Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: DJaD2uQbI5mDEOYUwZEwf+5PWkw0wOCtEI5I+NESq80=
Subject key identifier: 9D:8A:CE:95:99:7A:09:4C:00:A7:25:04:7D:6C:8D:B8:7C:08:F0:FA
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 019EC06DB68F06817D9F3B0E2D21716633E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: 0532
Signing time: Sat 13 Jun 2026 10:01:16 +0000
Manifest this update: Sat 13 Jun 2026 10:01:16 +0000
Manifest next update: Sun 14 Jun 2026 10:01:16 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: 3bVJY4ztQ5d8X77gT4B/dHN10V7vcuYXnOTuCIRyf5I=)
2: OalRphnjMBSS6Np5-PPkgZFPsWE.roa (hash: tykpnTBSrACbV7VF5IpAU/9U1wStTD0WGueGsOwXxHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:b6:8f:06:81:7d:9f:3b:0e:2d:21:71:66:33:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: Jun 13 10:01:16 2026 GMT
Not After : Jun 14 10:01:16 2026 GMT
Subject: CN=9d8ace95997a094c00a725047d6c8db87c08f0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:88:c0:23:e4:78:8f:6e:c7:09:bd:c1:37:fd:
2f:bb:78:31:75:42:cd:14:c6:98:e5:4c:5c:e5:bc:
a6:30:f1:be:5a:13:57:48:0c:b8:ab:53:32:d6:46:
d4:bb:11:c5:b9:32:a1:dc:d6:44:22:8b:2d:3e:36:
03:90:7e:c4:df:16:f9:89:63:36:e2:63:01:16:98:
f6:b6:85:cd:5e:6f:ba:ee:97:27:f9:35:2f:79:27:
2f:9c:61:49:cc:bd:3e:4a:25:c3:d2:9f:d8:36:ea:
9a:94:6a:53:79:60:dd:33:d0:65:d0:2c:7b:c9:59:
fb:53:c3:2a:3a:75:36:86:ec:cb:37:49:8d:0f:01:
b1:bb:d1:89:bf:7b:dd:33:f1:7c:ab:54:19:cb:59:
85:a1:55:14:9c:be:49:59:c6:81:54:cc:b7:fd:31:
72:0b:b0:fe:0b:e4:83:3b:19:43:62:98:cb:28:79:
c2:d3:8e:ad:81:e9:03:a8:15:ee:76:21:f8:24:7e:
14:9e:f2:37:a6:85:86:50:98:9a:8a:93:de:cc:5d:
9f:b7:a8:c0:39:fa:5a:de:c9:d3:02:e9:77:06:c9:
c1:89:19:17:50:27:1e:39:e6:be:16:6b:ab:1b:da:
ca:b1:ff:a6:31:7a:63:15:df:9b:d4:a3:94:1e:9c:
3f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8A:CE:95:99:7A:09:4C:00:A7:25:04:7D:6C:8D:B8:7C:08:F0:FA
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ab:66:ec:9a:a1:5b:94:88:25:c9:65:81:43:cf:71:a7:c8:
c6:83:54:33:e9:e2:01:38:01:44:3e:b9:d4:cb:bf:e8:57:8d:
0e:e8:b8:8d:79:e7:ef:86:26:8a:4a:73:13:bd:ee:81:fc:33:
5f:82:11:9f:9e:e7:06:bd:96:a5:b0:02:dc:2d:83:77:5b:ea:
a2:83:b3:5e:2d:b1:5d:39:21:be:62:c6:cd:de:a1:99:f7:6f:
8c:26:43:14:4f:bb:5a:11:df:01:d2:18:bc:63:f0:03:e5:0a:
9f:eb:8d:37:54:9d:f5:bb:9f:de:bc:26:6c:d6:3e:b5:ea:16:
2c:14:27:3d:66:ea:a2:bb:38:38:7a:8f:11:a5:e0:0d:27:ac:
eb:0f:34:11:6a:ab:3e:f0:22:6c:b8:8c:79:60:a2:cd:6f:6d:
8a:24:73:28:fc:db:14:a9:c8:90:a7:e6:bc:42:7c:f1:47:d8:
24:02:4a:fd:ea:65:97:38:3b:4e:0c:91:90:47:31:29:bb:ea:
e4:0c:9f:28:f0:c1:0e:9f:22:49:fa:20:d9:7f:06:e4:84:a9:
c8:43:f6:6d:97:09:c5:eb:51:9e:55:8a:80:18:d0:0a:a6:cd:
b2:c9:d2:59:e1:00:b8:4d:05:68:8f:02:62:8a:db:8f:cf:a4:
09:d1:27:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:26:39 2026 by rpki-client