Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: N/tFRQBzB0pZDciExu9zx/useNMYchFl3bP/3FWtnV0=
Subject key identifier: 2E:2E:2A:A9:AD:12:06:36:18:03:61:BB:FF:A3:0B:1C:D0:3C:C2:CB
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 019FAC087EFFDCA765E7C8223AB523B17154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: 05AC
Signing time: Wed 29 Jul 2026 04:01:05 +0000
Manifest this update: Wed 29 Jul 2026 04:01:05 +0000
Manifest next update: Thu 30 Jul 2026 04:01:05 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: wb+y7dpgc05m2gtKRKEMYLyb9HrtCeQ+uuPP63Yx3Ao=)
2: OalRphnjMBSS6Np5-PPkgZFPsWE.roa (hash: tykpnTBSrACbV7VF5IpAU/9U1wStTD0WGueGsOwXxHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:7e:ff:dc:a7:65:e7:c8:22:3a:b5:23:b1:71:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: Jul 29 04:01:05 2026 GMT
Not After : Jul 30 04:01:05 2026 GMT
Subject: CN=2e2e2aa9ad120636180361bbffa30b1cd03cc2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:51:ee:0d:18:8b:d9:fe:4f:a7:23:e2:7a:cc:
ba:7d:e8:c4:21:61:46:2e:aa:84:8b:66:bf:d0:a7:
85:bb:42:bf:aa:c9:1f:8e:b9:b0:90:34:bd:60:95:
51:2f:f2:83:f1:5e:7c:a1:22:2a:a4:57:57:86:9d:
0b:fd:08:ed:a7:81:81:d2:92:77:95:b9:6a:23:dd:
93:b9:88:05:66:b6:42:09:fc:f5:8d:fc:54:4e:54:
3d:e4:24:32:29:0b:11:c0:55:5d:74:f1:61:ce:ad:
dd:3b:1d:53:5f:14:7a:00:3f:e5:01:f3:52:e6:e7:
73:d1:64:66:af:1a:56:10:fb:b3:72:c2:b9:28:b1:
3e:74:c7:7e:3f:f1:c0:77:12:6a:a8:a9:5d:fe:8e:
fd:50:ea:ba:13:36:ef:bc:52:3d:96:bf:0f:6e:30:
9c:32:03:a5:2e:0d:f7:77:3c:c9:e6:a6:d3:85:e6:
a9:ec:e3:0b:98:f9:48:c5:82:e6:7b:ac:55:bd:ea:
76:31:9c:77:e9:f7:c5:a3:d4:ff:f8:17:e4:f7:71:
bd:6a:ca:3e:c0:d6:91:be:60:7d:b8:e8:5b:d9:ee:
f9:64:42:f9:ed:7d:02:3d:25:1c:8d:39:2a:b2:ac:
57:dd:df:55:b2:bb:a8:4d:9a:27:0a:7c:55:5b:5e:
9d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2E:2A:A9:AD:12:06:36:18:03:61:BB:FF:A3:0B:1C:D0:3C:C2:CB
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:7e:58:80:8e:97:d0:b8:56:0d:9d:5d:87:75:43:52:d1:a2:
2b:e9:53:b8:f8:70:ee:16:66:ac:5f:a0:19:31:ef:cb:ca:be:
93:bb:00:ce:db:c2:d3:99:4f:49:71:b3:ee:1d:fe:ba:f0:79:
32:ce:27:6a:bc:49:0f:a6:58:36:ec:2d:87:0e:86:97:0c:3c:
70:31:bc:33:ae:8d:1c:79:a9:dc:85:5b:a2:9a:eb:31:46:d7:
d2:b1:63:9d:9d:d1:bd:29:c5:e0:f9:64:da:9d:87:b4:6f:74:
1c:ea:be:26:7e:b5:59:b8:4f:11:5c:94:50:b9:21:f8:b6:27:
f0:e2:12:50:4a:7f:b7:4a:7d:66:05:fa:14:58:09:17:de:c3:
8f:25:22:53:99:b0:13:74:ea:95:35:b2:07:b4:30:a6:63:bf:
30:44:7f:ee:d7:4e:65:18:79:00:43:4f:5f:48:13:e0:05:1f:
4d:3a:ad:48:91:46:92:17:24:da:92:d9:c7:7e:df:98:b8:f7:
72:9a:23:55:b9:d4:ca:50:43:9c:08:93:ee:37:63:e5:0b:34:
48:ae:c5:1e:eb:a7:84:82:06:84:c0:b7:54:ae:f6:56:72:3b:
1d:84:e1:3f:89:f6:e4:8c:54:e1:fa:9c:59:a6:46:40:23:3c:
23:2c:88:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:40:50 2026 by rpki-client