Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
File: GYNgTwg-WMPNGdOUgLqq3zihm2M.mft (raw, json)
Hash identifier: AVGjFF8KL6uq85OYn7VZqlnlO5ew+7d0pdvW6I8Ojok=
Subject key identifier: B7:E5:61:86:08:3D:0B:D1:08:13:33:58:C3:BF:1D:4A:56:83:FA:34
Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
Certificate issuer: /CN=1983604f083e58c3cd19d39480baaadf38a19b63
Certificate serial: 019D08C25F1CD5085DA2289FAAC2A395F730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
Manifest number: 0B01
Signing time: Fri 20 Mar 2026 01:00:49 +0000
Manifest this update: Fri 20 Mar 2026 01:00:49 +0000
Manifest next update: Sat 21 Mar 2026 01:00:49 +0000
Files and hashes: 1: GYNgTwg-WMPNGdOUgLqq3zihm2M.crl (hash: D04k4yFnhkCw1qI7EqfS0SdX3UMAWxq1iovKHCUpU2Q=)
2: oWw98f4bNM9LtIQxRub1EWETvac.roa (hash: aAOilAHbjhSIlksDdDQYiXq9fjYiWz1hB658OU9itjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:c2:5f:1c:d5:08:5d:a2:28:9f:aa:c2:a3:95:f7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63
Validity
Not Before: Mar 20 01:00:49 2026 GMT
Not After : Mar 21 01:00:49 2026 GMT
Subject: CN=b7e56186083d0bd108133358c3bf1d4a5683fa34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:43:75:aa:62:9a:97:e5:1a:dd:61:1f:a4:
86:16:46:06:1e:4e:8d:21:b8:57:10:9e:30:77:6d:
e1:00:6b:a8:f0:50:60:a2:a9:68:e0:4b:d4:97:27:
46:85:d6:3f:1b:dd:8e:2f:ff:32:a0:10:fb:99:7a:
2b:9f:a6:20:cf:53:a0:ab:79:bb:c2:ca:d0:ed:de:
5f:8c:95:d7:0c:a9:a2:3c:42:44:46:70:e3:c1:4a:
6e:46:a4:7e:55:d7:a4:41:9e:52:52:dc:e2:00:12:
d9:21:bd:9b:56:a7:37:65:01:33:4d:5f:e8:ef:a9:
f5:bf:e3:60:26:3d:f0:f8:3b:4a:41:0b:a0:04:15:
7a:a7:d0:f2:df:81:2b:b5:b5:4a:e2:40:9e:ea:17:
a6:2f:0c:ab:77:c2:59:eb:59:fb:7e:2e:48:fa:41:
3c:91:dc:90:4f:a0:66:bf:c6:f8:89:cf:5f:33:14:
cc:ae:11:5a:61:36:93:7f:0f:1e:1c:20:2c:ed:a9:
1b:e5:52:58:1b:b9:73:aa:db:c6:1a:2d:f8:75:b5:
ed:52:30:35:39:a9:dd:28:2b:40:aa:4a:5e:e0:85:
a1:6c:c3:e1:3f:11:41:16:c7:95:3a:a5:f1:79:a5:
9a:d2:81:6d:96:6d:d7:c7:36:19:2e:9d:b8:0b:40:
36:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E5:61:86:08:3D:0B:D1:08:13:33:58:C3:BF:1D:4A:56:83:FA:34
X509v3 Authority Key Identifier:
keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4f:fa:04:18:38:20:f3:44:12:a5:c6:e6:a7:cc:24:de:5d:
f2:6f:a4:8d:86:e9:94:01:e8:89:18:3d:fe:ec:13:a6:29:64:
26:8c:3e:68:6c:27:22:d2:88:3b:f9:1b:79:f3:e7:dd:10:4b:
d9:cc:6c:5f:ff:1c:7d:85:1e:ba:1a:1d:8b:82:6b:1d:20:27:
3a:91:a5:81:d2:1e:d7:0a:d6:db:66:2d:05:d1:4b:41:ad:36:
c9:07:74:46:99:9f:64:4e:98:54:4c:01:43:cc:c0:47:ba:58:
00:9d:5b:ff:e0:0a:24:d8:19:64:8d:d8:29:bd:83:84:9f:a8:
dd:18:34:0c:6b:f1:a1:23:4a:a7:1b:4b:fc:74:c7:44:c0:89:
b8:fd:e8:f5:1d:9d:7f:93:ee:31:33:11:ca:78:bd:fd:cd:c2:
b1:91:0c:8f:61:d4:03:b4:dc:cb:cb:e3:ce:08:4c:ed:fa:d0:
ee:97:9a:1a:f6:b8:0f:d4:a7:11:93:be:a9:80:de:bb:8b:e7:
7c:1b:d6:82:3f:d1:e6:0d:f0:23:a9:a0:50:be:63:56:4d:cd:
c6:33:d7:fc:f0:88:75:49:ea:df:52:7b:d4:b9:da:3c:b1:71:
fa:67:2d:a0:2e:1d:a8:b9:c7:1f:f2:31:34:f3:e0:7f:c4:57:
6e:c6:58:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 03:59:45 2026 by rpki-client