Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: wlbfTRb9I7hvKhV19mmo2N7FocNpGgBDn2G4fR/14HE=
Subject key identifier: 3C:1A:A1:09:FB:41:AC:07:C8:67:F2:A4:5C:6C:DA:5E:B5:07:23:10
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 01A002EF7EC5F39E028C854A3372DE2E34A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: 05D9
Signing time: Sat 15 Aug 2026 01:00:45 +0000
Manifest this update: Sat 15 Aug 2026 01:00:45 +0000
Manifest next update: Sun 16 Aug 2026 01:00:45 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: nU43TvqJHbVOkJMqWerHb3VkbfQ6sp8vg7zLo08to60=)
2: OalRphnjMBSS6Np5-PPkgZFPsWE.roa (hash: tykpnTBSrACbV7VF5IpAU/9U1wStTD0WGueGsOwXxHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:ef:7e:c5:f3:9e:02:8c:85:4a:33:72:de:2e:34:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: Aug 15 01:00:45 2026 GMT
Not After : Aug 16 01:00:45 2026 GMT
Subject: CN=3c1aa109fb41ac07c867f2a45c6cda5eb5072310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:95:f2:0b:44:1a:27:80:65:df:0a:69:1d:de:
0a:23:c7:6b:7c:6b:9d:f1:5b:5b:b0:7a:80:50:4b:
20:33:35:25:d4:8a:de:0f:ef:bf:12:c1:f9:c1:b4:
44:da:14:f6:3c:70:63:68:f6:f6:dd:4d:0b:e0:44:
a2:a0:3c:22:ef:b3:e0:67:5f:46:6f:48:f9:07:eb:
02:9c:76:99:79:6f:8f:fb:7d:fd:6c:78:b0:ce:46:
da:a6:f3:e9:a1:83:e6:69:53:89:37:4a:4b:07:0e:
a9:ea:6d:c1:0b:44:02:50:22:96:a8:c9:97:2e:77:
80:34:bd:6b:e8:71:81:e3:e0:b9:4c:3e:9d:84:1b:
bc:ac:c2:8b:f7:5f:55:f8:16:1e:da:04:37:a3:72:
29:61:80:2c:1e:66:e5:b2:78:25:ce:04:b6:60:15:
55:43:66:87:62:35:49:df:18:e8:a4:f6:9f:4b:78:
a4:27:53:12:8a:61:2d:b5:73:fb:15:23:cd:20:86:
d9:10:23:3a:18:1a:59:0b:fc:ef:58:dd:31:60:f8:
8d:53:da:93:51:40:86:ea:7e:b3:6f:95:d2:20:b9:
67:bb:ec:57:0b:d6:44:83:83:ca:40:07:97:1e:d9:
2f:aa:dc:f7:6c:f7:19:64:72:7a:c8:c5:d6:3b:a6:
2d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1A:A1:09:FB:41:AC:07:C8:67:F2:A4:5C:6C:DA:5E:B5:07:23:10
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:56:66:d4:a6:a1:55:d0:f6:99:f4:3b:36:25:8d:e9:62:c9:
b5:5f:15:b9:f3:51:e5:e5:75:6f:44:c9:ee:0f:1c:6c:9a:5d:
2e:e5:c0:bd:f6:8f:ed:85:f1:b6:24:b1:9f:10:9c:ee:79:f9:
a2:83:ae:6c:03:ed:95:fd:ae:c8:6a:f5:52:0e:6d:73:82:a0:
6a:8b:6d:53:fa:8f:b6:bb:ac:82:3e:55:4c:a9:f8:9a:91:f9:
aa:87:36:6b:1b:6f:bd:4e:cc:76:53:e2:37:66:4e:f4:9b:65:
40:25:f7:9d:8b:65:75:a9:4d:da:2e:54:e0:42:71:62:3a:63:
41:ba:d1:12:d4:96:ef:89:d9:8c:95:55:26:73:53:8e:31:f2:
47:73:b5:cd:d5:d7:9c:ef:9a:ef:92:26:7b:85:5a:8b:4c:88:
93:fe:f2:ee:e1:e1:b2:b2:ef:e1:8f:a1:64:02:b4:a3:36:26:
9a:84:5c:c1:a4:9c:6d:42:91:04:a0:7f:83:fb:7b:19:9a:e2:
ae:3f:72:bf:11:8d:96:fc:98:81:3d:de:6b:d6:18:f4:98:7e:
c9:a5:9a:4a:87:12:d0:0b:7e:73:a4:d2:4b:95:fe:54:46:4e:
9a:c9:25:ed:52:28:c7:a0:19:e2:e1:3f:d2:4a:6a:59:ae:ce:
91:5d:90:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:00 2026 by rpki-client