Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
File: GYNgTwg-WMPNGdOUgLqq3zihm2M.mft (raw, json)
Hash identifier: UYaSSG2JavylPyX2i6lfs/KjwSMGz0HQuip5CDHsVU4=
Subject key identifier: 12:DF:8E:A7:3F:52:8F:7F:95:47:C7:1C:58:E8:6D:69:40:F5:98:86
Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
Certificate issuer: /CN=1983604f083e58c3cd19d39480baaadf38a19b63
Certificate serial: 019FAABE6818AA7EA490EEF889715A17CFA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
Manifest number: 0C5E
Signing time: Tue 28 Jul 2026 22:00:32 +0000
Manifest this update: Tue 28 Jul 2026 22:00:32 +0000
Manifest next update: Wed 29 Jul 2026 22:00:32 +0000
Files and hashes: 1: GYNgTwg-WMPNGdOUgLqq3zihm2M.crl (hash: bMF1mS36oOHRX+gDCZEW1r+pmyQaNgDeY4gv0lJ+ivE=)
2: oWw98f4bNM9LtIQxRub1EWETvac.roa (hash: aAOilAHbjhSIlksDdDQYiXq9fjYiWz1hB658OU9itjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:68:18:aa:7e:a4:90:ee:f8:89:71:5a:17:cf:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63
Validity
Not Before: Jul 28 22:00:32 2026 GMT
Not After : Jul 29 22:00:32 2026 GMT
Subject: CN=12df8ea73f528f7f9547c71c58e86d6940f59886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:74:a8:05:27:39:ac:65:35:a9:ab:95:65:9e:
db:51:3e:67:0e:da:7a:a5:4c:fd:ae:97:51:50:be:
05:ed:04:c9:55:27:85:4e:ce:75:31:6a:fb:1f:3f:
08:84:15:94:77:be:24:04:b9:e6:7e:4d:c4:13:97:
b8:dc:1a:d2:16:c8:71:e4:8a:5d:c3:78:af:d6:c2:
2d:bd:c2:6c:99:d6:4f:89:20:24:c4:64:a1:10:49:
26:81:87:f8:52:76:7e:63:3a:ac:17:2b:c2:05:3c:
8e:87:e6:53:03:f2:f9:ac:d8:94:f6:1d:56:45:8e:
0f:29:f9:dc:a4:79:ce:1d:86:ef:6c:99:08:24:df:
09:42:9c:50:b4:3f:f7:7d:d8:d2:6a:e8:19:55:59:
ec:34:b0:92:dc:f0:37:87:2a:74:71:07:24:ce:5c:
e5:99:8b:58:3b:e5:21:2c:94:34:52:d8:5d:ca:21:
ac:b7:73:d8:98:82:77:70:11:28:50:e1:6b:2c:ba:
c3:91:cd:c5:c5:9b:b8:35:56:b7:7a:0d:e0:08:c7:
b7:88:82:20:2b:24:a1:36:f8:43:3e:fc:47:a2:9d:
39:ca:14:26:51:80:61:fd:9c:ff:29:c1:68:da:63:
52:2c:e4:bc:20:77:1b:81:12:a6:d8:a4:7c:ef:da:
3d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DF:8E:A7:3F:52:8F:7F:95:47:C7:1C:58:E8:6D:69:40:F5:98:86
X509v3 Authority Key Identifier:
keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3d:45:85:fc:54:01:f4:81:a1:c7:f6:8c:e0:3e:cb:ce:ea:
5a:49:24:95:73:c8:95:b9:a2:47:7f:d9:3e:b2:5c:4e:86:88:
59:8d:8c:1a:9a:a7:33:49:ea:69:af:37:a6:8b:17:95:b9:fb:
f6:4a:13:44:0b:f1:40:2a:9c:5e:bd:f2:9d:a0:40:90:93:f5:
14:71:e7:91:86:5c:77:09:3a:3d:85:7f:1b:ee:78:0a:a1:93:
b8:bb:67:1f:6b:8f:d5:38:45:9b:68:fe:c5:a4:f1:76:ba:4a:
b0:e2:c9:e1:8b:f7:55:10:b0:b0:d1:6f:a7:da:57:36:71:bb:
1b:1e:bb:7c:f6:f4:0e:f4:03:fc:96:97:10:2a:3f:34:4d:5c:
64:f4:34:7e:4c:71:2c:8b:74:7c:cf:eb:c0:70:7b:9a:3f:d6:
79:c4:f9:61:7b:54:65:4f:f1:9e:51:68:c2:75:5d:c3:57:44:
f4:fe:38:8b:cd:29:c1:04:9f:58:15:d4:89:e0:6d:7f:29:a3:
be:35:76:4a:a0:46:a8:55:98:35:f0:a1:64:29:5c:72:94:f3:
34:ca:8d:20:50:20:9f:94:0a:86:76:b8:0d:e4:a3:05:9d:e5:
92:82:94:72:03:8b:ca:13:55:5a:86:02:ea:89:3a:95:57:c3:
53:d3:70:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:28:52 2026 by rpki-client