Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
File: GnCnIdG1PtkdhbbFNaxytJBPnD0.mft (raw, json)
Hash identifier: H+1ElccEBQLfmBbz4Fcy6J8Bj3dtZtmicwVl/V/aXdA=
Subject key identifier: 95:72:0F:DE:1B:F3:EF:8C:5A:23:F8:D7:EB:0B:7D:A9:BE:51:47:AA
Authority key identifier: 1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
Certificate issuer: /CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Certificate serial: 01A10F27DFE11CDA486BFBAE180BA4782662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
Manifest number: 03AB
Signing time: Tue 06 Oct 2026 03:00:33 +0000
Manifest this update: Tue 06 Oct 2026 03:00:33 +0000
Manifest next update: Wed 07 Oct 2026 03:00:33 +0000
Files and hashes: 1: GnCnIdG1PtkdhbbFNaxytJBPnD0.crl (hash: nhjsD/x9Xq50bt/uU5NGDYJZNnN2iVfWrMSnmx4wn/g=)
2: OQhQ0ERvOy6cUfsHeSPtDIxPLy0.roa (hash: ZP0fbWow0Y5xEJaJhTl8fSb35nDS4+b7RNqWl3nyzwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:27:df:e1:1c:da:48:6b:fb:ae:18:0b:a4:78:26:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Validity
Not Before: Oct 6 03:00:33 2026 GMT
Not After : Oct 7 03:00:33 2026 GMT
Subject: CN=95720fde1bf3ef8c5a23f8d7eb0b7da9be5147aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c8:b8:80:d1:d8:ef:d0:21:c3:54:9b:61:93:
73:73:5a:4d:22:b4:f7:7b:ae:ff:9c:93:3d:0e:40:
c0:bb:66:e9:2e:67:66:76:f4:6a:ce:d9:68:0b:d9:
b3:7d:84:19:ef:27:92:30:4b:df:ac:c9:a5:5c:bd:
df:f7:85:20:e9:5d:42:de:61:ed:22:3f:64:dc:37:
09:59:5f:95:83:98:8f:45:d2:b4:53:2c:33:6a:b5:
88:86:f8:04:57:cc:ab:fc:07:4a:47:61:e0:34:eb:
9f:89:6a:22:da:5d:ed:a1:7c:cc:e0:67:bb:a5:03:
8c:fc:45:94:0a:f5:b8:ad:be:3f:f0:12:7f:d2:f6:
a0:bb:01:ea:7b:b6:5f:80:2e:fa:86:83:b2:7f:a0:
c4:56:f0:44:90:e3:d1:87:96:85:4a:2e:52:0d:71:
96:ea:5e:e8:3b:ac:b2:5f:6d:03:5f:b3:77:f9:e0:
3b:85:74:4e:37:f7:d2:39:ef:a2:e7:92:6c:dd:b5:
64:ae:35:94:d1:1f:4f:be:d7:c0:c8:ba:36:cc:91:
8e:98:f8:f1:c5:70:bc:a1:8c:fd:1c:31:fa:f0:cf:
4a:b1:53:c9:88:9e:e3:08:cd:e5:f8:8e:c1:38:aa:
30:2a:60:52:21:f2:ea:5b:87:0b:03:fe:97:60:2e:
2f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:72:0F:DE:1B:F3:EF:8C:5A:23:F8:D7:EB:0B:7D:A9:BE:51:47:AA
X509v3 Authority Key Identifier:
keyid:1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a7:f6:be:ac:99:14:97:da:be:8f:91:75:12:1d:f0:7c:cb:
ea:04:cd:0d:88:48:55:ac:f3:7b:39:d6:18:9a:b6:27:e4:55:
03:8a:78:c3:4c:15:b0:13:68:31:17:30:e1:98:0d:99:2e:d4:
01:49:68:89:b5:98:bf:71:3e:80:40:ab:73:dc:5f:10:6b:10:
3a:c4:8f:b6:ed:85:85:fa:95:46:4d:44:04:8d:8b:99:4e:f9:
17:a9:c2:eb:3e:f0:30:43:7c:ae:49:f4:3d:5c:67:ff:fc:39:
10:45:98:cd:05:ba:42:33:cf:f6:fc:e5:1a:2e:0a:78:5f:47:
de:fa:a9:38:8b:66:b8:99:b1:a8:1e:fc:66:97:f7:7c:66:ed:
38:c4:08:77:4f:09:d8:cf:7e:f4:7e:e0:87:ec:4b:3f:db:ae:
bd:50:f9:bc:2f:e5:6a:59:7f:de:52:a4:ea:e9:d4:9d:af:ac:
f7:9d:7a:4a:3e:fc:e4:6b:b0:b4:0f:7c:1f:14:82:d1:c0:5d:
55:b7:63:b0:10:f6:ae:63:9a:ab:dc:d3:18:e8:ec:62:71:2d:
64:ee:4f:2d:57:25:f0:dd:ff:07:02:17:3a:16:92:4d:67:14:
86:5a:88:ee:9a:e1:c4:83:04:ca:d2:e8:bd:cc:47:43:66:2f:
07:62:ae:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:34:43 2026 by rpki-client