Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
File: GnCnIdG1PtkdhbbFNaxytJBPnD0.mft (raw, json)
Hash identifier: xvBPQDXDsQy4m+GFd7qempbHtHmk2ET/eHvHxfmB3ko=
Subject key identifier: FB:8E:E9:8B:D9:BF:11:BC:F9:B5:73:4C:FE:21:D7:22:C6:5E:72:C7
Authority key identifier: 1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
Certificate issuer: /CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Certificate serial: 019F94A453E561AC4780DACDD62D82B7D69B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
Manifest number: 02E7
Signing time: Fri 24 Jul 2026 15:00:24 +0000
Manifest this update: Fri 24 Jul 2026 15:00:24 +0000
Manifest next update: Sat 25 Jul 2026 15:00:24 +0000
Files and hashes: 1: GnCnIdG1PtkdhbbFNaxytJBPnD0.crl (hash: XfEWhM2K/XDPX37+esbRwx6tS3decXbbZ6HYPAnwIuk=)
2: OQhQ0ERvOy6cUfsHeSPtDIxPLy0.roa (hash: ZP0fbWow0Y5xEJaJhTl8fSb35nDS4+b7RNqWl3nyzwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:53:e5:61:ac:47:80:da:cd:d6:2d:82:b7:d6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Validity
Not Before: Jul 24 15:00:24 2026 GMT
Not After : Jul 25 15:00:24 2026 GMT
Subject: CN=fb8ee98bd9bf11bcf9b5734cfe21d722c65e72c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:27:d2:fc:a9:be:cb:b3:56:b0:5a:6e:14:a8:
25:7e:53:9b:04:94:ae:bb:20:69:fb:ae:93:07:9d:
57:e0:9d:67:89:39:af:bc:77:ee:ff:87:48:f6:88:
ba:b4:b9:2c:10:f2:92:97:ad:0b:c1:f9:f9:61:e5:
82:44:85:dc:cc:1f:da:12:25:05:89:ac:92:43:46:
21:76:b7:ff:38:bc:a7:67:7f:ba:c6:d1:da:1d:26:
52:31:de:b7:48:80:69:1a:d8:8c:d1:46:62:03:74:
c1:25:ad:c0:74:67:80:1d:c4:39:73:f4:9d:c9:1e:
a5:55:b4:b2:f3:c4:c5:9c:3f:0e:3f:8a:6c:82:35:
85:08:c5:9e:5c:7c:39:3e:be:04:d3:cf:f3:7c:6c:
ad:73:dd:49:a4:6f:ca:00:fb:aa:71:8c:7d:c2:9b:
f5:32:b5:ee:eb:5a:4f:3c:ae:34:8b:36:9b:8d:9e:
69:37:87:86:30:68:05:a3:10:cb:f3:53:a9:1e:75:
17:43:c3:bf:5c:04:25:26:d6:de:1e:cb:a2:6b:23:
5a:47:8a:0d:80:8d:87:93:c3:28:f3:ec:f4:b6:9c:
1b:fd:8f:4c:7b:d6:a6:32:db:71:8d:7b:39:69:c1:
dd:11:bc:79:93:20:8e:37:82:c8:f3:5c:d5:68:a7:
89:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8E:E9:8B:D9:BF:11:BC:F9:B5:73:4C:FE:21:D7:22:C6:5E:72:C7
X509v3 Authority Key Identifier:
keyid:1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:75:7b:17:23:c3:7f:e5:b8:6d:0c:f2:f7:1d:d6:3a:58:1d:
ee:af:7b:5d:99:60:f1:fd:d0:af:08:20:1c:6b:03:c0:8d:53:
6b:ff:91:6d:5e:4d:c7:7c:5c:54:47:5b:bc:c5:90:cf:33:cc:
7b:f8:d8:5f:b7:e9:68:ac:94:3b:2c:f7:00:7e:a2:ce:d7:6f:
16:b4:e7:58:ce:13:4c:da:e0:4e:ea:00:c7:33:0a:60:a8:a2:
ba:12:02:f7:15:72:aa:32:2c:f7:66:90:63:dd:d9:ca:ee:8a:
0b:77:fc:fc:3d:0f:2b:9a:02:dc:a1:32:84:3d:d2:98:21:c9:
00:5d:99:cd:19:e3:a6:b1:3e:3c:68:03:81:61:02:4e:f0:99:
75:2b:7f:2b:1d:85:20:a9:e6:96:28:dd:2b:9a:40:1d:5b:12:
a5:6d:95:89:80:06:63:2f:85:53:13:a1:97:5e:79:1d:86:ab:
d1:24:01:8f:f3:48:09:83:c5:54:f7:e8:41:a8:72:6b:00:56:
4e:5a:84:33:e6:51:5f:de:e0:64:89:13:7b:0a:18:f5:2f:b9:
69:60:3b:fc:ca:01:95:6e:74:1b:bc:71:4a:b3:eb:5b:86:18:
c1:9d:9a:1b:c6:90:14:15:22:15:75:d3:d7:63:c5:35:9e:2b:
1c:f6:54:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:10:42 2026 by rpki-client