Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: VHbhuEVLuKcFk6NNpKc8Rn6f3dzjnnyyL2Y++rfTDHM=
Subject key identifier: F7:74:89:DE:B6:36:7C:F8:F9:97:5E:7D:8F:AD:1D:1F:93:BD:A8:55
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 01A0CBC7AD983BAFE460E3D7A77F53A33440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: 0641
Signing time: Wed 23 Sep 2026 01:00:55 +0000
Manifest this update: Wed 23 Sep 2026 01:00:55 +0000
Manifest next update: Thu 24 Sep 2026 01:00:55 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: PYQ3C2GSMyauo8VsmOL9dH5vGc9y+czfxNUtSl+LmtM=)
2: OalRphnjMBSS6Np5-PPkgZFPsWE.roa (hash: tykpnTBSrACbV7VF5IpAU/9U1wStTD0WGueGsOwXxHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:ad:98:3b:af:e4:60:e3:d7:a7:7f:53:a3:34:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: Sep 23 01:00:55 2026 GMT
Not After : Sep 24 01:00:55 2026 GMT
Subject: CN=f77489deb6367cf8f9975e7d8fad1d1f93bda855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e0:a0:2b:ba:aa:04:22:e0:be:58:1d:6b:f3:
5e:f5:ea:b5:3c:85:c9:bf:12:e0:83:51:60:56:26:
e6:ed:74:9a:8e:f7:3a:54:04:b3:b0:72:18:d5:3a:
44:5c:5a:e1:60:f4:08:6d:07:75:68:1b:46:20:fc:
f1:01:ac:9a:f6:d4:51:94:50:5f:d9:90:8c:b7:47:
22:e7:74:04:1b:b1:03:5f:2f:9a:72:53:0e:fa:f7:
44:99:e9:2c:49:7f:95:ed:a7:54:e1:e4:15:18:45:
d1:b3:72:28:bf:a5:06:e7:45:b7:0d:38:5f:99:e0:
a9:ff:4d:8c:b7:68:f7:ea:4c:89:9d:ee:de:eb:c4:
3d:32:b6:c4:ca:1d:60:fd:3d:bc:58:88:a6:d1:f5:
be:da:df:20:cf:af:da:f6:7e:60:de:25:80:3f:44:
3f:63:43:39:93:e7:a7:2b:74:2e:f6:6d:8d:8b:c6:
85:bd:98:5a:dd:68:cd:19:c3:5c:d1:e7:2f:cc:dd:
45:e1:fd:8b:dc:8c:09:ba:24:42:2f:8a:0d:7b:a3:
55:e0:95:8e:5c:c8:91:06:ec:9b:60:e2:fa:86:d5:
b6:b4:b3:40:60:03:02:c4:5c:06:e5:8b:66:12:27:
51:02:25:ea:2b:45:30:51:45:b9:42:fd:b0:31:ec:
74:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:74:89:DE:B6:36:7C:F8:F9:97:5E:7D:8F:AD:1D:1F:93:BD:A8:55
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:51:30:11:97:dc:ba:f8:6c:5b:f0:fc:3c:f3:f3:87:99:94:
9e:af:54:61:24:c7:cc:89:80:83:f6:1e:cf:a5:cc:ce:6f:80:
52:24:b1:64:21:a3:38:c8:06:7d:88:8e:d9:7b:ab:5c:9e:a5:
4e:09:22:f1:1f:bc:a4:60:2a:69:53:45:3b:d5:17:9f:48:88:
21:77:99:cb:ab:11:dc:83:44:dd:c8:06:fc:52:78:32:67:5e:
50:5c:82:74:cd:6d:c6:e3:75:aa:17:c0:2d:da:e1:c0:1d:9a:
64:88:dc:65:5e:b6:89:51:3e:73:ac:e8:33:0a:f8:87:d1:0a:
fb:eb:0f:ae:88:be:69:d5:a4:14:ab:61:5b:5f:09:71:12:65:
f5:c4:59:cf:85:1d:f0:11:6b:a8:b2:5a:5d:42:df:c5:51:b7:
a2:bf:bd:42:ca:84:ca:9c:3e:13:9f:28:0b:c1:5b:24:82:66:
3f:3c:6f:0c:5f:9d:09:40:5d:ac:12:8e:14:9c:f2:59:f9:c3:
43:d2:56:55:2e:57:8c:d0:18:19:e5:a9:cc:50:cd:c4:59:bf:
f5:a9:b4:64:e2:99:fc:5a:f3:3d:b5:30:71:83:cb:97:34:f6:
1a:e4:99:88:1e:9b:31:3f:df:9c:ad:fd:67:8a:a4:2f:f3:78:
6c:76:77:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:08:07 2026 by rpki-client