Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: qImTZmxkiLSmwPlW/TR32q1kYPunmKA/L/9Mi4oGiek=
Subject key identifier: B5:B6:39:F8:E4:A2:4B:35:9F:25:23:C3:E5:B1:61:F0:7E:35:D7:46
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 019D9AE2FD1999099107F7598D35C3DFE15F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: 049A
Signing time: Fri 17 Apr 2026 10:01:00 +0000
Manifest this update: Fri 17 Apr 2026 10:01:00 +0000
Manifest next update: Sat 18 Apr 2026 10:01:00 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: uZiaLdHZCKCKxFA04ZtYO8i4vS1qbmgm66DwmAAYowE=)
2: OalRphnjMBSS6Np5-PPkgZFPsWE.roa (hash: tykpnTBSrACbV7VF5IpAU/9U1wStTD0WGueGsOwXxHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:fd:19:99:09:91:07:f7:59:8d:35:c3:df:e1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: Apr 17 10:01:00 2026 GMT
Not After : Apr 18 10:01:00 2026 GMT
Subject: CN=b5b639f8e4a24b359f2523c3e5b161f07e35d746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1c:fb:ce:99:a9:70:6a:14:a6:d7:dd:9b:eb:
85:de:4c:74:52:dd:84:4a:a0:9c:2e:0a:2b:33:fb:
07:91:82:ac:be:70:10:a7:cf:d5:29:55:67:a5:64:
60:29:4c:fb:2e:1e:c4:6d:7b:6a:d3:5d:b9:cf:2d:
02:ae:0d:aa:a2:a1:3e:30:34:d4:42:c9:b1:19:d2:
17:fd:f7:b6:56:06:d0:bc:30:38:34:1c:d4:84:e9:
9a:a7:b7:5b:06:a4:24:b6:cf:c0:60:84:b4:6d:46:
88:1a:14:cf:55:7e:02:79:5d:fd:16:dd:e2:fa:fe:
b1:40:06:10:19:90:00:47:16:8c:1c:9c:8e:57:7e:
c2:10:cf:90:4b:12:35:ee:55:45:f8:63:71:68:72:
f5:7f:0d:c0:30:ec:50:c3:d9:30:1c:38:8f:d9:6b:
9f:5d:d4:4a:6d:83:fe:28:f2:0b:68:c8:bf:0c:87:
9f:81:b5:97:dd:d9:b8:94:e0:b8:a6:60:3b:40:9b:
9d:a7:92:81:35:d0:14:ea:4e:34:05:fa:59:cb:f0:
b6:ae:c2:89:e7:47:f2:ab:63:b3:d2:ff:e4:66:c6:
04:07:5e:e7:d8:b5:c0:08:88:bc:d1:f3:54:a6:1b:
62:1e:2d:57:14:80:f5:fc:7e:c1:7b:06:18:13:47:
a4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B6:39:F8:E4:A2:4B:35:9F:25:23:C3:E5:B1:61:F0:7E:35:D7:46
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:61:ef:03:32:35:3a:2f:af:88:34:e2:5d:56:14:2d:dc:42:
34:2a:ff:c2:c5:01:21:ec:70:c4:80:67:7c:73:f6:f5:00:4b:
5f:85:4b:0a:57:04:b5:46:10:0c:1e:77:30:b7:6a:b9:15:3d:
84:c4:ca:82:1b:26:9c:90:d8:e5:d5:36:7f:37:42:f8:f5:e7:
1d:ca:6e:0b:93:4e:7b:e9:c1:e5:fe:af:e0:2e:9d:ba:90:8b:
f8:bf:c1:56:bc:98:7a:11:2d:4f:7d:94:0a:fb:e3:c3:0d:22:
a0:dc:4a:78:7b:5b:c5:48:b9:53:9f:c3:ae:e4:36:a5:40:0d:
8b:bd:a6:bc:97:3e:5c:a8:cf:54:dc:89:40:b4:e8:78:bc:c7:
8a:bd:d7:72:bf:cf:a7:2c:07:bd:1c:5c:0b:5d:a3:95:ef:05:
b3:d5:3f:3a:20:29:4c:48:07:49:82:46:f9:27:61:c6:40:bf:
c6:df:3a:a5:07:dd:df:35:c7:f1:ee:b0:e2:56:a7:cc:9a:51:
49:15:9f:c9:45:10:9c:6e:40:64:b4:a6:c5:f2:d1:9c:a1:27:
d7:73:e8:6b:f6:e8:90:25:de:bb:2f:66:1e:e7:c1:e8:fd:a2:
09:b7:ec:f3:e4:4c:3f:f1:f5:f7:83:28:ed:7a:44:20:fb:98:
eb:13:6d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:15:11 2026 by rpki-client