Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: AxXWpb9Ok4PZB2quaj2eCA1ZEF0Q+DjxRoJnzv3EqMw=
Subject key identifier: 71:73:15:46:57:20:17:9F:47:43:36:46:A7:A8:E2:26:AF:9C:65:1D
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 019D38663255D722A66AACCA104FA3BA9493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: 0467
Signing time: Sun 29 Mar 2026 07:01:54 +0000
Manifest this update: Sun 29 Mar 2026 07:01:54 +0000
Manifest next update: Mon 30 Mar 2026 07:01:54 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: 3RenR8aakZf9lElyYlNIPD0Tki1rGjUpcLevvYAiuDM=)
2: OalRphnjMBSS6Np5-PPkgZFPsWE.roa (hash: tykpnTBSrACbV7VF5IpAU/9U1wStTD0WGueGsOwXxHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:32:55:d7:22:a6:6a:ac:ca:10:4f:a3:ba:94:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: Mar 29 07:01:54 2026 GMT
Not After : Mar 30 07:01:54 2026 GMT
Subject: CN=717315465720179f47433646a7a8e226af9c651d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:68:6a:3a:b9:8f:a1:a6:45:57:28:92:63:
21:f0:a3:a3:f9:99:46:29:86:82:b7:f4:d0:2f:d9:
d5:cf:16:dc:1a:cf:9f:44:0f:f1:01:b3:27:45:bc:
15:19:40:13:e4:6a:a8:50:c8:9c:ea:03:89:e4:66:
09:09:ce:cf:1c:af:a9:03:23:9c:22:3a:6e:cd:cf:
f6:92:b1:9a:71:49:3c:bd:c2:fc:4e:86:96:4e:f7:
3f:22:49:71:65:b4:02:50:94:1c:e1:46:f9:e6:89:
6c:fc:5d:a8:5e:94:bc:b7:69:35:d0:94:0c:8e:84:
1d:f7:11:4a:b5:ab:f1:24:ea:26:e3:73:8d:88:a1:
45:2a:50:df:b9:7c:37:3e:d5:a2:68:f7:e4:aa:d4:
94:ec:7a:39:2c:66:b7:f2:0c:94:9d:4a:86:a4:0a:
9b:d7:95:b7:aa:d4:ea:97:48:77:87:52:f2:b6:17:
93:4b:6d:5d:68:5c:4e:e2:f6:00:d6:3a:a9:19:71:
c8:ac:6c:78:0f:a2:a2:f1:bc:4a:e0:a5:a7:48:76:
ab:81:1f:7e:0a:d9:05:6d:4c:5b:d6:6d:f9:5e:90:
23:34:fa:9e:3b:a6:63:f2:8e:27:66:47:05:b7:ef:
d5:95:de:57:51:54:bd:1d:40:eb:e0:b9:b7:06:cd:
97:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:73:15:46:57:20:17:9F:47:43:36:46:A7:A8:E2:26:AF:9C:65:1D
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:93:fa:22:d5:af:ba:81:44:e0:21:86:85:dd:4a:c5:ee:52:
7c:cf:30:7b:2b:65:f3:36:21:ac:87:10:c8:c6:cb:03:2b:cb:
1e:7f:00:7a:81:3e:4d:07:04:ab:de:de:e5:71:3f:1c:6d:61:
51:dd:d5:41:30:6a:04:6d:95:5a:3c:be:35:57:dc:c0:f1:3f:
21:58:bd:de:a1:27:2b:95:8b:fd:4d:56:4f:0c:63:bd:bf:16:
10:02:10:90:c5:27:9d:ce:5e:c3:0d:c9:18:10:d0:8a:b9:e4:
33:68:3d:95:f3:b0:01:a3:10:1e:9e:72:66:c3:d6:66:47:56:
6e:27:26:a9:83:b2:a6:e8:6c:48:91:2a:0d:75:0c:9b:4e:d3:
1a:9d:dc:c6:23:73:8b:b2:f5:83:39:70:6b:58:22:e1:4e:ed:
d2:eb:08:2d:a0:2f:05:16:70:bf:7a:2f:0f:a9:bd:77:17:5c:
06:a3:ab:a8:0c:26:77:45:60:43:4c:cc:07:50:27:d7:3f:4d:
98:99:cb:6b:58:93:88:b4:3e:18:57:8a:4b:9d:54:7b:5d:4a:
a7:c5:8a:8b:02:95:68:9c:d9:ad:4b:50:cb:4f:e2:81:91:c8:
b1:bc:db:32:fd:9b:c4:7b:66:f8:e5:3d:91:e5:dd:2e:2a:41:
74:af:46:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:53 2026 by rpki-client