Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File: gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier: zMWodRHCU6iUhFOIUbeaWnuEtIFL8K6bOs0dgBr3XmM=
Subject key identifier: FE:57:A2:08:66:C9:D5:E2:D0:30:9B:3F:85:01:80:CA:D3:E0:DD:57
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 019FAA88978B546EAA41A2DF047E9D87149A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 21:01:45 +0000
Manifest this update: Tue 28 Jul 2026 21:01:45 +0000
Manifest next update: Wed 29 Jul 2026 21:01:45 +0000
Files and hashes: 1: L4uFGOHvLEPXps89rmc7cieKnGo.roa (hash: WAylc2U6EehO6X6NFUAmv8+wiqpowHD6dwxbr/1OINk=)
2: Wcbt97rneJ6uhU8_PT27jnNgfLI.roa (hash: qSxCnXv18dyEf04PSc7gPJRKdfJ+AzYFyylZthUkbiA=)
3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: q4GRKFyEwl0T0TKZrUTo9YLA8TZyajoPmFwkViF8+6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:97:8b:54:6e:aa:41:a2:df:04:7e:9d:87:14:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: Jul 28 21:01:45 2026 GMT
Not After : Jul 29 21:01:45 2026 GMT
Subject: CN=fe57a20866c9d5e2d0309b3f850180cad3e0dd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1d:8f:0f:3e:80:d9:bd:39:ff:dd:f3:9e:73:
75:91:95:f1:16:66:c5:80:2b:c1:6b:1e:33:d7:a8:
bb:a2:df:c6:89:eb:b7:48:17:ac:41:f1:78:91:6f:
8d:a4:55:5d:48:84:12:ed:6b:7c:20:94:ef:f8:18:
6c:fe:08:65:da:02:d3:59:29:5e:e0:3f:a6:26:fb:
83:e6:a7:f2:d9:95:93:ff:87:f8:2a:d6:d6:d4:89:
4c:c2:aa:78:4f:39:6e:d3:9c:64:00:b7:1b:71:e7:
d5:35:c2:ac:dc:41:dc:cb:bd:b2:58:85:68:c8:42:
47:bb:53:cb:ad:0a:44:06:1d:f1:71:88:af:b2:de:
5c:7c:f1:d7:93:34:66:56:28:c6:cc:f7:60:6f:43:
64:cd:64:61:43:dc:56:ba:ad:e1:12:0b:44:1b:0d:
11:cf:ff:90:9d:9a:c1:92:38:ed:35:0a:80:81:4c:
4c:1a:b4:8a:dd:23:dd:01:10:6c:fe:99:0e:90:11:
70:a9:f2:00:e1:b1:0e:fd:a4:76:0a:81:79:b7:f0:
71:93:75:7d:ba:ad:19:ce:c4:34:8f:2b:6d:46:17:
60:4b:f6:a2:8c:da:a2:cb:61:8b:75:46:49:99:e0:
7f:ce:cc:7b:63:86:11:ca:2f:6f:1d:e0:a6:3a:3c:
0c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:57:A2:08:66:C9:D5:E2:D0:30:9B:3F:85:01:80:CA:D3:E0:DD:57
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:c2:83:1e:7c:a4:57:6c:ed:43:01:75:6c:ea:32:0b:2d:17:
fd:6c:b8:1b:de:89:51:20:56:9a:b3:b8:cd:72:a3:e9:77:fa:
71:99:e0:a2:26:7a:07:65:c0:a2:f6:68:18:1b:9e:40:84:5b:
e7:53:c5:04:2e:c1:38:f1:47:7c:0a:71:7d:4b:e4:bd:ac:26:
1a:9f:00:46:5a:c5:86:1a:0f:a5:a8:e2:b8:b0:f5:36:3e:eb:
02:be:bb:10:60:8c:03:50:78:21:ab:78:89:fa:9a:53:4e:21:
99:21:df:b0:f3:b7:07:ba:85:76:9c:53:17:bd:a6:92:44:f1:
76:7f:47:23:77:d8:81:2f:26:6e:16:89:a1:3f:12:bc:79:25:
13:d3:80:d9:b2:9b:b3:00:b5:d6:74:86:05:da:01:49:c3:f3:
fb:ce:92:d2:88:92:03:e4:68:dd:e1:1b:1e:72:4a:02:c5:fc:
8e:24:d0:71:64:db:0d:73:38:87:c8:9d:d4:d0:8b:d1:06:11:
b6:f0:16:8c:82:bb:87:f4:ca:3e:38:b9:c8:9f:89:33:9b:fc:
5f:d3:1d:43:13:9d:25:60:fd:32:ff:c1:6b:f7:98:21:9c:43:
d3:ea:7e:f5:1a:a7:1a:86:9f:8f:82:f5:c4:c1:77:2b:6f:08:
b9:c5:4f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:31:47 2026 by rpki-client