Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
File: GnCnIdG1PtkdhbbFNaxytJBPnD0.mft (raw, json)
Hash identifier: GCUzXsk2oxxvdG+KMY1yUofk3seW8IdwR+/kc5HD8LM=
Subject key identifier: 00:99:22:54:1A:3C:1D:91:5C:84:EF:13:E5:93:CB:5D:D3:C9:5E:0B
Authority key identifier: 1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
Certificate issuer: /CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Certificate serial: 01A055C3603B82B0202D052E7BA08AC8B8BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
Manifest number: 034B
Signing time: Mon 31 Aug 2026 03:01:02 +0000
Manifest this update: Mon 31 Aug 2026 03:01:02 +0000
Manifest next update: Tue 01 Sep 2026 03:01:02 +0000
Files and hashes: 1: GnCnIdG1PtkdhbbFNaxytJBPnD0.crl (hash: 7Oxtdk/Ur5rnHG7UOeUk+StWjiUir31BnnNHsw3lOlM=)
2: OQhQ0ERvOy6cUfsHeSPtDIxPLy0.roa (hash: ZP0fbWow0Y5xEJaJhTl8fSb35nDS4+b7RNqWl3nyzwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:55:c3:60:3b:82:b0:20:2d:05:2e:7b:a0:8a:c8:b8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Validity
Not Before: Aug 31 03:01:02 2026 GMT
Not After : Sep 1 03:01:02 2026 GMT
Subject: CN=009922541a3c1d915c84ef13e593cb5dd3c95e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:61:65:45:dc:b0:06:68:35:98:5b:ea:b5:cc:
fa:5d:50:df:82:24:f8:e2:8c:99:36:5e:57:10:12:
7a:a4:b0:92:d1:69:c2:bc:31:1b:9f:76:f0:cf:c1:
b7:35:5c:61:55:9e:cd:71:41:ad:77:d6:8d:8a:44:
9d:66:7a:2f:37:ca:80:02:6a:22:40:6d:f5:71:ac:
87:c7:82:41:2a:50:3c:35:1b:e1:9e:81:01:17:6e:
26:f0:35:13:00:85:80:c7:0c:b5:f3:36:36:db:8c:
f9:ec:d2:9b:e1:67:eb:2c:e4:1c:c8:5d:6e:67:67:
a8:cc:0c:fd:df:fe:c4:18:9b:84:e9:60:9f:b0:0a:
eb:ad:63:9d:7e:b5:57:94:3f:87:ff:7e:6c:d5:ac:
d0:0e:23:41:d0:1a:0d:29:85:79:57:72:cb:33:0d:
99:05:41:62:e2:de:55:e9:eb:1b:d3:f3:b6:97:5c:
85:82:4f:bd:86:41:3d:29:60:cb:3e:f7:0a:43:67:
4e:2c:84:84:a7:b7:04:72:35:39:2b:c5:58:ec:e8:
c4:2e:31:4e:92:be:1e:8a:80:5c:8b:0b:aa:d5:62:
9b:93:cc:8a:64:c0:5e:8b:7d:6f:fb:99:04:e7:10:
72:c0:d2:93:7b:89:20:0f:d6:36:86:93:e8:bb:89:
42:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:99:22:54:1A:3C:1D:91:5C:84:EF:13:E5:93:CB:5D:D3:C9:5E:0B
X509v3 Authority Key Identifier:
keyid:1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0c:d8:e6:0b:fc:68:18:c7:57:fd:26:a8:a1:2c:9a:70:8e:
98:31:25:44:0a:18:87:ec:94:a8:fd:b6:05:aa:84:5d:12:17:
02:5a:79:ea:2c:61:4d:b3:b4:6d:f9:9f:c5:5a:bb:34:2c:6a:
76:30:11:1a:52:d7:7c:f5:04:49:cf:22:fd:61:4a:5c:6c:f2:
b3:d6:a1:0b:1b:a9:2f:6c:80:89:55:a2:33:d4:7d:ef:6b:d2:
8b:99:73:3f:99:fb:e7:1f:af:8c:74:7a:46:2f:38:74:b4:89:
04:dd:bc:74:17:9b:d4:8f:67:c9:5a:e6:1e:64:36:4c:11:4c:
cf:f4:95:c1:5c:f3:33:d8:e4:6d:58:6f:44:7b:67:c7:59:50:
1a:a8:2c:06:ec:fa:72:53:53:04:c8:49:67:48:da:80:1d:cf:
c9:a9:62:38:13:7f:15:cb:68:b0:cc:b7:5a:3d:fc:a4:49:3a:
36:5b:21:23:43:f7:49:41:ad:0b:9d:75:bf:67:c3:e2:ae:b3:
7e:65:0b:9d:df:6b:31:c3:6f:65:aa:cc:a2:30:20:64:44:89:
59:84:65:15:25:19:12:c0:cc:7d:a4:44:7b:24:ac:87:29:03:
4e:f8:bc:60:72:d4:df:cf:c9:62:11:28:fe:cc:07:32:cf:fa:
c0:c3:92:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:11:18 2026 by rpki-client