Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
File: GnCnIdG1PtkdhbbFNaxytJBPnD0.mft (raw, json)
Hash identifier: or6WanrPcJ3Zx6AzFzIK94Ya0+e+htXbCJdru7Ij3rg=
Subject key identifier: 9A:51:DD:87:ED:B1:3A:DD:C7:FB:E0:74:84:2B:7A:AB:00:78:C0:3F
Authority key identifier: 1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
Certificate issuer: /CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Certificate serial: 019D9E88E8C7D729CEFD22253B37CB65168A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
Manifest number: 01E3
Signing time: Sat 18 Apr 2026 03:01:05 +0000
Manifest this update: Sat 18 Apr 2026 03:01:05 +0000
Manifest next update: Sun 19 Apr 2026 03:01:05 +0000
Files and hashes: 1: GnCnIdG1PtkdhbbFNaxytJBPnD0.crl (hash: P6yJ5OdLNVlBOGGii/mFv4m0lX4FawC2Py5IoVk1OKo=)
2: OQhQ0ERvOy6cUfsHeSPtDIxPLy0.roa (hash: ZP0fbWow0Y5xEJaJhTl8fSb35nDS4+b7RNqWl3nyzwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:88:e8:c7:d7:29:ce:fd:22:25:3b:37:cb:65:16:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Validity
Not Before: Apr 18 03:01:05 2026 GMT
Not After : Apr 19 03:01:05 2026 GMT
Subject: CN=9a51dd87edb13addc7fbe074842b7aab0078c03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:12:af:1d:36:bf:07:3a:f8:1a:95:2b:76:
43:9f:71:a2:2a:ad:bf:a6:cb:56:c6:a6:45:c1:3c:
73:a5:0a:45:ac:2b:b5:80:8c:a7:e7:c0:54:37:0f:
17:ad:86:ed:00:77:06:72:7a:50:9e:70:a8:2b:52:
7d:06:4c:97:f7:58:64:67:0f:b4:e6:65:65:8d:dd:
c7:1a:fb:71:f0:51:07:2f:5e:bd:ed:73:e3:cf:0c:
0a:f4:c1:d3:05:89:f1:4e:84:0a:d4:42:26:e8:f1:
94:c2:13:87:8f:98:4a:72:fb:f3:c1:d7:82:af:08:
7c:01:e4:20:b0:e9:f7:d9:1b:35:7d:59:cb:76:32:
4a:72:fc:e1:0d:bd:f8:11:30:26:e2:da:30:94:50:
91:e5:53:7b:82:55:10:13:f6:4d:7e:1d:99:48:9e:
4c:f5:86:32:73:48:f3:f2:c5:4b:b6:94:c5:3e:2a:
93:0e:0f:44:2d:87:e4:c8:71:78:5e:ed:ea:4b:71:
c5:d1:71:a6:2b:2c:31:5b:9e:59:59:fa:d6:8c:1d:
d0:b3:94:9f:98:b9:a1:ae:63:e6:44:a6:4b:68:aa:
dc:84:12:6b:50:ef:d5:3c:c9:0b:2e:a7:f7:56:62:
2c:8d:31:32:82:0f:26:f7:68:20:48:1e:64:da:24:
ac:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:51:DD:87:ED:B1:3A:DD:C7:FB:E0:74:84:2B:7A:AB:00:78:C0:3F
X509v3 Authority Key Identifier:
keyid:1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e7:31:84:9c:84:38:ca:84:9b:9e:35:d5:21:a5:2b:dd:b8:
08:e4:6c:8f:56:d4:b2:06:a3:42:4e:58:ac:50:34:2b:52:6c:
d2:83:e8:e1:ca:aa:e5:bd:bb:c3:13:d0:b9:c1:21:ce:ad:54:
50:6d:e1:81:5d:64:b5:cd:d3:27:62:ae:85:31:ed:6a:b9:e5:
60:ab:f6:77:cd:d9:1a:12:41:5b:3c:63:4d:61:c5:67:8d:b2:
4b:c5:15:43:87:84:63:0a:91:dc:e0:10:c1:47:39:2a:1b:cc:
4d:19:67:6f:46:55:ec:ae:e3:ef:17:21:9a:72:99:c9:2b:d6:
54:e1:90:46:12:bb:ec:38:1f:61:1f:dd:c2:95:b3:32:25:c2:
02:ab:22:64:59:ea:32:5b:d5:3b:74:8d:2d:bc:7a:52:3e:a9:
25:1f:cb:ea:20:db:f9:aa:bb:ed:7c:22:a5:41:8f:fc:6a:b2:
b9:3b:c0:90:3f:79:26:21:50:be:6d:94:36:69:fd:b0:a3:df:
9d:c7:c0:39:26:d6:8f:78:c3:79:27:71:24:9c:ea:e4:d6:13:
ba:51:dd:aa:fb:69:ac:e7:53:62:b1:51:c8:d5:7b:ca:8f:d6:
35:95:00:9a:55:08:7d:4f:13:a9:96:ec:51:90:6d:20:10:ad:
e5:98:50:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:36:32 2026 by rpki-client