Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
File: GnCnIdG1PtkdhbbFNaxytJBPnD0.mft (raw, json)
Hash identifier: RUP/urRbSDdrcwTFmVqJBYYAfz6QiL0OXSs+cTKgq7E=
Subject key identifier: 97:E8:9E:86:36:0D:D8:3E:35:38:6F:D9:13:B4:14:CA:7D:28:67:E7
Authority key identifier: 1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
Certificate issuer: /CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Certificate serial: 019D26CCC15FCF54F42179C3F2EF73553C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
Manifest number: 01A5
Signing time: Wed 25 Mar 2026 21:00:46 +0000
Manifest this update: Wed 25 Mar 2026 21:00:46 +0000
Manifest next update: Thu 26 Mar 2026 21:00:46 +0000
Files and hashes: 1: GnCnIdG1PtkdhbbFNaxytJBPnD0.crl (hash: 26oKuPUHyu4d5kr6XeU1Kb3J0iOLC+wlqusYoYNgBxE=)
2: OQhQ0ERvOy6cUfsHeSPtDIxPLy0.roa (hash: ZP0fbWow0Y5xEJaJhTl8fSb35nDS4+b7RNqWl3nyzwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c1:5f:cf:54:f4:21:79:c3:f2:ef:73:55:3c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Validity
Not Before: Mar 25 21:00:46 2026 GMT
Not After : Mar 26 21:00:46 2026 GMT
Subject: CN=97e89e86360dd83e35386fd913b414ca7d2867e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:4c:45:2a:7b:92:02:a5:07:20:66:02:94:
ea:26:f9:5f:62:49:9c:e8:73:f0:7a:68:10:ae:b3:
fd:d8:38:e5:6b:c2:59:08:69:31:ca:27:06:01:53:
2a:cb:32:ca:d5:f4:a2:f7:96:f3:34:7e:c2:53:0f:
1d:68:da:c8:f8:82:0f:c1:4b:e9:83:6f:03:90:1f:
d7:83:77:74:b2:25:73:f1:d8:33:dd:79:55:0d:c5:
d7:0d:80:da:04:12:d9:cb:2b:b4:d4:ca:75:2f:1c:
1b:75:2c:f1:57:c4:48:9e:9c:64:0b:6d:d9:a1:18:
8d:8c:34:4f:8e:78:61:48:c4:07:5c:2f:90:fb:79:
19:ca:e5:d4:60:66:e7:5e:34:ed:a4:1c:4a:2b:04:
a7:1c:d4:3e:52:d9:92:9a:3e:1e:43:6f:0d:ef:97:
59:9f:19:43:da:d7:09:4d:99:e9:47:42:da:9e:f6:
fb:47:72:de:1f:16:c9:38:d8:06:e4:5e:72:a0:7f:
dc:e3:fa:aa:d8:bd:7d:bd:43:51:33:56:38:a7:99:
ba:ba:0d:bb:68:f1:26:12:68:f2:6e:52:9e:8c:5e:
18:4a:d8:73:2a:9c:06:fd:ae:10:d6:c4:a3:57:fe:
84:3d:be:82:de:4d:35:3d:86:50:ad:1d:90:b6:a2:
8b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E8:9E:86:36:0D:D8:3E:35:38:6F:D9:13:B4:14:CA:7D:28:67:E7
X509v3 Authority Key Identifier:
keyid:1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d3:f5:ba:bb:e2:ae:bb:9a:26:0b:f4:c0:7d:ee:35:19:56:
cc:08:c0:28:d4:b8:fd:dd:bd:5e:f6:7c:60:56:f0:da:d8:fd:
20:3e:d2:51:bf:e5:1f:7f:36:ee:f8:54:55:7d:13:a1:5c:54:
75:de:96:12:c1:22:00:1f:04:8d:68:bc:91:c7:81:71:6b:5f:
fc:02:b6:83:f0:1c:f9:92:a7:85:ca:39:4c:48:35:c2:bc:ed:
96:23:f7:eb:f8:98:6d:0d:fd:eb:37:fc:7d:6b:c1:d5:8e:28:
e0:77:c4:48:93:41:e0:59:11:78:3e:97:82:01:21:70:d6:1d:
67:67:8f:27:7c:b4:8f:19:05:b5:68:26:0e:04:9c:b1:c5:c8:
85:5b:30:4a:5d:13:c5:6f:8e:9d:56:63:c0:57:8f:58:7e:48:
bd:d9:57:2a:19:bd:4d:e9:25:28:ca:8d:80:fd:85:4a:ac:66:
b0:d6:b3:1a:a5:fe:b7:4d:42:3b:ca:cc:9a:0e:f1:d1:7a:5c:
99:bc:06:e9:9f:7d:ba:07:93:76:2b:24:e5:d4:ca:a4:89:49:
15:e8:f9:4f:2d:e6:c3:ef:a4:c9:fb:70:b0:f0:66:e9:a0:c8:
b0:15:a5:1b:b9:86:c5:38:53:78:ed:90:2b:9d:e9:5e:69:59:
3b:cf:13:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:40:34 2026 by rpki-client