Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
File: GYNgTwg-WMPNGdOUgLqq3zihm2M.mft (raw, json)
Hash identifier: mIFzkqAksS6Y2qoixB7r1Mu53EdfR+n7EWLrXdwPUS4=
Subject key identifier: BD:D0:AE:CE:7C:47:B0:9D:1E:C9:0B:B4:78:60:0B:4A:9C:5B:40:FC
Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
Certificate issuer: /CN=1983604f083e58c3cd19d39480baaadf38a19b63
Certificate serial: 01A0E1AB2866FCC1E57A6AEEE2FEC54FD734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
Manifest number: 0CFF
Signing time: Sun 27 Sep 2026 07:01:25 +0000
Manifest this update: Sun 27 Sep 2026 07:01:25 +0000
Manifest next update: Mon 28 Sep 2026 07:01:25 +0000
Files and hashes: 1: GYNgTwg-WMPNGdOUgLqq3zihm2M.crl (hash: HRswDj70wLeVLekdZ3lSKJ+5nzcNvaR9EBXonRLFWS8=)
2: oWw98f4bNM9LtIQxRub1EWETvac.roa (hash: aAOilAHbjhSIlksDdDQYiXq9fjYiWz1hB658OU9itjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:ab:28:66:fc:c1:e5:7a:6a:ee:e2:fe:c5:4f:d7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63
Validity
Not Before: Sep 27 07:01:25 2026 GMT
Not After : Sep 28 07:01:25 2026 GMT
Subject: CN=bdd0aece7c47b09d1ec90bb478600b4a9c5b40fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e9:4f:0f:7a:ca:04:4d:d3:9b:09:53:6d:56:
8a:02:ee:41:40:86:51:af:c5:42:af:01:ed:c0:08:
f1:37:10:60:e3:b1:17:59:20:49:9d:18:e8:b4:bf:
7e:67:c5:5c:92:6b:42:57:17:13:89:0d:a0:73:56:
a7:02:e1:9c:38:7b:ea:99:6f:c4:a5:1d:64:8d:8f:
21:b4:cd:4e:10:ad:13:34:54:c6:ce:86:52:e1:66:
9e:63:d2:70:3b:56:de:f6:e6:79:f7:a0:e1:28:bd:
5a:b4:3a:59:c4:aa:f0:45:d0:a6:d6:09:3e:49:1d:
c5:7a:df:ef:21:1b:f6:3f:10:86:4f:e0:85:42:48:
9b:9b:ef:6b:61:94:0b:a4:67:ac:5c:f2:90:99:02:
f0:0c:58:09:a4:60:9e:ca:74:3f:a6:62:c6:58:e0:
ea:3b:1f:41:61:87:63:21:d4:ff:9f:93:10:9f:ff:
1a:c6:86:5a:35:22:ce:7a:7d:a2:0e:c0:14:d4:f4:
f6:e2:e6:8b:a4:9b:7f:d4:43:81:08:ce:75:18:0d:
7f:6c:fb:7f:93:06:21:e0:8c:89:c4:79:fa:5c:a0:
64:6d:c0:4d:06:4c:ba:37:94:dc:1c:27:7e:a2:57:
22:88:38:7e:e7:ea:29:24:5d:bc:5b:da:05:1b:a8:
2c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D0:AE:CE:7C:47:B0:9D:1E:C9:0B:B4:78:60:0B:4A:9C:5B:40:FC
X509v3 Authority Key Identifier:
keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:79:4b:8c:f7:e9:0c:b0:9e:af:01:4c:8a:43:c9:d5:16:6e:
91:cc:d8:74:bf:63:8d:40:f0:ad:74:bd:9d:48:59:0c:f6:ed:
ab:b8:a3:b1:5c:8e:0f:1a:45:6d:d3:6a:ac:9f:5f:28:d3:db:
a5:cf:e8:19:15:2b:b0:2d:1f:72:78:3e:36:89:b7:af:4e:38:
b1:47:ec:45:01:3d:8f:b4:6b:a6:51:9e:8f:20:5c:be:d3:07:
08:0f:69:84:0e:4a:00:33:84:3c:a1:b6:d0:85:e3:16:b9:17:
f8:f0:89:9e:6f:58:28:f2:23:2e:6e:0d:25:d3:c6:a1:7b:03:
98:91:fe:f3:2d:be:93:14:26:bd:51:1a:83:37:be:b4:bb:ae:
b7:69:c5:74:2d:ac:f7:b1:c4:76:91:80:20:cf:a0:39:c0:ec:
ce:00:dd:fb:27:40:36:55:ee:8f:d4:40:db:f2:73:04:d4:54:
b0:88:b0:db:1f:ed:37:e8:a6:ad:4d:ed:d9:79:de:84:fc:d9:
23:69:65:be:99:b5:86:a4:61:fb:89:95:3a:43:bf:9b:21:eb:
f8:28:24:39:0e:fd:2a:a1:10:ed:ca:e3:d8:de:58:41:02:ca:
3a:cd:82:87:0f:20:54:e2:c2:89:b5:6a:bc:5f:5d:4e:a5:c8:
44:be:fe:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhqyhm/MHlemru4v7FT9c0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ODM2MDRmMDgzZTU4YzNjZDE5ZDM5NDgwYmFhYWRmMzhh
MTliNjMwHhcNMjYwOTI3MDcwMTI1WhcNMjYwOTI4MDcwMTI1WjAzMTEwLwYDVQQD
EyhiZGQwYWVjZTdjNDdiMDlkMWVjOTBiYjQ3ODYwMGI0YTljNWI0MGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+lPD3rKBE3TmwlTbVaKAu5BQIZR
r8VCrwHtwAjxNxBg47EXWSBJnRjotL9+Z8VckmtCVxcTiQ2gc1anAuGcOHvqmW/E
pR1kjY8htM1OEK0TNFTGzoZS4WaeY9JwO1be9uZ596DhKL1atDpZxKrwRdCm1gk+
SR3Fet/vIRv2PxCGT+CFQkibm+9rYZQLpGesXPKQmQLwDFgJpGCeynQ/pmLGWODq
Ox9BYYdjIdT/n5MQn/8axoZaNSLOen2iDsAU1PT24uaLpJt/1EOBCM51GA1/bPt/
kwYh4IyJxHn6XKBkbcBNBky6N5TcHCd+olciiDh+5+opJF28W9oFG6gsZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3Qrs58R7CdHskLtHhgC0qcW0D8MB8GA1UdIwQY
MBaAFBmDYE8IPljDzRnTlIC6qt84oZtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1lOZ1R3Zy1XTVBOR2RPVWdMcXEzemlobTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85YWM4NmEtODVlZC00YTFjLTg3M2Yt
NzUyOTA1MzMwMzkyLzEvR1lOZ1R3Zy1XTVBOR2RPVWdMcXEzemlobTJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS85YWM4NmEtODVlZC00YTFjLTg3M2YtNzUyOTA1MzMwMzky
LzEvR1lOZ1R3Zy1XTVBOR2RPVWdMcXEzemlobTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnlLjPfp
DLCerwFMikPJ1RZukczYdL9jjUDwrXS9nUhZDPbtq7ijsVyODxpFbdNqrJ9fKNPb
pc/oGRUrsC0fcng+Nom3r044sUfsRQE9j7RrplGejyBcvtMHCA9phA5KADOEPKG2
0IXjFrkX+PCJnm9YKPIjLm4NJdPGoXsDmJH+8y2+kxQmvVEagze+tLuut2nFdC2s
97HEdpGAIM+gOcDszgDd+ydANlXuj9RA2/JzBNRUsIiw2x/tN+imrU3t2XnehPzZ
I2llvpm1hqRh+4mVOkO/myHr+CgkOQ79KqEQ7crj2N5YQQLKOs2Chw8gVOLCibVq
vF9dTqXIRL7+1A==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:36:43 2026 by rpki-client