Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
File: GYNgTwg-WMPNGdOUgLqq3zihm2M.mft (raw, json)
Hash identifier: XsGQ82lUoJBBTKfEQrQX+LTLS0I28pDDw4iN2/wRBxQ=
Subject key identifier: 8F:01:11:3C:4B:67:49:0E:98:B1:06:40:E5:6C:78:5C:0E:47:91:3D
Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
Certificate issuer: /CN=1983604f083e58c3cd19d39480baaadf38a19b63
Certificate serial: 019D25BAC43644FC92F05FFFA18337A184C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
Manifest number: 0B10
Signing time: Wed 25 Mar 2026 16:01:30 +0000
Manifest this update: Wed 25 Mar 2026 16:01:30 +0000
Manifest next update: Thu 26 Mar 2026 16:01:30 +0000
Files and hashes: 1: GYNgTwg-WMPNGdOUgLqq3zihm2M.crl (hash: k2D/WpNOuNnFco5h3wHjyecrfTxkxuyRfGZ45ZoGgk8=)
2: oWw98f4bNM9LtIQxRub1EWETvac.roa (hash: aAOilAHbjhSIlksDdDQYiXq9fjYiWz1hB658OU9itjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:c4:36:44:fc:92:f0:5f:ff:a1:83:37:a1:84:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63
Validity
Not Before: Mar 25 16:01:30 2026 GMT
Not After : Mar 26 16:01:30 2026 GMT
Subject: CN=8f01113c4b67490e98b10640e56c785c0e47913d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7f:ee:c6:28:c7:d9:45:23:b1:44:9b:4c:bf:
de:ea:2b:b6:75:ba:64:62:fe:2f:0c:1f:b6:6f:08:
fd:82:7b:dc:00:9a:fc:40:a1:91:a3:62:3d:d4:5d:
d4:54:79:d1:03:6c:8e:a0:11:d1:4d:55:07:6f:a2:
e1:b1:b8:7b:5a:20:7d:46:1f:2e:b0:fb:2b:0b:fd:
e7:e4:3b:05:c1:d2:75:d9:c0:04:ba:15:7d:ed:44:
76:3d:a8:fc:de:ab:b5:45:99:07:57:fd:57:19:de:
2d:ee:fe:08:bd:08:7e:ff:fc:c6:0d:5d:b5:d6:2c:
b4:32:47:cb:d2:47:b1:8b:37:1b:54:89:6e:d2:e1:
e9:79:94:9f:a8:68:79:58:c3:06:85:9b:63:84:4a:
78:30:94:d0:83:2a:31:dd:38:77:e3:72:95:c1:8d:
8f:62:69:54:57:69:e7:d6:40:2f:63:fd:0b:01:a0:
b7:b3:b1:bd:75:c5:fb:bc:0c:6f:af:56:ae:18:37:
67:11:50:0e:d1:19:dd:c4:0e:ea:b8:52:ca:49:87:
24:0c:e2:ce:d3:5f:64:a3:76:56:ad:6f:3d:fb:a2:
13:a0:cd:b3:84:28:93:f9:1e:fb:b8:b7:d6:05:c5:
8c:3e:06:e9:cd:26:3f:e3:84:7b:36:9c:e8:d8:50:
4d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:01:11:3C:4B:67:49:0E:98:B1:06:40:E5:6C:78:5C:0E:47:91:3D
X509v3 Authority Key Identifier:
keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7c:98:26:95:7d:28:96:ea:62:07:e9:e6:fc:44:91:72:4e:
59:0f:d3:e8:f1:86:c8:f4:87:04:db:c1:11:91:29:90:bb:2c:
5c:21:b0:37:53:7c:0e:01:25:6c:1a:3b:08:3d:b5:f5:4b:3b:
67:0d:4e:72:5a:6d:31:03:b1:d1:d8:52:7b:5c:88:8c:e3:03:
23:81:e4:47:f9:cd:82:60:15:ce:ac:38:0c:a2:40:76:13:8d:
df:bf:7b:89:5b:ab:b9:8f:4c:51:43:61:b2:0e:d1:02:31:d8:
2e:71:bc:3e:c2:5d:e3:b4:94:70:20:c8:3d:e0:f5:4d:8f:09:
de:9f:56:34:ba:a0:b9:6f:50:ce:91:64:f8:07:85:da:cb:4a:
a8:ab:b4:55:09:d7:24:dd:c5:90:af:cc:7e:c1:04:6a:d1:49:
9a:64:72:a6:9e:03:fa:76:b2:77:f4:92:43:9f:b4:82:98:00:
56:8d:44:33:39:40:ba:9f:eb:b8:26:2f:9b:ed:af:31:f1:d9:
9a:cf:4f:dd:a9:41:da:79:14:a6:08:fe:13:74:e4:e9:9b:4d:
0e:ab:a5:17:3d:4a:90:9c:97:64:19:6e:ee:41:7f:b6:10:ab:
ec:e1:3e:ab:e9:23:40:e2:60:8b:ae:b0:15:87:a1:32:1a:39:
4a:e7:e3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:25:52 2026 by rpki-client