Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: bppkScqWjwWfWGFXCrKNt4pC6a2vpgdW+6N+KgNrmo4=
Subject key identifier: A9:E1:06:EA:04:FF:D3:D5:17:78:FC:A9:7E:E5:40:4A:6B:14:25:08
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 019F94DBDA73FFC4DB5D995801115544D8E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: 05A0
Signing time: Fri 24 Jul 2026 16:01:03 +0000
Manifest this update: Fri 24 Jul 2026 16:01:03 +0000
Manifest next update: Sat 25 Jul 2026 16:01:03 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: Mznxi9IS6oOmql3lYTC1NmBY+SIMbrgCbocg8PguNxc=)
2: OalRphnjMBSS6Np5-PPkgZFPsWE.roa (hash: tykpnTBSrACbV7VF5IpAU/9U1wStTD0WGueGsOwXxHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:da:73:ff:c4:db:5d:99:58:01:11:55:44:d8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: Jul 24 16:01:03 2026 GMT
Not After : Jul 25 16:01:03 2026 GMT
Subject: CN=a9e106ea04ffd3d51778fca97ee5404a6b142508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:4a:87:28:0e:5e:f6:a5:41:ad:13:4d:d5:
6e:da:28:69:75:a9:33:a9:ff:62:e8:14:d9:a3:9e:
42:22:d1:ab:77:dd:8a:8a:82:55:24:62:d7:64:f4:
3f:2a:c5:7e:26:b9:4a:48:5d:f1:ad:2a:b7:a0:62:
5f:f3:58:95:83:6d:58:58:2d:4a:ca:c1:38:6d:39:
a6:05:2c:fc:b3:6c:ed:a4:b4:6b:c3:0f:35:da:c6:
c5:53:5f:51:7c:46:fb:0c:7c:34:6e:05:72:67:5d:
8b:bf:78:51:b8:83:11:a0:11:84:49:4b:f4:c1:26:
8d:59:70:90:7e:02:98:5a:19:06:6a:de:2b:a7:69:
6b:2d:96:be:24:d1:26:8f:4a:fa:74:bb:c2:bc:e8:
e7:0f:37:c7:9a:af:67:e8:71:b3:b9:87:b7:b2:9f:
e9:f3:12:36:cd:29:dd:fd:94:d9:2d:c6:f2:7b:23:
bc:09:79:cd:fc:43:12:2f:08:b3:6e:64:82:9b:8b:
65:ab:88:12:7d:c5:06:90:78:51:3c:6a:d2:01:06:
36:19:6f:c2:06:ec:fc:41:9d:ab:ce:57:0c:a2:e2:
e5:3f:4a:7b:e4:e3:58:40:f2:fe:eb:f8:7b:c2:c8:
55:f7:cd:78:fc:e6:f7:c5:5b:c1:57:65:d9:d9:71:
03:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E1:06:EA:04:FF:D3:D5:17:78:FC:A9:7E:E5:40:4A:6B:14:25:08
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2a:8b:8e:94:dc:d6:ea:d1:55:f8:47:47:ef:35:e4:cc:62:
e5:b8:c1:bb:1b:92:7e:1c:a5:7c:e0:2b:b6:53:c5:0c:be:06:
9d:fb:74:c7:bd:2f:01:bc:42:fa:41:de:af:56:9f:21:8c:f5:
d9:7e:b0:ad:39:8e:b5:c7:7c:56:42:36:fe:48:6b:af:c6:2b:
47:2a:f4:81:a7:4a:11:61:0f:5b:0b:da:75:8f:07:ec:d3:47:
7a:65:29:f5:ac:c8:67:90:b9:e6:19:e8:11:02:4e:f3:3f:a0:
c2:bf:ca:c5:c9:1e:b3:92:39:11:f2:d7:78:5f:f9:ed:eb:64:
5a:43:ac:32:4e:13:7b:28:86:fd:3c:36:fe:8c:a3:45:1f:87:
66:25:53:cf:59:60:78:b9:d6:f0:70:98:30:d3:0e:d8:dd:09:
11:0b:f9:40:0b:42:4f:67:c7:ce:2d:c0:23:e2:af:f4:28:af:
a6:c9:ac:ff:67:9a:dc:47:96:da:b8:ae:6a:09:85:94:62:f8:
05:18:63:5a:3f:1d:87:0d:21:24:c8:73:30:d1:2e:f6:f8:f2:
12:db:4a:d2:5b:67:b7:01:fc:36:bc:b8:3c:f1:2f:1f:69:b3:
76:5b:22:2a:31:57:1e:4f:d5:c6:ee:4a:ac:f5:e7:ad:82:12:
ff:cc:07:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:07 2026 by rpki-client