Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
File: GnCnIdG1PtkdhbbFNaxytJBPnD0.mft (raw, json)
Hash identifier: OiQR2eKb36OYVEJxuz+1deynY4hF+j6F29RznGMo6BQ=
Subject key identifier: 75:01:A1:5B:2F:A5:D3:2F:F6:33:96:5B:92:64:1C:81:45:E5:8D:89
Authority key identifier: 1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
Certificate issuer: /CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Certificate serial: 019CAD22EB8BCDA5319C8951E480D9BC7E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
Manifest number: 0166
Signing time: Mon 02 Mar 2026 06:01:12 +0000
Manifest this update: Mon 02 Mar 2026 06:01:12 +0000
Manifest next update: Tue 03 Mar 2026 06:01:12 +0000
Files and hashes: 1: GnCnIdG1PtkdhbbFNaxytJBPnD0.crl (hash: WRZn4nHMAxG5MMqu72gSKAr1vaiKupK/XQHKALABZaM=)
2: OQhQ0ERvOy6cUfsHeSPtDIxPLy0.roa (hash: ZP0fbWow0Y5xEJaJhTl8fSb35nDS4+b7RNqWl3nyzwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:eb:8b:cd:a5:31:9c:89:51:e4:80:d9:bc:7e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Validity
Not Before: Mar 2 06:01:12 2026 GMT
Not After : Mar 3 06:01:12 2026 GMT
Subject: CN=7501a15b2fa5d32ff633965b92641c8145e58d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ad:9a:5b:ad:59:c5:b4:fc:c0:e9:94:21:4f:
69:d5:d0:02:56:ee:a6:02:b8:10:2e:73:01:bf:fb:
24:bf:87:39:9e:5f:aa:3c:d0:cd:93:9e:3d:99:2e:
0a:78:bd:1b:7a:c4:30:55:fb:da:b8:68:f4:68:3f:
a5:23:55:17:28:a7:9b:2d:82:0e:1d:fc:df:e6:b8:
23:2f:68:ee:80:b6:e2:9e:f6:e6:d6:c3:4a:4b:90:
14:4d:9e:0d:7c:9f:77:eb:42:63:3e:87:be:ad:de:
bd:04:70:81:15:3a:fb:3c:b4:a0:77:21:b6:e6:04:
96:23:79:a6:90:f7:40:f7:be:e1:85:bf:01:4f:81:
22:15:4d:5b:47:11:a3:7a:55:25:17:ab:73:df:a8:
7b:be:76:12:23:ce:47:b2:27:c8:c3:cf:52:10:04:
a0:a3:af:fa:df:95:ee:36:bc:13:9d:e5:27:b8:6f:
53:24:1c:f2:b0:65:19:ab:a4:2e:77:8f:06:2d:59:
3a:a0:48:25:ab:e3:78:ab:f0:e2:15:c8:fa:d4:b2:
c4:99:f9:48:ff:68:d4:ae:7d:cd:59:54:c2:96:09:
9a:b7:d4:be:05:dc:d2:d7:92:00:85:ff:77:ca:3a:
1c:3a:29:44:0c:59:b2:a7:20:f6:18:67:bb:f5:31:
98:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:01:A1:5B:2F:A5:D3:2F:F6:33:96:5B:92:64:1C:81:45:E5:8D:89
X509v3 Authority Key Identifier:
keyid:1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0e:f9:74:0a:ba:74:5b:f5:c7:89:21:9a:eb:09:9f:9b:9e:
c3:d5:88:7b:13:f6:cb:a4:41:b2:77:c4:54:86:9d:09:c5:4a:
5d:14:7a:a9:d2:6e:e8:d4:59:00:2f:01:ba:d8:63:31:78:38:
8d:a6:6d:db:95:67:38:2b:e9:e8:35:95:3d:aa:75:16:ee:92:
7a:1a:b6:8a:a3:92:2d:bb:a2:78:99:57:37:9d:8b:2a:2b:79:
32:81:45:c8:e9:6b:47:09:a5:c2:e0:04:2d:7a:12:90:54:5e:
b2:1a:dc:f5:08:77:ca:21:fc:28:dc:7f:98:93:d7:33:ca:df:
9e:06:28:fd:10:e9:b4:32:71:51:28:74:15:34:44:ae:33:30:
6a:40:e1:c7:e3:a4:d3:39:d4:7e:41:38:e0:2c:a0:b7:1c:6a:
08:02:6c:00:89:b2:ca:0d:47:95:8d:7c:9e:ab:50:fd:eb:42:
4f:b6:d8:af:ce:66:53:b4:3d:f3:f6:4f:13:67:bf:87:fd:fd:
0a:cb:6b:74:f6:35:67:0e:4d:4f:b6:f8:cb:2d:12:99:7f:2a:
82:54:49:5c:89:b8:f5:30:7a:eb:25:6a:ff:9b:df:b4:ab:c2:
b7:9a:22:ba:e9:7d:b0:53:2c:c5:0f:f9:7b:6d:a7:58:93:c9:
aa:44:3c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:15:11 2026 by rpki-client