Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
File: GnCnIdG1PtkdhbbFNaxytJBPnD0.mft (raw, json)
Hash identifier: VouO2zIZP0epNVZbPnQWM2dPktU3QJhhs96q71cirQ8=
Subject key identifier: C0:2B:23:34:3F:5C:FE:87:5F:5E:FE:60:50:63:4A:A2:EF:72:7D:39
Authority key identifier: 1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
Certificate issuer: /CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Certificate serial: 019F3227CB907EA82F60B80E97C9E7C8866A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
Manifest number: 02B4
Signing time: Sun 05 Jul 2026 12:01:36 +0000
Manifest this update: Sun 05 Jul 2026 12:01:36 +0000
Manifest next update: Mon 06 Jul 2026 12:01:36 +0000
Files and hashes: 1: GnCnIdG1PtkdhbbFNaxytJBPnD0.crl (hash: ZByt2E9QUnfzha8L7n3ErJrKHGpMxec3esjhX0aPaN8=)
2: OQhQ0ERvOy6cUfsHeSPtDIxPLy0.roa (hash: ZP0fbWow0Y5xEJaJhTl8fSb35nDS4+b7RNqWl3nyzwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 07:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:32:27:cb:90:7e:a8:2f:60:b8:0e:97:c9:e7:c8:86:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Validity
Not Before: Jul 5 12:01:36 2026 GMT
Not After : Jul 6 12:01:36 2026 GMT
Subject: CN=c02b23343f5cfe875f5efe6050634aa2ef727d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4a:bb:cf:00:bd:4e:14:1d:47:dc:45:34:ef:
c2:a0:86:3a:3b:1c:24:aa:c1:ce:98:77:22:98:3a:
5e:77:78:dd:76:37:01:c6:df:23:39:0e:02:7c:5f:
31:26:b8:bd:c5:65:38:1c:7a:2e:7d:dc:b5:9b:6c:
3d:e3:4c:df:d2:05:80:41:a2:9e:49:2d:1b:8d:5e:
94:db:7e:08:99:f2:20:59:3f:bb:c2:77:90:06:bf:
80:3a:94:54:af:1b:25:21:0b:da:2f:42:f7:b3:00:
98:a0:bc:70:32:ad:74:e4:9b:b6:d9:b6:78:15:c3:
f0:f3:bf:c1:c4:c7:37:4a:4f:6b:de:7f:e8:30:17:
61:05:97:8b:54:e1:91:33:0e:ff:3b:69:91:1f:10:
c1:64:03:25:d4:84:01:41:d4:f4:d0:75:fe:4b:73:
4e:3e:8c:81:d5:29:be:27:a3:c6:d8:a2:2e:04:78:
f1:d9:bc:be:23:df:31:06:0b:35:a7:f1:e6:22:0d:
39:87:36:66:f3:7f:29:af:e5:25:37:f7:08:58:9f:
fc:23:3e:b8:22:fd:09:fb:18:0d:29:3a:b8:d2:5a:
1d:fe:70:2f:eb:a4:7b:99:05:d9:54:c2:0b:47:9c:
28:1a:55:5b:a7:e2:4e:4b:c2:3f:7a:da:91:77:7c:
fe:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2B:23:34:3F:5C:FE:87:5F:5E:FE:60:50:63:4A:A2:EF:72:7D:39
X509v3 Authority Key Identifier:
keyid:1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:29:65:0b:b4:da:58:2c:c6:3e:ca:b8:94:9c:8d:d2:6f:bc:
bf:b5:88:95:cb:48:44:72:be:1b:da:07:76:b8:c5:0a:c7:c3:
24:92:6f:1a:73:61:cc:6c:5a:5b:ac:1b:0a:e9:2b:61:42:5f:
84:0c:ba:20:46:ae:1e:04:73:b8:3e:9f:c4:60:d8:fc:54:2b:
3c:ee:86:7d:4f:73:3e:76:37:93:23:73:64:27:62:b6:9a:99:
12:6c:f6:b3:2b:02:7e:f4:2d:43:62:f4:12:6f:d8:e3:9d:a6:
3a:dd:1b:32:fd:8e:7c:49:1a:56:ee:54:65:b2:13:9f:5d:e3:
79:f7:59:51:7c:a3:0a:47:ca:4c:05:5c:14:90:29:f9:e7:70:
c6:2a:32:b5:27:7e:99:ae:15:2b:a7:b2:1c:57:48:89:f9:c8:
21:06:57:60:eb:aa:81:f4:98:f6:84:28:36:89:3e:5b:bb:54:
a5:f5:75:3c:c8:ce:e1:af:e0:46:86:05:6a:8d:18:6d:0b:81:
a4:c1:0d:dd:83:63:3b:4f:34:22:b1:df:e2:56:98:d6:f0:69:
5a:be:53:4d:f1:11:65:56:91:04:1e:5e:5c:3f:a6:65:6c:ef:
7a:5d:c0:40:a7:25:d9:21:78:94:34:97:e8:4a:16:cb:57:86:
4e:c8:0b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 13:51:45 2026 by rpki-client