Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
File: gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft (raw, json)
Hash identifier: 8DwtEyrI9V+ipk6FQ8TRx436Zf55KxX1Wrd4mX1iRfY=
Subject key identifier: 46:70:24:12:DC:3A:5A:2E:5D:92:D4:C1:52:27:29:F9:BD:73:1A:61
Authority key identifier: 80:F3:58:B2:CE:02:BA:8F:F0:BA:14:EE:C5:F3:37:A8:DA:11:C0:DC
Certificate issuer: /CN=80f358b2ce02ba8ff0ba14eec5f337a8da11c0dc
Certificate serial: 019FACE40F2A06518A4497BCF49722879395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
Manifest number: 02C9
Signing time: Wed 29 Jul 2026 08:00:54 +0000
Manifest this update: Wed 29 Jul 2026 08:00:54 +0000
Manifest next update: Thu 30 Jul 2026 08:00:54 +0000
Files and hashes: 1: 4L-Jua-2JEh-ZF5izuHQE1QIgHg.asa (hash: /hw923UzyAllXo5sTey8z8qOf1YJkIdoRHUKHmoEep4=)
2: _d-CFEMcXTCBxMYYwaRIA3_8Mj8.roa (hash: wJlrxRnPc85yw0LRsjdXZscmyYO4/G8JoNKPUPsic7k=)
3: gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl (hash: vj34Rz0Rs9KxDdcRLv8DuTtfqxPIBAYwYFv7S8UxgFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:0f:2a:06:51:8a:44:97:bc:f4:97:22:87:93:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f358b2ce02ba8ff0ba14eec5f337a8da11c0dc
Validity
Not Before: Jul 29 08:00:54 2026 GMT
Not After : Jul 30 08:00:54 2026 GMT
Subject: CN=46702412dc3a5a2e5d92d4c1522729f9bd731a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:91:d5:23:c5:83:89:86:49:d3:54:17:8f:24:
9d:8e:d4:f9:9a:ee:cc:54:1b:67:8b:dd:0d:26:ab:
45:db:7e:7c:3a:6d:4f:ff:61:46:f3:df:e1:54:30:
55:6d:e1:a3:c1:3b:5c:e6:64:88:20:09:7b:97:4d:
4a:8d:08:7a:e6:3c:70:00:fc:71:cf:27:80:e7:21:
c4:1d:22:a7:97:8f:0b:e0:79:f6:4d:a6:8d:b9:a1:
86:22:fd:1c:29:29:9a:30:a9:01:26:f6:90:f0:85:
5e:ab:89:73:3a:14:ed:84:3f:35:4e:06:8a:e5:c7:
a8:e3:75:be:02:1d:9c:16:ab:e9:88:e5:6e:a9:a5:
44:52:51:a4:0d:48:63:31:a4:98:b8:68:6d:bd:6f:
9f:25:5d:b7:ad:06:52:ca:86:32:d1:56:f2:a4:e3:
ad:bf:a7:e0:1e:57:10:de:2a:58:61:9e:c1:79:97:
94:22:5f:06:0d:23:dd:3c:8e:35:48:54:11:63:39:
b1:77:61:73:42:aa:b4:6f:4a:24:05:f1:a8:00:d3:
00:2d:8a:56:52:86:44:9f:e3:38:6f:51:bb:b4:9c:
1b:86:00:fb:82:36:4e:6e:e3:46:94:7f:ea:84:91:
bd:6d:a0:c0:8a:c5:75:df:88:7f:20:21:69:82:97:
d1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:70:24:12:DC:3A:5A:2E:5D:92:D4:C1:52:27:29:F9:BD:73:1A:61
X509v3 Authority Key Identifier:
keyid:80:F3:58:B2:CE:02:BA:8F:F0:BA:14:EE:C5:F3:37:A8:DA:11:C0:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:db:c1:f8:71:c2:d2:69:15:cd:77:f5:dc:11:a9:96:42:40:
29:c3:6d:e9:73:e0:d8:32:58:62:90:9b:25:9b:e1:9d:c9:5f:
f1:23:a4:86:6c:52:29:05:4a:2a:e0:22:8d:fb:4f:b0:26:2c:
67:44:ea:0b:16:3e:1d:fa:a6:25:be:6f:31:1c:c3:d4:3b:21:
eb:fd:95:15:16:5d:5d:3b:bc:f5:47:81:b4:65:4a:7d:9b:05:
4e:60:75:7e:73:82:3e:36:14:3a:3f:db:f2:34:51:e3:09:2a:
3a:ec:ae:1b:49:f4:c5:54:17:d8:96:12:9c:a6:8d:f8:b4:b4:
ec:6e:1b:b3:e5:96:68:a9:c5:43:43:a9:e6:cc:0c:ee:fd:e2:
6e:24:74:e7:0e:c8:2d:96:dd:bd:4b:41:49:68:37:cf:8a:11:
43:27:1e:f9:8f:cb:95:bf:6a:e1:b2:10:ae:6d:7d:d7:d7:0b:
6a:04:10:53:7f:14:54:53:42:88:2e:dd:a9:f5:22:97:79:c1:
ce:4b:99:66:97:75:74:63:b2:7b:d3:70:b4:da:b2:58:7d:e1:
2b:b8:83:d3:c5:fc:3a:8a:16:41:09:b3:62:fe:2c:91:4c:74:
1a:15:48:82:a1:b9:be:f1:5d:bb:53:51:84:13:e2:e1:a0:e6:
18:50:54:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:33:36 2026 by rpki-client