Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
File: GnCnIdG1PtkdhbbFNaxytJBPnD0.mft (raw, json)
Hash identifier: 0g8m52wARUHOVkeVqmot96U5JWZEkMjyX4Mp8yZcevM=
Subject key identifier: 16:46:ED:0E:87:0B:DE:7B:CE:AF:0E:6A:A7:EE:07:EE:9C:A5:0B:A5
Authority key identifier: 1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
Certificate issuer: /CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Certificate serial: 019F303919369ADFA644B7BA72F67BE3C124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
Manifest number: 02B3
Signing time: Sun 05 Jul 2026 03:01:16 +0000
Manifest this update: Sun 05 Jul 2026 03:01:16 +0000
Manifest next update: Mon 06 Jul 2026 03:01:16 +0000
Files and hashes: 1: GnCnIdG1PtkdhbbFNaxytJBPnD0.crl (hash: nsF+o0qUB50Kx7iNXrot6UDFurLICy9kKINQmG4a9So=)
2: OQhQ0ERvOy6cUfsHeSPtDIxPLy0.roa (hash: ZP0fbWow0Y5xEJaJhTl8fSb35nDS4+b7RNqWl3nyzwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:30:39:19:36:9a:df:a6:44:b7:ba:72:f6:7b:e3:c1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Validity
Not Before: Jul 5 03:01:16 2026 GMT
Not After : Jul 6 03:01:16 2026 GMT
Subject: CN=1646ed0e870bde7bceaf0e6aa7ee07ee9ca50ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8b:5f:e2:4a:1d:d7:00:00:a1:e2:90:f0:65:
14:46:32:39:3a:c7:24:01:8d:0e:be:95:e4:a6:72:
b1:fb:96:e0:85:98:54:39:33:f6:2b:ca:5e:e1:c2:
f3:e7:74:0d:c7:65:8b:9f:4a:0c:e0:59:97:ec:36:
ef:47:47:7b:6d:5a:b2:91:a6:07:2a:ba:86:c1:15:
b5:ec:25:e6:1b:3a:b9:58:a0:56:1f:29:65:1c:5e:
cb:69:8a:11:3e:95:ee:a5:4c:2d:04:b6:ee:c5:bf:
80:d1:f2:15:6d:4f:70:54:bd:3c:b0:cf:c5:2d:9d:
c6:74:ce:fb:33:30:d3:9a:d5:be:4a:9e:58:91:03:
4f:36:4c:4f:37:2d:2e:ff:af:51:74:03:28:42:ce:
69:3a:a7:67:8f:72:3f:18:8a:02:91:c9:89:3b:89:
d6:ec:89:3a:e7:01:cf:a9:15:c4:fb:74:97:f5:fc:
6e:e6:22:99:68:62:0b:c0:01:54:81:4c:26:48:f7:
c5:7a:e9:c5:d6:32:ec:cd:4c:d6:ad:a8:2c:97:d0:
7d:4e:15:72:1a:4e:f4:1a:06:31:9c:15:d9:aa:b0:
2d:95:ef:5a:90:8e:da:16:33:ca:c4:31:54:47:48:
3d:e6:1a:16:65:d3:8e:90:1e:76:49:ce:68:34:94:
cd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:46:ED:0E:87:0B:DE:7B:CE:AF:0E:6A:A7:EE:07:EE:9C:A5:0B:A5
X509v3 Authority Key Identifier:
keyid:1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:08:b2:f4:e2:15:3b:10:11:3e:66:f5:7d:93:d1:90:d5:10:
e8:bf:fb:06:6f:3d:ee:11:ec:1f:7e:1b:8f:10:a4:be:48:5d:
80:97:66:b9:d6:a4:31:18:f0:73:b5:08:a8:91:d9:29:2c:c3:
55:78:c3:f3:39:b8:88:4d:b0:ce:43:f0:82:1f:e6:e9:6f:a1:
a7:67:fb:55:65:b1:9d:7e:64:34:6f:75:a4:41:72:87:8f:61:
1a:0b:17:d7:db:da:51:a9:ce:14:2a:23:46:9c:c7:61:58:d8:
07:f5:8d:0a:9d:07:34:d2:10:ed:dc:da:bd:99:ed:ed:1e:5a:
7d:66:67:f8:a7:41:1c:ad:02:fa:1d:f2:9c:7b:f0:10:e9:b7:
90:3e:e7:df:46:a4:d8:83:cf:40:da:ac:90:b8:4d:47:9e:be:
46:23:bc:dc:3a:b3:cc:89:40:68:bb:69:c6:8e:31:55:4a:8b:
b5:73:f2:5c:b3:db:eb:f2:4e:10:fd:8c:1d:6d:1e:22:82:d2:
be:6d:59:0f:54:4a:b1:96:db:2c:43:b5:ef:f4:33:b2:fe:06:
40:3b:b1:4d:33:a6:23:a7:89:84:64:89:d9:90:cb:96:60:19:
9c:7d:10:f1:a9:23:ae:2b:b4:ed:63:9c:e4:20:1c:98:8d:97:
53:f2:88:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 12:36:25 2026 by rpki-client