
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File: gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier: KSSFm8DpY1wwYdkJ9pPKs27pmq75JQ7aheeBLMaDJFg=
Subject key identifier: 56:14:83:83:2C:15:6C:BA:CC:33:CC:1E:CD:9F:24:A1:80:B7:80:31
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 01A0DD97D7E6ECD2B8F6118438EF09BFCC6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 12:01:50 +0000
Manifest this update: Sat 26 Sep 2026 12:01:50 +0000
Manifest next update: Sun 27 Sep 2026 12:01:50 +0000
Files and hashes: 1: L4uFGOHvLEPXps89rmc7cieKnGo.roa (hash: WAylc2U6EehO6X6NFUAmv8+wiqpowHD6dwxbr/1OINk=)
2: Wcbt97rneJ6uhU8_PT27jnNgfLI.roa (hash: qSxCnXv18dyEf04PSc7gPJRKdfJ+AzYFyylZthUkbiA=)
3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: CdhWkAoMTKOvfgLGVvp9Zrf+yIn6O8hAPoJfXSNfyT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:d7:e6:ec:d2:b8:f6:11:84:38:ef:09:bf:cc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: Sep 26 12:01:50 2026 GMT
Not After : Sep 27 12:01:50 2026 GMT
Subject: CN=561483832c156cbacc33cc1ecd9f24a180b78031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:00:cb:65:5a:7d:35:f4:e3:ff:c2:31:f2:f0:
af:20:37:f5:59:9e:f3:65:d1:3b:6a:e3:67:fc:7d:
59:ba:55:40:7b:7e:d9:e1:b4:a0:1e:b4:2f:c1:3f:
3d:cd:58:1e:75:06:d7:0e:8a:f5:0a:3f:a1:cb:3a:
40:ab:8c:ba:d4:59:f9:30:ad:f3:4c:55:5c:bb:1a:
0d:7f:14:f0:fc:ae:eb:6a:f5:73:28:48:e1:98:87:
da:3d:f6:65:e4:39:06:48:85:e5:32:36:57:22:b0:
42:78:d7:92:9c:dc:30:a8:e6:e4:f1:13:a7:94:76:
7f:df:44:66:ab:73:69:44:38:ea:f2:8c:23:90:c4:
4f:45:8c:70:35:bd:c2:e2:56:72:77:62:ba:3d:b6:
04:7c:56:12:5a:ea:02:5a:25:4b:cd:b9:ad:bf:1f:
4d:62:e7:1a:94:ca:65:c4:9f:5b:f4:02:f4:42:07:
d2:7d:86:18:cb:b4:ab:f3:87:06:35:35:60:0a:32:
31:cf:4b:84:2f:d2:5f:a3:eb:70:0a:33:3c:51:39:
0d:dc:40:98:65:d1:bb:23:c9:0f:f3:98:89:41:8d:
67:69:8a:1b:2f:d5:be:c8:9a:25:4a:e0:39:59:67:
2b:a7:6f:bb:ed:26:8c:9e:02:b2:7d:0b:9d:3a:2e:
b6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:14:83:83:2C:15:6C:BA:CC:33:CC:1E:CD:9F:24:A1:80:B7:80:31
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:82:4f:65:e7:9a:c0:47:e1:f8:1b:5d:7a:7e:33:ab:82:f5:
fa:12:9f:03:ab:a4:36:28:23:69:16:54:49:a2:35:90:d8:8a:
b8:7c:94:14:4f:08:ea:7a:c7:54:ef:0e:25:65:36:e2:a8:d0:
ff:0c:e8:02:37:ea:de:be:61:a2:40:ee:6d:df:fa:55:09:3d:
32:3b:34:2d:03:f5:dd:b8:8c:bf:17:66:c8:85:00:51:97:89:
62:57:59:53:db:1f:c7:22:62:a3:2c:23:72:ff:8a:04:1c:cf:
60:4e:53:55:f1:09:80:5e:4c:3f:a5:03:73:3f:06:ac:a5:4d:
cb:0c:10:1a:a7:7f:7a:f4:40:cc:70:74:b8:5e:37:93:1e:6f:
05:83:66:5e:7a:ae:b5:de:d6:9e:12:18:2a:28:82:d9:28:8d:
9c:30:6f:85:18:b5:e8:96:97:0a:43:bf:c4:47:cf:50:e1:7f:
5f:a9:e0:44:de:eb:ab:a8:51:a0:12:1a:e2:45:ae:11:1a:40:
b3:6a:db:a2:e5:dc:80:4a:84:03:22:90:c6:04:fa:2a:16:a2:
0a:fa:91:13:21:35:06:bd:ad:f0:f2:c0:05:b8:a3:44:6a:c8:
6c:da:6f:0a:70:f3:a9:52:06:17:e8:4c:a4:2a:13:a9:bf:ee:
2d:2b:e9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:27:01 2026 by rpki-client