Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
File: GnCnIdG1PtkdhbbFNaxytJBPnD0.mft (raw, json)
Hash identifier: EGd2HictiNp9asNqvKvqTLgZU408xwgskOApEvbRExA=
Subject key identifier: FE:AA:8F:50:A2:4D:7D:FF:AF:6B:86:09:87:CA:3E:4E:29:95:21:41
Authority key identifier: 1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
Certificate issuer: /CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Certificate serial: 01A169EBAB77711099CDE9DC8D50F1582820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
Manifest number: 03DA
Signing time: Fri 23 Oct 2026 18:00:14 +0000
Manifest this update: Fri 23 Oct 2026 18:00:14 +0000
Manifest next update: Sat 24 Oct 2026 18:00:14 +0000
Files and hashes: 1: GnCnIdG1PtkdhbbFNaxytJBPnD0.crl (hash: RB+5WuDCGx/dpgAFEZgi0vmd02YRyPBXbCgAd33QIw0=)
2: OQhQ0ERvOy6cUfsHeSPtDIxPLy0.roa (hash: ZP0fbWow0Y5xEJaJhTl8fSb35nDS4+b7RNqWl3nyzwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 18:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:eb:ab:77:71:10:99:cd:e9:dc:8d:50:f1:58:28:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Validity
Not Before: Oct 23 18:00:14 2026 GMT
Not After : Oct 24 18:00:14 2026 GMT
Subject: CN=feaa8f50a24d7dffaf6b860987ca3e4e29952141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:5d:0f:9b:83:15:e1:30:a2:b4:aa:30:b0:
72:08:f3:1c:da:a1:28:04:9c:57:a8:bc:f4:29:ef:
80:46:e7:a5:ab:d9:84:35:4c:64:92:0a:94:7b:93:
10:1c:8b:84:56:68:e8:2c:7e:03:28:22:b4:b9:dd:
c7:bd:5b:67:bf:5f:1f:85:dc:33:4a:8c:bb:56:82:
cb:2b:49:49:17:91:05:cf:d0:6f:cf:19:ed:13:3b:
98:04:99:ab:00:13:7e:0d:5f:cb:24:e6:aa:57:9e:
aa:96:ac:49:84:20:08:54:e3:b0:82:77:10:f1:86:
23:d7:ca:06:f3:b9:96:f7:c6:1e:31:65:cb:22:e5:
09:12:e7:b9:bc:23:d4:70:07:5e:78:34:cb:9d:7b:
8d:84:8e:1e:5e:5a:5b:10:6e:50:1b:d0:b8:ad:32:
72:08:9d:96:38:39:0f:61:85:ed:c7:5b:5f:b9:60:
bd:3b:3d:98:ca:37:e1:c4:54:1e:ab:42:1f:b3:c3:
cb:78:7d:fa:69:af:a9:12:ca:c2:de:f9:3f:e8:9f:
c8:6d:21:59:70:13:a4:46:44:c7:cb:e3:14:3b:8d:
2d:fc:08:4e:77:72:95:1c:24:a6:c5:78:51:46:1a:
43:d5:df:52:a8:6e:6b:51:4b:29:89:32:81:11:cb:
64:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AA:8F:50:A2:4D:7D:FF:AF:6B:86:09:87:CA:3E:4E:29:95:21:41
X509v3 Authority Key Identifier:
keyid:1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e5:9d:87:c1:7a:b1:48:5f:14:2e:82:89:eb:2d:8a:1b:d4:
75:69:e6:b7:d9:b9:1c:d1:90:a1:de:26:dc:c4:b5:7b:18:bc:
a3:ec:8b:00:31:ea:57:24:dc:04:a6:e9:8c:91:00:95:e2:2b:
21:3c:9a:0a:a9:d9:16:21:31:34:a9:09:b1:53:ec:9b:97:48:
b8:e2:86:2b:61:95:ff:3e:13:03:18:97:ca:10:7b:53:4b:bb:
1c:4b:80:8f:b3:2d:00:b0:3f:1e:8a:50:e8:03:7a:a1:c1:55:
e8:9f:c2:02:77:72:92:b5:50:99:a4:f0:ba:20:3f:87:9c:08:
88:89:df:ff:c3:07:b1:86:b9:4d:01:42:0f:df:e4:77:37:ab:
5c:56:60:da:c3:4c:da:b9:6f:0d:8b:09:ff:aa:29:68:b1:d6:
45:b7:41:71:fb:b8:e6:19:86:ef:4d:ae:fe:f0:34:07:fc:0e:
43:78:60:5a:8a:64:90:07:63:71:21:a7:91:7e:6a:7f:f5:12:
43:e6:dc:82:48:56:29:d8:c5:cf:ea:7c:be:67:30:5d:87:a4:
57:f6:e4:81:ed:09:06:6a:78:9c:86:0f:69:13:fc:9b:49:35:
10:10:a3:a8:ef:68:13:e5:79:73:ee:42:80:77:0c:68:81:fe:
8b:ed:74:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 03:14:50 2026 by rpki-client