Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: 1mKQbvtQm/FiBkne25EfDT4g1mSHlEQvHsaB2aOc1Es=
Subject key identifier: 76:12:CC:B1:18:79:A6:CE:7D:27:3C:9E:95:9A:43:AD:F6:1D:31:71
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 019D2704CA188931CBA27C251DF885F413DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: 045E
Signing time: Wed 25 Mar 2026 22:01:58 +0000
Manifest this update: Wed 25 Mar 2026 22:01:58 +0000
Manifest next update: Thu 26 Mar 2026 22:01:58 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: uNpx29HmvgdMmfPgUu0G6WXMloPtlklyMZ3ef0V2RLw=)
2: OalRphnjMBSS6Np5-PPkgZFPsWE.roa (hash: tykpnTBSrACbV7VF5IpAU/9U1wStTD0WGueGsOwXxHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:ca:18:89:31:cb:a2:7c:25:1d:f8:85:f4:13:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: Mar 25 22:01:58 2026 GMT
Not After : Mar 26 22:01:58 2026 GMT
Subject: CN=7612ccb11879a6ce7d273c9e959a43adf61d3171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:92:b2:de:f9:bf:d7:39:06:8e:eb:6d:3c:6b:
26:32:48:e1:11:2c:20:b9:ee:03:93:24:05:5b:32:
f7:aa:2a:73:a3:f0:8a:69:f1:33:28:fc:8e:a4:36:
1e:fe:e2:3b:1c:e6:1d:ed:f8:30:dc:14:15:1f:d3:
14:95:d3:65:91:0d:8b:3e:94:55:a3:c9:f4:25:77:
0a:de:40:05:d8:4e:4a:63:d6:c3:66:bf:f3:56:6c:
32:81:08:17:43:04:47:de:f7:ef:22:9a:36:f8:50:
5e:b9:51:91:4c:c6:42:ae:58:f6:73:d6:27:41:7d:
ce:f7:d8:6d:81:e7:7c:13:c2:ce:05:8d:e7:9e:ee:
36:8a:24:65:71:95:1c:fc:bf:8a:c3:00:dd:ed:c6:
60:3d:ff:74:bd:48:93:d4:a7:bd:70:98:b6:44:f6:
9d:2e:4f:39:4d:33:c7:73:06:0f:04:9d:48:bd:a9:
bc:b0:b4:ea:41:ba:4e:7e:26:1c:57:de:29:0f:4c:
67:cb:1f:b6:16:14:88:19:c8:af:4b:93:37:55:2b:
c9:3b:5b:46:db:1f:1b:96:bb:e9:69:ed:dd:44:5e:
6b:e2:f9:14:f7:5a:ef:d7:44:0c:4a:37:e2:a6:ef:
0a:e6:ef:21:00:cb:02:bd:b8:da:83:be:de:fc:68:
56:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:12:CC:B1:18:79:A6:CE:7D:27:3C:9E:95:9A:43:AD:F6:1D:31:71
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:82:f5:14:95:55:c3:e4:1b:ac:9d:a4:3a:39:62:57:4a:6b:
9a:90:0d:05:11:69:97:18:7a:03:cf:ed:84:c0:28:33:e0:f8:
1c:c7:b5:98:42:d8:9c:fa:ba:d3:81:46:55:98:4a:94:83:d4:
20:a6:4b:8d:d2:ca:93:d0:75:4f:96:21:cb:e3:90:46:73:68:
73:8a:77:e0:be:6e:02:7d:d9:b0:55:af:ca:8c:74:d1:d2:23:
4a:85:19:91:23:9e:5d:6e:bc:04:1f:6e:75:54:9e:93:5c:a5:
0c:ae:66:e4:7d:1d:d1:60:26:eb:a1:08:b1:88:0e:17:dd:8e:
f4:b7:7b:68:19:e5:a1:be:8a:1f:60:2b:7e:ad:ca:1f:8c:70:
1f:c5:9b:ca:a1:43:20:9c:44:1e:b7:cc:e8:b4:ab:a2:8c:33:
e6:88:ff:7b:a1:5e:1e:a9:e6:32:9d:df:68:9e:3c:b4:f5:a2:
c2:e1:73:42:d4:cb:6d:5c:66:1c:65:0b:8e:f3:60:40:f4:ae:
dd:a5:b8:a7:bc:4f:ec:72:7a:1a:2d:ed:e6:79:5f:3a:ec:b8:
2e:23:b5:8d:57:35:f3:5c:f5:d1:36:51:df:3c:60:bb:9e:54:
97:52:1e:05:70:9b:7c:46:5e:5c:a9:a2:6c:da:9e:8f:66:85:
ef:57:8f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:06 2026 by rpki-client