Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
File: GnCnIdG1PtkdhbbFNaxytJBPnD0.mft (raw, json)
Hash identifier: 3inuuBd5txmKa93Txxx5pvPwVhyKi6U/ivZLqyHLbw8=
Subject key identifier: 16:EC:EE:EF:61:36:EC:C0:39:04:1E:01:55:D0:4C:6F:27:19:12:34
Authority key identifier: 1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
Certificate issuer: /CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Certificate serial: 019CB2EDDF431B4E4BAB4B3AFE450CF92C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
Manifest number: 0169
Signing time: Tue 03 Mar 2026 09:00:59 +0000
Manifest this update: Tue 03 Mar 2026 09:00:59 +0000
Manifest next update: Wed 04 Mar 2026 09:00:59 +0000
Files and hashes: 1: GnCnIdG1PtkdhbbFNaxytJBPnD0.crl (hash: IEJs2OlfzSpPRxHbsft6e0Yur08oAD/0pHHLPXHnOao=)
2: OQhQ0ERvOy6cUfsHeSPtDIxPLy0.roa (hash: ZP0fbWow0Y5xEJaJhTl8fSb35nDS4+b7RNqWl3nyzwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b2:ed:df:43:1b:4e:4b:ab:4b:3a:fe:45:0c:f9:2c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Validity
Not Before: Mar 3 09:00:59 2026 GMT
Not After : Mar 4 09:00:59 2026 GMT
Subject: CN=16eceeef6136ecc039041e0155d04c6f27191234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:19:7c:b4:2b:d6:a3:fa:e6:6d:76:e6:a1:
d6:fc:fd:1e:e4:3f:d4:98:30:9b:cf:f0:65:d7:d9:
a3:da:2b:04:40:25:9e:3d:8c:0d:df:32:48:28:fc:
20:98:fe:f8:7c:c6:0b:10:13:32:83:c1:2f:7f:6c:
57:5a:a0:2e:2a:3a:29:27:15:34:27:3e:ff:8e:51:
c2:95:d1:0d:26:e6:d8:74:d0:7a:c1:15:eb:56:05:
fe:a3:21:80:5c:f4:5e:3d:e7:3e:fd:57:8d:93:86:
d1:79:c5:83:90:82:0e:9f:e3:91:0c:50:ff:b4:75:
6b:59:57:ed:8f:8e:54:15:02:f7:e7:15:4c:e2:3d:
e0:b1:ec:a5:87:ef:3f:3f:b1:b1:20:4b:1f:e9:af:
5d:ea:10:43:fb:2e:6c:9d:a1:f1:e3:64:13:9e:c4:
a8:df:a3:e8:27:4f:f3:f5:0f:08:c7:c2:fc:55:af:
13:ae:77:ac:25:ae:ea:e4:13:03:82:6a:5f:dd:60:
45:a7:c7:42:3f:ee:61:ea:6a:95:f0:b0:67:d4:c0:
d2:04:f9:79:b0:1a:6d:5a:ae:78:b3:ad:b5:f3:51:
52:36:16:25:e3:8e:60:74:67:9e:b3:0e:c3:ba:db:
46:1c:32:36:9f:b8:7a:66:6c:a6:a3:02:be:35:a8:
d2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EC:EE:EF:61:36:EC:C0:39:04:1E:01:55:D0:4C:6F:27:19:12:34
X509v3 Authority Key Identifier:
keyid:1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:74:03:25:77:7d:76:d4:74:d1:35:5e:ee:69:a5:9e:53:a1:
a1:75:b7:ca:11:99:47:ca:00:5d:87:20:e6:37:6b:7d:27:19:
e4:a3:4b:9e:45:76:8e:ca:33:05:43:bb:8b:2e:d3:e8:84:4f:
1f:5c:bc:be:15:ee:9f:40:e3:f8:29:b9:be:b8:24:01:91:16:
16:9f:6a:2d:f7:2f:08:cd:05:06:8c:4d:4f:d0:4f:cb:13:ec:
1c:92:68:0d:29:0d:03:3f:f9:10:d8:9b:93:5c:de:8a:4b:22:
c9:d4:3a:70:13:a8:58:9b:34:3c:05:be:6b:19:ed:39:47:9e:
cd:77:ac:6d:3a:b4:f6:e4:30:24:a0:46:52:59:2e:4f:e1:71:
1e:df:27:54:b1:68:1c:3b:4b:46:8f:0a:04:a6:fc:a6:30:a7:
2c:ed:db:09:16:f0:88:d7:75:74:55:3c:01:af:3b:72:c6:e3:
28:08:90:0b:82:8c:ce:b0:50:67:48:a4:bf:44:32:1a:fc:8c:
34:71:05:79:03:6d:f0:dd:56:71:5a:c6:6a:9e:8f:11:58:4d:
5d:33:ff:27:94:c9:e8:ec:06:7f:94:09:54:92:c0:cf:02:6b:
9e:82:63:77:69:67:34:4d:aa:cc:d1:53:a3:df:93:86:ba:bc:
6a:5d:97:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 16:56:51 2026 by rpki-client