Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
File: gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft (raw, json)
Hash identifier: VolNASnHaHR6SygQAYEXlIcni2bEuCLafpf+jE16ueM=
Subject key identifier: 9F:F6:BD:78:EB:92:EE:F0:D3:1B:5E:1A:3F:D4:14:77:FE:89:45:6E
Authority key identifier: 80:F3:58:B2:CE:02:BA:8F:F0:BA:14:EE:C5:F3:37:A8:DA:11:C0:DC
Certificate issuer: /CN=80f358b2ce02ba8ff0ba14eec5f337a8da11c0dc
Certificate serial: 01A1295677724564A9C667A7BDE13E14C26D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
Manifest number: 038E
Signing time: Sun 11 Oct 2026 05:01:34 +0000
Manifest this update: Sun 11 Oct 2026 05:01:34 +0000
Manifest next update: Mon 12 Oct 2026 05:01:34 +0000
Files and hashes: 1: 4L-Jua-2JEh-ZF5izuHQE1QIgHg.asa (hash: /hw923UzyAllXo5sTey8z8qOf1YJkIdoRHUKHmoEep4=)
2: _d-CFEMcXTCBxMYYwaRIA3_8Mj8.roa (hash: wJlrxRnPc85yw0LRsjdXZscmyYO4/G8JoNKPUPsic7k=)
3: gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl (hash: og4/CqBUltLWK+AasPlXfSt5cWmquxMiQ99Vlx+t4ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:56:77:72:45:64:a9:c6:67:a7:bd:e1:3e:14:c2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f358b2ce02ba8ff0ba14eec5f337a8da11c0dc
Validity
Not Before: Oct 11 05:01:34 2026 GMT
Not After : Oct 12 05:01:34 2026 GMT
Subject: CN=9ff6bd78eb92eef0d31b5e1a3fd41477fe89456e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:10:46:39:cf:bd:20:e3:3d:d2:2e:c3:fa:e0:
01:3e:99:08:f7:83:e2:b9:04:39:cc:fa:b0:37:9a:
ad:66:5a:f7:8c:8d:66:5d:f3:60:6f:93:c6:94:1a:
47:fd:92:35:fc:31:47:ac:77:2c:3e:c8:2f:14:48:
41:e9:26:07:28:be:ac:cb:b3:03:69:8f:5d:e9:62:
17:42:5f:da:1d:6a:2f:07:e6:8a:99:ef:2c:83:ea:
96:bf:ad:97:c4:28:fe:9f:b0:26:c1:df:f6:1a:3b:
a5:2e:0e:ae:c3:c1:0b:ea:d8:9b:d1:a3:79:f9:93:
64:d8:3e:8a:ba:e7:b9:92:f5:8f:ea:6f:89:06:e3:
2d:46:b4:4d:23:1a:02:7f:23:de:7c:d5:78:28:9f:
de:0c:ad:5f:3f:98:70:b6:91:0f:30:42:dc:99:7d:
37:7a:b8:05:be:a8:3a:e3:2c:d1:86:47:fc:70:b9:
3d:58:36:1b:dc:48:05:b0:1d:55:47:84:6a:1c:16:
28:22:51:dd:22:67:b9:3e:53:6a:a7:8e:34:5a:93:
8d:db:25:11:99:fc:91:c7:77:da:96:ff:9c:98:69:
5d:90:02:9b:34:67:62:92:0a:c6:63:da:72:b9:a8:
e2:ea:c3:7d:b2:2e:07:75:b2:5e:9f:10:1a:53:8f:
49:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F6:BD:78:EB:92:EE:F0:D3:1B:5E:1A:3F:D4:14:77:FE:89:45:6E
X509v3 Authority Key Identifier:
keyid:80:F3:58:B2:CE:02:BA:8F:F0:BA:14:EE:C5:F3:37:A8:DA:11:C0:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:63:d4:4a:28:b5:cc:fe:e8:3e:e8:fa:96:4f:fc:cf:5d:0c:
68:60:6c:d6:31:5a:eb:c7:49:82:38:e7:d3:96:f8:ca:a2:ad:
63:c2:c7:80:99:87:5b:0e:85:5d:cc:0b:ce:57:a0:b1:c1:08:
95:24:ff:a5:c0:10:57:01:cc:2d:61:c5:50:88:99:b3:ca:89:
92:31:a3:31:21:9b:83:57:18:65:1e:76:35:92:ab:55:0c:e8:
db:5c:bd:66:14:68:6a:16:98:5e:08:c9:ee:bf:71:76:5f:b4:
c5:ee:de:d9:b3:3b:ab:85:32:6e:5a:c8:0a:61:95:57:9a:fb:
19:fb:e8:53:7b:a4:b4:b1:b1:d9:53:59:69:b6:4b:7d:90:a8:
ae:9e:e2:68:37:2d:bd:8b:6c:9e:df:75:78:b7:d7:b9:a0:60:
14:8c:ef:1b:6e:25:25:11:19:6d:bd:2f:0c:44:25:bb:82:64:
53:a4:fa:ea:78:9e:aa:b2:6d:3a:88:b0:1b:7c:a8:21:04:3c:
1e:46:dd:c1:80:73:d3:f5:14:ce:95:82:78:40:46:5a:7c:7c:
56:1c:e9:96:51:27:d8:2f:37:53:0f:ec:b3:ee:d3:3c:fe:30:
ec:62:98:1a:38:f4:2a:fa:7a:a9:30:fb:97:ab:66:f1:31:74:
2f:10:ce:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:48:09 2026 by rpki-client