Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: V8ydPFQ8obkFOdh2KMu9Y9qOxNjRtJRUNnazp+oihko=
Subject key identifier: F2:71:75:C8:80:B0:6A:BC:3B:9C:7C:C6:63:6F:7A:B4:D5:D0:D2:08
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 019E318563DA1DA449649DD9E1CB0AF3B6E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: 04E8
Signing time: Sat 16 May 2026 16:01:25 +0000
Manifest this update: Sat 16 May 2026 16:01:25 +0000
Manifest next update: Sun 17 May 2026 16:01:25 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: EO544yWl6rYqCT0h/ynqnL5Vl/NS9Rmlfur/a9koJiw=)
2: OalRphnjMBSS6Np5-PPkgZFPsWE.roa (hash: tykpnTBSrACbV7VF5IpAU/9U1wStTD0WGueGsOwXxHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:63:da:1d:a4:49:64:9d:d9:e1:cb:0a:f3:b6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: May 16 16:01:25 2026 GMT
Not After : May 17 16:01:25 2026 GMT
Subject: CN=f27175c880b06abc3b9c7cc6636f7ab4d5d0d208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:fc:b4:d0:58:ca:00:c3:66:f9:99:a6:b3:
3f:9a:88:66:3d:ae:99:64:d3:af:f1:93:66:d3:1f:
17:a9:18:f4:ba:77:6c:5a:df:72:91:44:0e:bd:91:
ba:59:11:50:49:e9:a6:33:f8:51:f2:21:73:8d:62:
82:0a:48:8a:84:3b:f7:b5:30:ba:b8:b1:2a:3c:5e:
99:6c:92:fe:b5:7b:54:ca:28:27:ea:84:2e:52:b9:
4e:79:c3:88:65:f7:2e:94:dc:a2:c4:e5:97:a4:e2:
ff:43:5a:10:e7:58:e3:59:3f:c9:60:f1:33:5e:a6:
72:77:dd:29:e4:3f:8a:cf:c0:fc:98:20:91:c9:5c:
ed:65:1b:1b:37:42:9f:8f:00:cb:8e:f0:07:03:48:
26:a6:91:1e:c8:5c:d0:bd:63:9f:17:bf:ed:85:41:
8e:15:24:8c:77:c9:39:08:94:79:fd:b5:a2:4d:2b:
c0:92:78:d0:75:66:4e:14:92:cf:e7:64:b6:3a:0a:
e5:77:f1:de:49:f1:bf:e6:83:d7:01:e5:5e:2b:fa:
eb:5c:2b:04:ef:4c:27:3d:d3:a8:39:ac:71:23:3a:
53:26:c0:44:a9:77:b0:69:cc:c6:60:52:fd:a9:15:
99:35:15:69:89:93:c1:c1:06:43:b1:58:0f:15:d6:
9b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:71:75:C8:80:B0:6A:BC:3B:9C:7C:C6:63:6F:7A:B4:D5:D0:D2:08
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:fc:a2:d5:d5:32:28:12:69:b4:a3:f8:13:ff:78:8c:a3:e6:
a2:8e:99:93:54:70:48:49:e3:44:58:87:62:ce:2d:96:b5:ec:
c1:9f:ed:6d:40:cf:c1:67:b8:fa:15:2d:93:17:60:16:43:ab:
d6:64:db:17:a6:ca:1e:f4:52:94:29:63:d5:07:e4:ac:ee:61:
98:d0:a8:0c:1d:8e:0d:6d:6f:d2:c5:fb:98:9d:8c:3e:38:91:
14:3b:0a:86:3a:06:96:bd:4c:19:86:f0:c0:4d:86:38:2d:8c:
7e:a1:fd:29:d7:b0:23:12:7d:bd:39:50:51:14:ce:cc:b5:f3:
c2:ad:29:a6:f0:9e:87:d9:cf:76:82:cc:22:e0:a7:65:8c:83:
bf:de:99:96:c0:23:50:7b:cc:33:90:59:9d:aa:73:43:82:86:
2c:5a:0a:03:e4:36:7a:cf:c6:b7:c8:0b:c7:69:20:b1:e0:c4:
9e:7a:77:ea:cc:0b:28:c3:8a:c5:8f:fc:56:93:60:16:7c:7a:
dd:ed:4b:4b:35:f3:a3:fd:d5:0a:78:79:9c:5a:36:0d:56:9d:
ed:72:13:37:f3:b9:37:d6:f4:6e:a0:d8:de:0c:2a:fa:e5:cd:
71:f5:cd:35:b1:47:0d:d7:af:62:6c:71:a4:14:90:0b:7f:7c:
5b:c8:13:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:11 2026 by rpki-client