Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
File: GnCnIdG1PtkdhbbFNaxytJBPnD0.mft (raw, json)
Hash identifier: S3cVMDzOufNkDoY3l3ZNdK+xEOFT/Ml0n50luksl1kk=
Subject key identifier: A7:F3:6A:2D:BF:93:BE:E1:43:C7:F8:9D:1C:A3:DD:31:74:C3:BE:B8
Authority key identifier: 1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
Certificate issuer: /CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Certificate serial: 01A0E888A2CF2E51C9D389B147F6D90B2D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
Manifest number: 0397
Signing time: Mon 28 Sep 2026 15:01:03 +0000
Manifest this update: Mon 28 Sep 2026 15:01:03 +0000
Manifest next update: Tue 29 Sep 2026 15:01:03 +0000
Files and hashes: 1: GnCnIdG1PtkdhbbFNaxytJBPnD0.crl (hash: 4QLfuD1RYjNZV31I1qQQaFQ1RC9nlqLjlyiPP1aZNuw=)
2: OQhQ0ERvOy6cUfsHeSPtDIxPLy0.roa (hash: ZP0fbWow0Y5xEJaJhTl8fSb35nDS4+b7RNqWl3nyzwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:88:a2:cf:2e:51:c9:d3:89:b1:47:f6:d9:0b:2d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Validity
Not Before: Sep 28 15:01:03 2026 GMT
Not After : Sep 29 15:01:03 2026 GMT
Subject: CN=a7f36a2dbf93bee143c7f89d1ca3dd3174c3beb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:42:28:c4:03:3a:2a:38:20:d9:2b:ed:6b:07:
97:b8:70:10:77:30:92:89:d9:3a:a2:a2:c5:55:e6:
2c:34:e3:6d:b4:62:89:21:38:7b:19:cc:9a:3e:19:
ee:37:42:d4:1f:59:8c:93:39:05:57:f9:d4:e0:77:
6f:94:0c:59:e2:25:d9:2a:81:9f:92:07:63:2f:64:
5c:32:b4:cf:24:7d:b8:b0:ca:0e:da:ff:af:ca:e3:
9d:35:35:ec:03:77:aa:30:84:cf:77:18:01:8e:e8:
1d:6f:6b:b1:57:07:f5:c1:c4:03:c1:64:6a:37:f1:
91:4d:c2:e1:db:bf:bc:62:de:ac:44:14:98:88:14:
7f:e0:67:0c:5a:98:46:57:08:b6:2d:28:81:3f:da:
ef:79:00:04:18:29:03:c1:69:e5:2a:91:3c:d4:6e:
4d:4d:13:f7:1c:41:94:44:41:f6:fa:1e:01:04:b8:
cf:89:05:87:f5:5c:be:3c:b7:88:9b:6d:a5:de:0f:
4c:d2:11:e3:e6:48:cc:12:0f:58:42:5d:c1:18:58:
38:62:6c:ea:c3:57:4a:7f:ff:70:04:0a:16:2c:45:
f7:34:41:59:cb:21:3b:db:4e:17:ff:21:e3:25:b9:
b8:47:83:83:63:41:a0:e9:3a:03:01:73:bc:79:00:
61:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F3:6A:2D:BF:93:BE:E1:43:C7:F8:9D:1C:A3:DD:31:74:C3:BE:B8
X509v3 Authority Key Identifier:
keyid:1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:aa:82:f8:9f:2a:84:c3:bd:3d:4a:c7:98:87:a9:da:6b:8c:
49:26:9f:8d:ed:39:52:06:d8:be:d2:70:9b:5c:8b:ae:48:3b:
7c:7d:85:2f:07:83:22:c2:b3:e3:31:7f:6a:62:df:95:5d:9a:
e8:8f:36:38:cb:ff:18:dd:c5:2a:8b:3e:11:3c:25:d9:c6:d2:
95:5c:e2:42:bb:91:3e:bb:84:a1:27:b6:d2:be:db:6b:02:e2:
c4:ae:f0:3e:09:35:9b:06:7c:86:5a:60:9d:af:6f:b3:0f:cb:
44:f2:ca:8b:c2:84:76:4b:ec:94:1c:3e:a7:82:ad:5d:3d:ff:
17:e2:d9:b0:e8:c3:2f:df:bc:20:13:00:7f:c6:3a:96:22:78:
35:14:6e:ee:8f:81:6f:ad:b0:11:9e:05:38:32:71:a9:45:95:
69:1a:b6:73:d5:c5:a7:cc:40:3d:0b:61:36:9b:72:03:d1:b0:
ae:e7:ac:3c:1b:a2:0b:a7:3a:da:07:63:79:44:6b:10:42:f3:
0f:01:8f:4e:be:5d:7f:ab:70:a1:bc:da:31:44:ae:57:5a:69:
35:41:06:01:5d:b4:4f:bf:6f:e5:fc:d8:8f:4c:d0:83:ed:f1:
ed:dd:4c:2e:de:14:19:08:e9:4a:fb:d9:86:d9:0e:e4:b1:e2:
e5:98:20:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:40:03 2026 by rpki-client