Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: XKDHyLWeioqH3EZvPBY7RyYWie4OYwfZsvsqiwVytTw=
Subject key identifier: 63:7D:AA:FE:98:1D:0C:DD:EA:7F:26:94:5D:ED:78:04:D2:0A:5A:97
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 019E1E34DF0B44446618F9831277D2D5EA5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: 04DE
Signing time: Tue 12 May 2026 22:00:41 +0000
Manifest this update: Tue 12 May 2026 22:00:41 +0000
Manifest next update: Wed 13 May 2026 22:00:41 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: +2VXaBYh/Odi97EuR28STicZ4jmG5OoauXGkMxCzzmc=)
2: OalRphnjMBSS6Np5-PPkgZFPsWE.roa (hash: tykpnTBSrACbV7VF5IpAU/9U1wStTD0WGueGsOwXxHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:df:0b:44:44:66:18:f9:83:12:77:d2:d5:ea:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: May 12 22:00:41 2026 GMT
Not After : May 13 22:00:41 2026 GMT
Subject: CN=637daafe981d0cddea7f26945ded7804d20a5a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:61:78:26:a1:6b:77:90:bd:f1:f0:93:ec:2b:
c9:f6:79:a4:77:08:70:ef:35:98:ee:a2:b9:ff:18:
d7:9f:af:cf:a9:20:96:3d:bc:e5:45:f6:20:a9:b5:
dc:20:8d:11:2e:73:c1:96:5b:db:17:9a:5a:cc:af:
c0:3d:3b:f9:3c:d6:48:48:5c:14:37:0a:87:66:fd:
ad:82:6a:af:9c:7f:7b:9b:a7:5b:84:f1:77:d9:b1:
88:ac:98:4b:73:b5:71:14:7e:6b:45:80:8d:64:48:
b1:94:89:68:7e:09:40:11:d6:43:fe:13:24:90:15:
35:01:7d:c6:1b:93:26:d0:f3:e9:4a:89:39:2d:61:
1f:4c:b6:39:fd:12:d2:d5:98:d7:1c:06:8c:05:5a:
e0:80:1e:cd:89:1a:a1:33:8b:45:67:dd:49:2d:ad:
62:2b:12:a5:8c:de:a9:9c:eb:2b:f8:6b:ed:cb:6d:
8a:79:94:f1:a8:7a:b5:59:33:4a:80:00:96:b8:21:
7e:80:89:b6:2b:eb:85:49:42:33:b3:8c:92:9d:f2:
a0:29:4f:f7:22:ff:7c:ff:64:80:6d:8d:24:7e:19:
12:1b:8e:0b:24:63:08:91:34:14:7f:31:67:59:1d:
1f:86:ae:08:44:2f:bc:1c:f5:0c:0b:e4:44:78:3f:
27:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7D:AA:FE:98:1D:0C:DD:EA:7F:26:94:5D:ED:78:04:D2:0A:5A:97
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6f:b9:6e:51:39:63:aa:52:4e:55:89:cf:d9:75:ce:2d:83:
97:77:36:4e:97:bd:21:32:bb:c8:fa:44:16:ac:25:d7:c9:77:
b9:21:90:6c:b9:c4:b6:47:ab:ad:05:5d:16:5a:39:07:52:31:
e0:86:b9:c8:68:e2:61:c2:6f:25:b5:6a:ca:31:63:5c:e8:fa:
ca:b1:bf:1f:75:8c:69:9b:f2:c1:85:73:96:e6:eb:74:1a:6c:
04:f7:b0:57:64:bc:4b:17:d7:48:40:e4:a3:fc:51:ea:0d:a6:
76:22:24:7d:23:f1:14:bf:4e:ca:8c:c8:e0:bf:e2:53:fb:7f:
f9:58:15:46:c8:db:4a:a5:5a:94:a6:42:d1:f1:a9:b1:fc:7f:
1a:33:b3:76:e9:94:ba:23:f1:e5:dc:07:c4:54:b4:63:05:73:
2b:be:94:67:f7:f5:15:56:da:f2:cd:fa:b6:e2:6f:66:db:33:
21:eb:3f:b3:aa:13:59:08:8d:bc:12:42:3d:e0:9d:f2:0d:6e:
52:90:5b:a8:ab:3f:1a:1c:fc:72:5e:2f:cf:36:67:37:cc:ab:
91:b8:78:64:70:08:be:92:93:da:cc:63:4d:28:74:c3:e1:ad:
cf:c2:bf:e4:c9:6c:25:13:a1:8b:93:79:4c:52:67:15:97:28:
48:cd:88:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNN8LRERmGPmDEnfS1epcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNzRmMjc3MDJhNjJjNmI2MjdjNWVhNzBiOTZmZDI5ODIz
NjQ1MjIwHhcNMjYwNTEyMjIwMDQxWhcNMjYwNTEzMjIwMDQxWjAzMTEwLwYDVQQD
Eyg2MzdkYWFmZTk4MWQwY2RkZWE3ZjI2OTQ1ZGVkNzgwNGQyMGE1YTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WF4JqFrd5C98fCT7CvJ9nmkdwhw
7zWY7qK5/xjXn6/PqSCWPbzlRfYgqbXcII0RLnPBllvbF5pazK/APTv5PNZISFwU
NwqHZv2tgmqvnH97m6dbhPF32bGIrJhLc7VxFH5rRYCNZEixlIlofglAEdZD/hMk
kBU1AX3GG5Mm0PPpSok5LWEfTLY5/RLS1ZjXHAaMBVrggB7NiRqhM4tFZ91JLa1i
KxKljN6pnOsr+Gvty22KeZTxqHq1WTNKgACWuCF+gIm2K+uFSUIzs4ySnfKgKU/3
Iv98/2SAbY0kfhkSG44LJGMIkTQUfzFnWR0fhq4IRC+8HPUMC+REeD8n0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGN9qv6YHQzd6n8mlF3teATSClqXMB8GA1UdIwQY
MBaAFBp08ncCpixrYnxepwuW/SmCNkUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iNzFhZjItNjY5Ny00ZDA3LWFkYzUt
MTQ1MGVmYmQ5ZTM1LzEvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9iNzFhZjItNjY5Ny00ZDA3LWFkYzUtMTQ1MGVmYmQ5ZTM1
LzEvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARG+5blE5
Y6pSTlWJz9l1zi2Dl3c2Tpe9ITK7yPpEFqwl18l3uSGQbLnEtkerrQVdFlo5B1Ix
4Ia5yGjiYcJvJbVqyjFjXOj6yrG/H3WMaZvywYVzlubrdBpsBPewV2S8SxfXSEDk
o/xR6g2mdiIkfSPxFL9OyozI4L/iU/t/+VgVRsjbSqValKZC0fGpsfx/GjOzdumU
uiPx5dwHxFS0YwVzK76UZ/f1FVba8s36tuJvZtszIes/s6oTWQiNvBJCPeCd8g1u
UpBbqKs/Ghz8cl4vzzZnN8yrkbh4ZHAIvpKT2sxjTSh0w+Gtz8K/5MlsJROhi5N5
TFJnFZcoSM2Iwg==
-----END CERTIFICATE-----
Generated at Wed May 13 06:33:10 2026 by rpki-client