Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
File: GYNgTwg-WMPNGdOUgLqq3zihm2M.mft (raw, json)
Hash identifier: LCP0ssOK8ooMpKAnw+dUH11+SOBGbp0cqwcsO9itdO0=
Subject key identifier: C3:56:DC:E0:83:1F:F3:A4:B4:74:38:1E:4D:4E:F0:6C:56:8E:88:87
Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
Certificate issuer: /CN=1983604f083e58c3cd19d39480baaadf38a19b63
Certificate serial: 019CA8333C158FC8BE3B710B44CF83F09A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
Manifest number: 0ACF
Signing time: Sun 01 Mar 2026 07:00:55 +0000
Manifest this update: Sun 01 Mar 2026 07:00:55 +0000
Manifest next update: Mon 02 Mar 2026 07:00:55 +0000
Files and hashes: 1: GYNgTwg-WMPNGdOUgLqq3zihm2M.crl (hash: lRxPIaxlq4XSRe8pC28XF9pFJbOIJ+2TWIOwQ5RV8k0=)
2: oWw98f4bNM9LtIQxRub1EWETvac.roa (hash: aAOilAHbjhSIlksDdDQYiXq9fjYiWz1hB658OU9itjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:33:3c:15:8f:c8:be:3b:71:0b:44:cf:83:f0:9a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63
Validity
Not Before: Mar 1 07:00:55 2026 GMT
Not After : Mar 2 07:00:55 2026 GMT
Subject: CN=c356dce0831ff3a4b474381e4d4ef06c568e8887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:f6:e9:86:0a:7e:33:02:00:49:71:2a:67:
96:0e:d3:c9:ff:b4:ad:e5:b3:e1:18:5c:58:42:f2:
dd:ba:de:99:c4:c1:cb:b0:c3:95:8b:68:4f:57:12:
1f:3a:fd:d8:3b:a2:32:f2:a4:12:6f:da:1f:a5:0c:
0b:ef:42:b3:e8:f0:14:0a:45:f5:ab:57:44:8c:b6:
7e:03:82:1b:6d:0e:01:59:0c:3a:9c:da:90:f0:1d:
4e:50:18:b2:b2:3c:4c:5d:d4:40:47:ba:9e:90:6d:
8d:c7:97:19:1d:fa:29:0b:0c:f6:06:47:e8:26:b2:
c2:f9:13:25:eb:09:b1:65:9c:d9:aa:69:cf:8c:0b:
dd:da:c9:20:c4:40:4e:dc:de:db:c7:28:d0:c5:cb:
03:ea:47:e0:7b:eb:31:1e:f0:d1:6f:19:3a:c2:81:
e0:29:1d:9a:a7:00:05:3e:d1:4d:e2:44:f7:fa:89:
0c:c9:39:a5:b0:b4:71:55:fa:27:07:56:c0:98:07:
c8:54:59:74:5f:29:eb:7b:4a:ad:6f:3d:ba:7c:71:
80:28:e9:54:ad:e0:0e:4c:81:09:5f:dd:04:6d:a1:
1c:59:43:88:98:a2:fb:65:3c:28:3b:d0:2f:b9:33:
eb:3e:95:73:c0:7a:50:c7:be:52:f5:23:9b:67:3e:
0c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:56:DC:E0:83:1F:F3:A4:B4:74:38:1E:4D:4E:F0:6C:56:8E:88:87
X509v3 Authority Key Identifier:
keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:98:70:56:2d:7e:83:3a:9e:af:c4:b3:ad:91:90:fb:46:aa:
18:aa:92:23:18:6d:91:a6:75:c9:e0:59:25:79:09:8d:e4:ff:
dc:94:ed:37:68:62:d8:4c:62:7b:e7:58:3d:6f:82:73:12:5c:
33:ee:7a:c9:0c:5f:b6:d1:1d:fc:a3:db:7a:cf:9d:f0:c8:7e:
75:4d:a5:54:b7:2c:c6:f7:71:0f:57:55:4e:e5:f2:d1:24:c5:
31:42:8e:d1:4f:04:fa:df:37:0a:ba:6c:8d:ae:d6:79:c7:88:
a0:9d:61:6c:51:9f:44:47:3b:27:75:70:2c:37:75:72:38:3b:
c4:8e:29:69:0d:97:2b:e4:03:5a:d3:dd:7b:e6:06:c4:b3:b0:
bf:1e:e1:a6:01:f0:81:2f:70:67:c2:b5:65:ce:27:c5:4e:47:
29:b3:42:bd:d5:8f:0a:f1:a0:7c:2f:ca:5d:74:98:ff:c9:51:
a6:b0:c6:ed:d9:60:bf:ff:da:9d:ab:12:bf:05:b7:91:5e:a8:
b5:b7:e4:85:7a:a6:91:fe:0a:d9:33:c6:91:cf:31:86:45:68:
bc:26:5d:db:93:8e:10:5e:23:6d:6e:dc:63:27:eb:9a:e9:a9:
4e:3a:de:6b:f0:8d:3d:a8:5d:91:12:35:c0:a5:cc:ab:4f:ad:
d7:23:97:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:46 2026 by rpki-client