Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: 2h+qKIAbz3cvyC6BJuKboewEXWmPCMYMhnpDxRtmlnA=
Subject key identifier: F3:DC:CA:2E:CF:4E:CA:B7:60:1F:7B:3D:AB:A7:99:48:E5:9F:8C:1B
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 01A1510856A40A255E72A2C7DFE8F5778AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: 0686
Signing time: Sun 18 Oct 2026 22:01:03 +0000
Manifest this update: Sun 18 Oct 2026 22:01:03 +0000
Manifest next update: Mon 19 Oct 2026 22:01:03 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: J8m1I2VyawqQ9UoavKCa+0UGZERSIlz7Hkq7QRw6tIk=)
2: OalRphnjMBSS6Np5-PPkgZFPsWE.roa (hash: tykpnTBSrACbV7VF5IpAU/9U1wStTD0WGueGsOwXxHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:08:56:a4:0a:25:5e:72:a2:c7:df:e8:f5:77:8a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: Oct 18 22:01:03 2026 GMT
Not After : Oct 19 22:01:03 2026 GMT
Subject: CN=f3dcca2ecf4ecab7601f7b3daba79948e59f8c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:88:0b:9b:2d:70:16:a1:1f:a4:f4:dd:3a:90:
cc:f4:7b:6f:c6:88:7e:56:05:cb:d6:ba:77:8b:14:
16:7a:48:f3:38:61:f3:fe:4c:1d:7a:b2:2b:73:d8:
e4:72:a1:62:10:4a:5e:29:61:de:aa:dd:d4:13:37:
30:b0:ca:b2:91:5b:22:99:77:e1:6b:1a:7e:1f:5b:
b9:30:5c:71:05:09:80:23:f4:bc:1c:79:0d:77:d1:
a9:5b:d5:f9:16:54:42:85:9c:0f:76:0a:3e:ca:e7:
d4:c8:27:f4:4c:3f:32:90:73:74:ec:d5:79:5e:4b:
5d:e2:59:d7:e9:7a:da:74:cc:52:b9:ea:e8:16:11:
fc:a9:72:39:4a:20:73:e0:c2:ba:cf:5f:9f:7a:3b:
cb:86:f0:80:e6:84:19:b3:8b:51:80:5e:12:f3:c0:
10:6f:25:7f:e6:18:db:b5:1b:2f:b5:1b:02:6f:15:
92:30:df:d2:18:82:eb:63:1b:f7:b9:0d:c4:83:f4:
c9:5a:71:68:bc:45:3b:33:d1:df:80:4c:82:3b:20:
13:b5:3c:af:e0:86:7d:94:40:e9:0e:18:de:44:d7:
3f:4b:6c:8f:51:75:b1:68:e7:3d:69:0c:af:08:c3:
04:f4:74:0f:b1:8b:a3:79:9c:a2:85:98:d4:99:c9:
d2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DC:CA:2E:CF:4E:CA:B7:60:1F:7B:3D:AB:A7:99:48:E5:9F:8C:1B
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3c:58:2d:8a:5a:c9:f8:94:92:97:b3:3b:42:de:37:46:0f:
ae:6e:c5:c5:3e:80:27:00:04:b2:42:77:68:87:bc:ca:a0:ff:
de:1e:29:0a:23:7d:82:08:fd:d4:06:df:40:97:41:60:a5:57:
3b:57:d4:e4:7a:4f:b0:9b:e3:c4:b8:a5:30:6d:68:38:fd:b6:
04:4d:7e:e2:64:61:6a:f6:7e:0f:12:51:7d:7e:88:47:32:b2:
7a:65:e5:b3:bd:32:d3:ac:92:2d:21:59:a1:f5:0b:0a:d2:c6:
1b:58:bc:1a:54:3f:8b:50:42:f7:1f:70:a0:24:5f:87:a5:31:
25:25:9f:3a:e8:87:d8:55:3b:0e:f4:22:fc:0a:50:53:91:30:
ec:8e:3a:58:75:5d:c6:7f:5c:48:c3:7a:66:58:23:c1:8e:ec:
d5:94:b0:f0:c9:e2:c5:a9:26:2d:2b:5b:71:6b:3f:07:80:79:
65:07:1e:6d:68:8e:54:87:ad:95:b4:5f:2b:44:80:7b:a3:51:
04:a7:81:83:c6:71:78:a4:4a:c8:df:1a:e2:54:6f:81:c2:81:
96:c1:6e:4a:81:d5:59:f2:0e:84:9d:1e:2e:71:6e:b2:a3:98:
b9:e1:30:ba:0b:ed:a4:2b:dc:57:2f:52:f8:3c:2f:6c:b2:f7:
68:b7:1d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:07:38 2026 by rpki-client