Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: Fc0SkaZ8eHazPXqZyMciJO5qYVQ6I40B3ghUbtrsiYo=
Subject key identifier: 7B:2F:CE:8B:BA:52:D7:07:B5:98:80:45:12:56:03:7D:56:0B:EC:93
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 01A0E10715BCB8B0640E13911AA360B29D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: 064C
Signing time: Sun 27 Sep 2026 04:02:12 +0000
Manifest this update: Sun 27 Sep 2026 04:02:12 +0000
Manifest next update: Mon 28 Sep 2026 04:02:12 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: DeLiFINAUN4S2Pg3iPu17frU9EmgmhlKesVBfd9zUNc=)
2: OalRphnjMBSS6Np5-PPkgZFPsWE.roa (hash: tykpnTBSrACbV7VF5IpAU/9U1wStTD0WGueGsOwXxHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:07:15:bc:b8:b0:64:0e:13:91:1a:a3:60:b2:9d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: Sep 27 04:02:12 2026 GMT
Not After : Sep 28 04:02:12 2026 GMT
Subject: CN=7b2fce8bba52d707b59880451256037d560bec93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:f4:f2:04:09:cf:5a:82:4b:0c:d7:4c:c6:
9d:7e:fd:e1:1f:5c:d9:62:85:16:ef:92:15:46:83:
77:22:13:fe:ac:c8:a2:3f:54:0b:06:4a:db:e4:2c:
54:c9:cc:6a:5e:6e:e8:5b:df:97:f0:ab:e3:15:3d:
71:52:16:58:b3:fc:25:eb:17:f9:50:ae:31:43:a7:
51:a8:73:96:44:15:78:b8:77:59:73:eb:a2:40:26:
ed:08:eb:53:ff:4e:13:67:4d:04:6c:b6:f0:79:43:
46:32:2d:b3:fd:01:5e:85:cf:78:2c:30:ec:4d:52:
b2:3e:ca:46:03:8d:1f:06:2c:9c:22:89:8c:ab:b9:
0b:95:bf:91:fb:a8:17:02:d8:90:9a:42:71:1e:ac:
f8:da:c4:dd:5e:d2:f7:90:e2:b3:1a:c2:27:ca:cf:
c4:55:31:b4:bf:3e:86:94:12:6a:82:71:5d:c2:47:
b5:ab:88:ac:00:2a:2c:69:9f:30:0a:e9:fb:a2:38:
77:6b:34:2d:da:86:db:98:84:79:fe:a0:32:b3:5d:
82:4a:b8:31:6d:95:6e:be:32:b3:85:f9:9c:45:4a:
50:40:c7:ff:94:b5:db:06:3a:be:22:8c:93:2b:12:
c8:dc:0b:13:7e:35:69:1a:6a:2c:12:ec:71:a4:2f:
21:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2F:CE:8B:BA:52:D7:07:B5:98:80:45:12:56:03:7D:56:0B:EC:93
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e1:49:ff:70:7b:0d:a8:45:13:9a:c1:be:4c:5d:1d:85:10:
5d:d6:a2:fb:d7:00:91:2e:e6:1e:55:ea:f6:37:0b:46:1f:22:
fd:20:c9:92:59:d8:ff:8f:ca:fc:77:84:d4:19:13:06:bd:b3:
67:84:5e:59:cd:4d:3b:c0:7d:3b:f0:17:24:ba:81:79:b4:02:
9b:af:19:51:f5:77:d3:70:4d:d0:f9:82:35:fd:81:da:e3:19:
52:4d:3a:37:8b:8f:41:c3:a4:6e:cb:50:13:d0:e8:d6:d7:63:
7d:fe:e3:42:2e:10:72:f4:61:26:8d:8b:59:eb:18:d3:1e:8b:
5c:dd:5d:e7:eb:45:f3:a2:3a:ab:e7:d2:0c:9f:81:4e:fc:f6:
b8:fb:57:8b:46:22:36:fa:46:59:73:67:df:14:ed:d6:33:dd:
28:3e:11:0d:94:4f:49:90:54:e2:49:38:90:3e:1d:01:e8:25:
89:a3:a2:f3:d2:74:a0:0b:a7:cc:0a:7e:5d:fc:ec:08:57:df:
00:1f:09:2f:88:a9:10:73:26:2f:bf:02:15:5f:5a:7e:9f:2d:
16:cf:63:2b:40:97:32:3b:46:40:aa:a1:b0:ba:6e:c9:d6:63:
ea:20:f2:e3:6a:22:40:1b:d9:b3:b1:cb:0c:3a:2c:a9:b0:86:
37:b7:d1:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhBxW8uLBkDhORGqNgsp0oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNzRmMjc3MDJhNjJjNmI2MjdjNWVhNzBiOTZmZDI5ODIz
NjQ1MjIwHhcNMjYwOTI3MDQwMjEyWhcNMjYwOTI4MDQwMjEyWjAzMTEwLwYDVQQD
Eyg3YjJmY2U4YmJhNTJkNzA3YjU5ODgwNDUxMjU2MDM3ZDU2MGJlYzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmff08gQJz1qCSwzXTMadfv3hH1zZ
YoUW75IVRoN3IhP+rMiiP1QLBkrb5CxUycxqXm7oW9+X8KvjFT1xUhZYs/wl6xf5
UK4xQ6dRqHOWRBV4uHdZc+uiQCbtCOtT/04TZ00EbLbweUNGMi2z/QFehc94LDDs
TVKyPspGA40fBiycIomMq7kLlb+R+6gXAtiQmkJxHqz42sTdXtL3kOKzGsInys/E
VTG0vz6GlBJqgnFdwke1q4isACosaZ8wCun7ojh3azQt2obbmIR5/qAys12CSrgx
bZVuvjKzhfmcRUpQQMf/lLXbBjq+IoyTKxLI3AsTfjVpGmosEuxxpC8hGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsvzou6UtcHtZiARRJWA31WC+yTMB8GA1UdIwQY
MBaAFBp08ncCpixrYnxepwuW/SmCNkUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iNzFhZjItNjY5Ny00ZDA3LWFkYzUt
MTQ1MGVmYmQ5ZTM1LzEvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9iNzFhZjItNjY5Ny00ZDA3LWFkYzUtMTQ1MGVmYmQ5ZTM1
LzEvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOFJ/3B7
DahFE5rBvkxdHYUQXdai+9cAkS7mHlXq9jcLRh8i/SDJklnY/4/K/HeE1BkTBr2z
Z4ReWc1NO8B9O/AXJLqBebQCm68ZUfV303BN0PmCNf2B2uMZUk06N4uPQcOkbstQ
E9Do1tdjff7jQi4QcvRhJo2LWesY0x6LXN1d5+tF86I6q+fSDJ+BTvz2uPtXi0Yi
NvpGWXNn3xTt1jPdKD4RDZRPSZBU4kk4kD4dAegliaOi89J0oAunzAp+XfzsCFff
AB8JL4ipEHMmL78CFV9afp8tFs9jK0CXMjtGQKqhsLpuydZj6iDy42oiQBvZs7HL
DDosqbCGN7fRIg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:17:07 2026 by rpki-client