Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
File: GnCnIdG1PtkdhbbFNaxytJBPnD0.mft (raw, json)
Hash identifier: 5ty/uQ59iaPBpME3qay5PPmBnzop106n8wnottsSRrg=
Subject key identifier: 60:78:B6:FB:3F:3D:E9:18:D7:3E:F8:06:1E:BA:A1:35:46:BF:CF:57
Authority key identifier: 1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
Certificate issuer: /CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Certificate serial: 019F92B65BB85B7C920C05C0554409ADA381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
Manifest number: 02E6
Signing time: Fri 24 Jul 2026 06:00:52 +0000
Manifest this update: Fri 24 Jul 2026 06:00:52 +0000
Manifest next update: Sat 25 Jul 2026 06:00:52 +0000
Files and hashes: 1: GnCnIdG1PtkdhbbFNaxytJBPnD0.crl (hash: X553oioSpDYNY6E7j1NyiE+qckhT8ZsCzwFQJNdB3vg=)
2: OQhQ0ERvOy6cUfsHeSPtDIxPLy0.roa (hash: ZP0fbWow0Y5xEJaJhTl8fSb35nDS4+b7RNqWl3nyzwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:5b:b8:5b:7c:92:0c:05:c0:55:44:09:ad:a3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Validity
Not Before: Jul 24 06:00:52 2026 GMT
Not After : Jul 25 06:00:52 2026 GMT
Subject: CN=6078b6fb3f3de918d73ef8061ebaa13546bfcf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:e8:32:05:84:e3:3c:ff:6a:f2:56:9c:c7:
d1:ec:fb:73:11:d9:ec:ca:85:6f:5b:d9:c1:a4:9d:
c8:af:1a:a5:23:1c:42:96:ec:e6:e0:aa:81:b1:c4:
db:10:00:a0:33:c6:58:d4:70:91:ae:97:ce:e4:08:
1b:16:7f:64:44:19:ce:a8:17:e0:0d:d6:ae:46:6c:
d3:9d:92:3d:1b:15:e6:11:4d:db:98:95:8f:70:9b:
fc:4c:ee:c0:dd:79:fb:3c:da:e7:d9:1b:41:7e:0b:
9b:ff:cf:52:6f:4f:5b:53:c1:a6:6e:9a:7d:8a:ad:
fa:1b:f7:a0:2a:28:68:e5:15:b6:e7:fd:6c:9c:60:
08:b7:a5:f1:e0:c8:44:90:47:c7:ec:98:ec:d5:82:
6d:76:6b:63:4f:d8:ac:f7:9d:fa:5c:fc:3d:a2:8b:
40:83:98:45:2e:b9:0c:bc:61:90:a8:52:cc:d9:2c:
c5:99:a5:bc:31:07:40:5b:2d:d2:5e:68:f9:59:e1:
fd:b8:e1:7b:cc:9e:b4:dd:90:31:ea:3e:9d:06:a8:
07:40:d8:0a:7a:86:60:c4:72:06:7e:ce:8d:5b:8f:
fb:ef:ac:ac:19:42:d9:d1:60:2f:4b:59:4b:2e:45:
2c:24:af:85:39:35:45:47:42:b0:cf:cf:a9:4f:31:
a7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:78:B6:FB:3F:3D:E9:18:D7:3E:F8:06:1E:BA:A1:35:46:BF:CF:57
X509v3 Authority Key Identifier:
keyid:1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:48:47:ce:c2:7b:e4:1b:ed:ff:fb:c5:bb:54:f7:ba:73:0b:
69:d9:4c:d5:95:b2:84:16:ab:3d:45:50:9a:0a:1d:f3:96:f1:
a9:98:87:f0:01:13:7c:ff:85:ad:7f:de:fa:0e:70:10:5f:67:
aa:9e:5f:b7:20:74:1e:b8:05:6b:e1:f4:9b:34:b3:ce:46:08:
b3:b1:87:89:4e:8f:df:14:ce:bb:33:e2:76:5f:3a:a0:10:5f:
cb:9d:49:94:5b:91:89:35:0c:a5:66:ef:2d:f9:68:28:0d:61:
59:1f:da:4e:6c:ae:df:7b:4d:13:ac:50:ee:ad:51:10:06:8f:
89:16:15:07:ef:94:b4:c6:c9:09:dc:80:15:e5:1c:f3:33:f9:
05:de:05:c9:44:30:d5:8d:22:51:55:3a:b4:c3:60:33:79:4f:
ba:06:ef:bc:02:af:75:41:cd:74:d1:c3:14:72:ec:b1:72:f7:
4b:00:93:eb:b4:fa:cc:48:52:bf:e3:37:e2:61:02:3f:74:b7:
43:b4:31:71:88:1a:07:68:a8:fd:f2:b9:30:69:fe:63:45:e7:
7e:c8:af:f9:a6:c3:e5:98:cc:17:c1:ae:3c:29:87:d5:54:76:
a7:62:fe:0e:5b:0a:77:08:d3:2b:6d:b8:83:45:f0:80:95:75:
27:a7:be:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Stlu4W3ySDAXAVUQJraOBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNzBhNzIxZDFiNTNlZDkxZDg1YjZjNTM1YWM3MmI0OTA0
ZjljM2QwHhcNMjYwNzI0MDYwMDUyWhcNMjYwNzI1MDYwMDUyWjAzMTEwLwYDVQQD
Eyg2MDc4YjZmYjNmM2RlOTE4ZDczZWY4MDYxZWJhYTEzNTQ2YmZjZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygvoMgWE4zz/avJWnMfR7PtzEdns
yoVvW9nBpJ3IrxqlIxxCluzm4KqBscTbEACgM8ZY1HCRrpfO5AgbFn9kRBnOqBfg
DdauRmzTnZI9GxXmEU3bmJWPcJv8TO7A3Xn7PNrn2RtBfgub/89Sb09bU8Gmbpp9
iq36G/egKiho5RW25/1snGAIt6Xx4MhEkEfH7Jjs1YJtdmtjT9is9536XPw9ootA
g5hFLrkMvGGQqFLM2SzFmaW8MQdAWy3SXmj5WeH9uOF7zJ603ZAx6j6dBqgHQNgK
eoZgxHIGfs6NW4/776ysGULZ0WAvS1lLLkUsJK+FOTVFR0Kwz8+pTzGnQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGB4tvs/PekY1z74Bh66oTVGv89XMB8GA1UdIwQY
MBaAFBpwpyHRtT7ZHYW2xTWscrSQT5w9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR25DbklkRzFQdGtkaGJiRk5heHl0SkJQbkQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wZTA5NWItNjg5MS00NWM1LWEzYTEt
ZjBjNGViMTU0MjYxLzEvR25DbklkRzFQdGtkaGJiRk5heHl0SkJQbkQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8wZTA5NWItNjg5MS00NWM1LWEzYTEtZjBjNGViMTU0MjYx
LzEvR25DbklkRzFQdGtkaGJiRk5heHl0SkJQbkQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEhHzsJ7
5Bvt//vFu1T3unMLadlM1ZWyhBarPUVQmgod85bxqZiH8AETfP+FrX/e+g5wEF9n
qp5ftyB0HrgFa+H0mzSzzkYIs7GHiU6P3xTOuzPidl86oBBfy51JlFuRiTUMpWbv
LfloKA1hWR/aTmyu33tNE6xQ7q1REAaPiRYVB++UtMbJCdyAFeUc8zP5Bd4FyUQw
1Y0iUVU6tMNgM3lPugbvvAKvdUHNdNHDFHLssXL3SwCT67T6zEhSv+M34mECP3S3
Q7QxcYgaB2io/fK5MGn+Y0Xnfsiv+abD5ZjMF8GuPCmH1VR2p2L+DlsKdwjTK224
g0XwgJV1J6e+hQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:20:01 2026 by rpki-client