b:88:bc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:07 2026 by rpki-client