Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
File: gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft (raw, json)
Hash identifier: xFN+l4EadIAI/L7aqIqgw3T6cn15AVEe9WjPOxfpwAc=
Subject key identifier: 04:FA:8C:2A:6D:D5:41:19:F3:81:C2:CE:E6:D9:A5:E0:91:38:FF:B6
Authority key identifier: 80:F3:58:B2:CE:02:BA:8F:F0:BA:14:EE:C5:F3:37:A8:DA:11:C0:DC
Certificate issuer: /CN=80f358b2ce02ba8ff0ba14eec5f337a8da11c0dc
Certificate serial: 01A12D32AAA5DB33BAD2C3CDC49B91CD1086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
Manifest number: 0390
Signing time: Sun 11 Oct 2026 23:00:57 +0000
Manifest this update: Sun 11 Oct 2026 23:00:57 +0000
Manifest next update: Mon 12 Oct 2026 23:00:57 +0000
Files and hashes: 1: 4L-Jua-2JEh-ZF5izuHQE1QIgHg.asa (hash: /hw923UzyAllXo5sTey8z8qOf1YJkIdoRHUKHmoEep4=)
2: _d-CFEMcXTCBxMYYwaRIA3_8Mj8.roa (hash: wJlrxRnPc85yw0LRsjdXZscmyYO4/G8JoNKPUPsic7k=)
3: gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl (hash: 5//QRD3hZE/2DeQTTFBV6K2TiJEQOOUwn0+K1tLRY9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:32:aa:a5:db:33:ba:d2:c3:cd:c4:9b:91:cd:10:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f358b2ce02ba8ff0ba14eec5f337a8da11c0dc
Validity
Not Before: Oct 11 23:00:57 2026 GMT
Not After : Oct 12 23:00:57 2026 GMT
Subject: CN=04fa8c2a6dd54119f381c2cee6d9a5e09138ffb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:64:8a:16:6e:8a:ec:dd:86:a8:06:1a:0d:
16:20:a6:44:92:4f:b4:9f:4f:3e:31:a7:62:76:9a:
42:0b:52:26:d9:c4:29:b8:fa:44:b1:0a:37:9a:a8:
fa:44:7f:40:97:3f:11:d1:01:ea:ab:14:93:c3:a0:
48:9a:f4:09:9e:a6:c0:fa:f8:60:3f:41:08:40:ec:
70:d2:31:7f:3d:3d:43:7c:72:cc:a9:13:5c:a4:6a:
5f:90:cb:6a:c0:e7:3d:8e:f7:b2:40:43:83:78:e6:
b5:cd:b7:9f:43:a2:1f:ee:c6:07:76:65:9e:78:09:
83:7d:21:7e:df:68:e0:61:70:56:39:3d:98:77:30:
d7:f9:5e:4b:9c:07:c4:8b:84:57:81:47:e1:25:5d:
db:13:bc:ad:91:26:b0:a9:97:84:c9:16:b0:c7:63:
20:47:47:bd:d1:d7:14:fd:8c:31:3b:79:db:34:52:
6c:ed:00:2f:75:44:1e:62:e8:c4:77:ed:f5:56:bc:
42:51:cf:29:a8:dc:d0:e4:d9:9d:96:9d:48:c1:0d:
9e:bc:6b:72:3b:11:0a:a2:d4:70:03:c7:14:ff:7f:
ea:6c:80:71:be:ea:fa:11:66:0b:90:30:a7:00:e3:
a7:2f:e2:8c:94:f3:a9:ef:a4:2c:39:89:1d:98:4d:
cc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FA:8C:2A:6D:D5:41:19:F3:81:C2:CE:E6:D9:A5:E0:91:38:FF:B6
X509v3 Authority Key Identifier:
keyid:80:F3:58:B2:CE:02:BA:8F:F0:BA:14:EE:C5:F3:37:A8:DA:11:C0:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7d:a9:00:21:ba:d0:6b:5b:51:cd:28:7c:32:b4:39:67:44:
03:ab:99:a3:0a:20:7c:d4:93:98:7c:18:01:03:c2:e1:78:e1:
d9:25:6c:f8:2c:1f:5c:f8:2d:0b:ef:d8:db:0a:6b:f9:e2:ff:
f1:cd:90:c0:de:d0:08:1d:69:38:5b:ab:0b:2d:1e:e3:48:29:
64:99:0f:7e:41:c2:be:f6:91:c6:92:2f:46:76:88:1c:bb:94:
9b:cf:85:b9:18:42:8f:d4:4b:1d:78:d9:8f:28:50:a7:aa:13:
a3:15:5d:42:a1:bf:9e:6f:b9:bf:72:4d:7a:a4:0e:f4:31:c8:
c5:39:1f:c8:06:fd:79:ca:85:b8:fa:ea:4a:85:fb:99:46:d6:
49:e0:07:87:18:f2:c2:f7:ac:4a:00:a3:49:1a:1f:61:64:17:
aa:d0:92:e7:c1:c1:b2:83:db:bc:f7:8a:9b:d0:47:49:53:59:
2f:75:54:de:af:a0:2c:59:13:be:7f:27:f9:11:71:0b:f6:a1:
3a:f3:e3:31:b3:c9:2f:f5:b0:71:7c:dc:71:2b:73:6f:4c:7b:
8f:db:49:69:4f:b8:e5:fa:b1:87:1d:20:a2:bd:26:c9:ae:bf:
b4:fc:08:84:5a:0d:f4:e5:06:e6:50:30:88:2b:2f:ed:b8:cb:
db:33:c4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:18:12 2026 by rpki-client