Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
File: gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft (raw, json)
Hash identifier: QWhXnxbDd+phvdF1K8ZcT1plQPwrVOz5G/Vgj2o0pxQ=
Subject key identifier: 2B:5C:8C:59:88:DF:8B:A7:BA:6A:63:B8:37:67:B8:A8:BC:25:2C:48
Authority key identifier: 80:F3:58:B2:CE:02:BA:8F:F0:BA:14:EE:C5:F3:37:A8:DA:11:C0:DC
Certificate issuer: /CN=80f358b2ce02ba8ff0ba14eec5f337a8da11c0dc
Certificate serial: 019CB0C86BEC545586AB8AB55691AF0A721B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
Manifest number: 013C
Signing time: Mon 02 Mar 2026 23:00:50 +0000
Manifest this update: Mon 02 Mar 2026 23:00:50 +0000
Manifest next update: Tue 03 Mar 2026 23:00:50 +0000
Files and hashes: 1: 156cev6jxdaS9CKH_J7urLFNox0.roa (hash: IR52/Lw7/la2ANoAjFKa1rlTWLrtGkhOKVZLP6cf7EI=)
2: gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl (hash: mivsvs6EnqKf9Mi5N+BDVNaorgbe6Diou5AQHFMwFnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:c8:6b:ec:54:55:86:ab:8a:b5:56:91:af:0a:72:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f358b2ce02ba8ff0ba14eec5f337a8da11c0dc
Validity
Not Before: Mar 2 23:00:50 2026 GMT
Not After : Mar 3 23:00:50 2026 GMT
Subject: CN=2b5c8c5988df8ba7ba6a63b83767b8a8bc252c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:59:f5:35:37:8d:44:5a:d3:19:02:89:d1:2a:
b4:92:71:72:e8:69:e1:21:a3:06:c4:5f:80:9b:d5:
b9:46:82:26:ed:8f:06:64:4b:3d:77:6b:ac:da:ec:
aa:99:59:34:84:b5:bc:ca:2d:4c:5b:ff:a8:89:f8:
c4:5b:37:ea:16:f2:7b:32:6a:97:92:63:a3:b6:7f:
73:9b:5b:97:81:cd:77:c4:a1:98:4c:85:74:d3:e5:
48:5e:68:61:1b:bd:09:38:10:5d:ae:d3:da:f0:f3:
95:5c:c0:2f:87:50:37:ff:1e:d4:d1:60:45:01:55:
fa:0f:26:7d:50:36:08:37:6b:04:ba:12:68:36:f2:
d7:b3:32:ee:7f:ad:19:e2:92:c0:aa:0c:58:d8:92:
24:e6:58:cf:e2:b6:c1:2b:4e:b5:f4:c5:b3:55:39:
ac:f1:10:ad:3d:1f:b8:72:9b:9a:72:81:1a:f1:06:
7e:ed:49:19:f5:b7:72:20:48:c5:f4:04:e0:ba:22:
35:cc:b4:e5:54:d9:cf:2e:fa:24:50:33:99:a3:59:
d3:df:41:b5:6a:57:d2:34:5d:8c:04:fb:a2:5c:97:
f6:c5:4c:8d:4f:54:e5:ed:b0:63:ea:2a:d7:6b:90:
44:c9:12:40:be:df:2c:e3:b0:8a:ea:30:af:ba:c1:
31:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5C:8C:59:88:DF:8B:A7:BA:6A:63:B8:37:67:B8:A8:BC:25:2C:48
X509v3 Authority Key Identifier:
keyid:80:F3:58:B2:CE:02:BA:8F:F0:BA:14:EE:C5:F3:37:A8:DA:11:C0:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c4:cc:24:68:f9:92:6b:a5:64:73:89:42:90:c2:a3:65:78:
91:e2:04:14:4f:dd:f0:ec:c3:39:e7:81:96:91:3a:d6:10:b6:
81:9b:de:79:b4:7e:d7:b9:32:85:3e:f7:72:ac:e6:c6:02:9f:
0e:d1:aa:06:37:83:66:b9:ce:68:54:3f:cb:e0:ca:c3:c2:e0:
b3:cd:b3:d5:82:8d:20:ab:04:45:71:31:0d:1c:bc:9c:8c:eb:
08:80:ea:96:1a:ce:57:4e:25:6d:80:08:6b:15:b0:a5:31:4b:
f0:36:a8:eb:9b:44:67:5d:59:1f:48:fa:06:0d:db:b3:93:0d:
09:3d:ce:3a:b0:3b:43:61:3e:74:c9:ab:a2:08:2c:85:70:01:
63:82:67:d7:4d:d0:bd:9c:34:8e:53:3b:d1:2c:cf:dd:13:1e:
34:e3:1d:96:16:89:b2:0e:a2:0b:bf:99:ac:a5:99:17:a6:9d:
43:f7:8f:69:ad:b5:c4:4c:46:7b:02:d0:3f:4f:46:34:34:93:
49:8b:b5:f5:7a:ed:da:f7:3b:32:07:90:3f:d1:71:ee:ad:cd:
78:50:76:a9:54:fb:91:be:2f:35:85:40:13:1a:22:cb:70:cd:
76:7b:35:f8:96:0c:67:d5:bb:5a:7d:87:9b:13:cb:0a:17:49:
7a:38:78:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 08:34:12 2026 by rpki-client