Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: oQdl9TVPhxxi91Lrybzs5NJnBoFR0W9emUkN17nFD7M=
Subject key identifier: E7:9D:AB:83:6E:7E:4E:AF:A4:8D:CC:96:DF:57:D0:ED:2B:35:2A:1E
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 019CAD5A0A2A9B53E7333C670B969D592512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: 041F
Signing time: Mon 02 Mar 2026 07:01:25 +0000
Manifest this update: Mon 02 Mar 2026 07:01:25 +0000
Manifest next update: Tue 03 Mar 2026 07:01:25 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: 0K5n7panLLUg6l+b/NuixqeS0otXe2AFQmp8fgvYzp0=)
2: OalRphnjMBSS6Np5-PPkgZFPsWE.roa (hash: tykpnTBSrACbV7VF5IpAU/9U1wStTD0WGueGsOwXxHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:0a:2a:9b:53:e7:33:3c:67:0b:96:9d:59:25:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: Mar 2 07:01:25 2026 GMT
Not After : Mar 3 07:01:25 2026 GMT
Subject: CN=e79dab836e7e4eafa48dcc96df57d0ed2b352a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:4f:a8:67:22:51:85:29:b6:cd:69:f1:0d:13:
d9:e2:58:28:28:d1:ed:ab:f3:5f:15:cd:7d:c4:1a:
d0:87:d9:36:89:d6:ff:02:30:53:44:23:cd:c2:c2:
61:76:23:98:4b:13:c0:8b:ff:d7:10:1e:2d:fd:b8:
63:0f:a5:50:78:f4:fa:e5:00:e7:1b:d0:f1:7b:61:
45:85:63:96:9c:08:9d:e0:45:0d:f3:07:4e:fd:57:
f6:26:27:8e:8f:de:b5:16:4f:a1:56:f5:1a:03:5f:
59:a3:0c:99:5f:07:08:93:e9:6c:44:29:d0:5d:ad:
b0:a3:96:89:cd:86:9a:3a:12:07:42:fc:dd:c1:e1:
7b:f6:98:30:68:3d:75:df:1f:8a:33:39:0b:99:9a:
84:7c:db:96:2f:b7:f0:04:17:81:4d:4d:47:47:35:
c0:e5:23:a4:52:bb:99:d1:50:b5:5f:42:5d:f6:8e:
6b:7f:0b:31:89:26:d3:bf:0b:12:a3:25:14:be:90:
3c:60:8a:bb:24:1d:5c:e4:bc:97:55:3f:30:68:73:
bb:27:d1:b5:b6:e2:65:60:f0:00:f3:c1:ba:04:1d:
f8:a6:79:48:30:f8:e8:a1:cf:43:93:d7:9f:5c:51:
5d:e4:fa:64:ae:8d:93:f0:dd:52:35:7a:47:15:a5:
93:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9D:AB:83:6E:7E:4E:AF:A4:8D:CC:96:DF:57:D0:ED:2B:35:2A:1E
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e8:63:6d:51:f9:a2:19:15:bd:d2:70:a7:fa:4a:a2:36:af:
75:fb:84:bd:f8:87:f2:cf:b0:76:de:34:44:6d:0a:39:20:ba:
be:22:08:18:ac:95:61:51:80:c7:03:31:d1:f9:f6:bc:fa:33:
ff:0b:40:4d:4b:18:6c:77:56:4a:41:a3:a1:0e:f4:fa:32:26:
d8:d3:4d:d6:80:9a:14:85:5c:b8:a0:e5:ac:29:42:fd:56:e8:
ca:4d:5c:36:92:35:2b:83:7d:43:17:32:29:d3:ea:e0:6f:70:
a2:1b:df:77:67:1f:79:94:c5:a2:73:2a:31:8a:f6:3d:1e:59:
b4:d1:11:8b:36:af:5e:3d:73:1b:31:de:24:8b:76:2c:79:2f:
9e:ee:f2:5b:77:20:40:74:17:db:23:c9:cc:72:c5:49:33:d3:
d9:f0:75:d3:81:43:84:68:6f:b9:31:8b:b1:db:4f:73:d7:65:
4c:bd:45:bf:4b:30:3f:17:37:a8:39:52:ba:ee:81:49:c5:03:
05:88:f4:e5:87:49:02:cc:b0:d5:ef:19:27:7e:ec:a0:ee:a7:
a8:b5:9f:a3:47:d4:de:dd:e0:d6:00:d0:d0:ce:84:eb:03:8f:
91:d1:37:1a:32:fb:36:63:b1:eb:48:13:58:53:ff:10:9d:98:
26:cd:2b:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWgoqm1PnMzxnC5adWSUSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNzRmMjc3MDJhNjJjNmI2MjdjNWVhNzBiOTZmZDI5ODIz
NjQ1MjIwHhcNMjYwMzAyMDcwMTI1WhcNMjYwMzAzMDcwMTI1WjAzMTEwLwYDVQQD
EyhlNzlkYWI4MzZlN2U0ZWFmYTQ4ZGNjOTZkZjU3ZDBlZDJiMzUyYTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+k+oZyJRhSm2zWnxDRPZ4lgoKNHt
q/NfFc19xBrQh9k2idb/AjBTRCPNwsJhdiOYSxPAi//XEB4t/bhjD6VQePT65QDn
G9Dxe2FFhWOWnAid4EUN8wdO/Vf2JieOj961Fk+hVvUaA19ZowyZXwcIk+lsRCnQ
Xa2wo5aJzYaaOhIHQvzdweF79pgwaD113x+KMzkLmZqEfNuWL7fwBBeBTU1HRzXA
5SOkUruZ0VC1X0Jd9o5rfwsxiSbTvwsSoyUUvpA8YIq7JB1c5LyXVT8waHO7J9G1
tuJlYPAA88G6BB34pnlIMPjooc9Dk9efXFFd5Ppkro2T8N1SNXpHFaWTPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOedq4Nufk6vpI3Mlt9X0O0rNSoeMB8GA1UdIwQY
MBaAFBp08ncCpixrYnxepwuW/SmCNkUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iNzFhZjItNjY5Ny00ZDA3LWFkYzUt
MTQ1MGVmYmQ5ZTM1LzEvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9iNzFhZjItNjY5Ny00ZDA3LWFkYzUtMTQ1MGVmYmQ5ZTM1
LzEvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+hjbVH5
ohkVvdJwp/pKojavdfuEvfiH8s+wdt40RG0KOSC6viIIGKyVYVGAxwMx0fn2vPoz
/wtATUsYbHdWSkGjoQ70+jIm2NNN1oCaFIVcuKDlrClC/Vboyk1cNpI1K4N9Qxcy
KdPq4G9wohvfd2cfeZTFonMqMYr2PR5ZtNERizavXj1zGzHeJIt2LHkvnu7yW3cg
QHQX2yPJzHLFSTPT2fB104FDhGhvuTGLsdtPc9dlTL1Fv0swPxc3qDlSuu6BScUD
BYj05YdJAsyw1e8ZJ37soO6nqLWfo0fU3t3g1gDQ0M6E6wOPkdE3GjL7NmOx60gT
WFP/EJ2YJs0rhw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:46:56 2026 by rpki-client