
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
File: gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft (raw, json)
Hash identifier: 58Kk8VJWXPkbMjzDPDhzbKVCGv73sFpQuwWTvzWAYdY=
Subject key identifier: FA:02:26:E2:B0:0C:35:F9:CF:74:3A:C9:BD:ED:42:CB:83:E9:A1:10
Authority key identifier: 80:F3:58:B2:CE:02:BA:8F:F0:BA:14:EE:C5:F3:37:A8:DA:11:C0:DC
Certificate issuer: /CN=80f358b2ce02ba8ff0ba14eec5f337a8da11c0dc
Certificate serial: 01A0DC17658F5B1074461F777B6C8EFE0712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
Manifest number: 0366
Signing time: Sat 26 Sep 2026 05:01:55 +0000
Manifest this update: Sat 26 Sep 2026 05:01:55 +0000
Manifest next update: Sun 27 Sep 2026 05:01:55 +0000
Files and hashes: 1: 4L-Jua-2JEh-ZF5izuHQE1QIgHg.asa (hash: /hw923UzyAllXo5sTey8z8qOf1YJkIdoRHUKHmoEep4=)
2: _d-CFEMcXTCBxMYYwaRIA3_8Mj8.roa (hash: wJlrxRnPc85yw0LRsjdXZscmyYO4/G8JoNKPUPsic7k=)
3: gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl (hash: KYaMPbEQV+U8HZ/VmrSb/s8VQ8P9bJLS6YzSis7zuSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:65:8f:5b:10:74:46:1f:77:7b:6c:8e:fe:07:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f358b2ce02ba8ff0ba14eec5f337a8da11c0dc
Validity
Not Before: Sep 26 05:01:55 2026 GMT
Not After : Sep 27 05:01:55 2026 GMT
Subject: CN=fa0226e2b00c35f9cf743ac9bded42cb83e9a110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:c4:ac:13:34:b3:c8:ab:6e:ca:a2:40:95:
71:1a:7d:1c:76:26:58:d8:a1:15:9d:c9:3c:fe:97:
6d:21:30:53:a8:53:67:97:4e:42:68:63:65:21:d7:
6f:a7:46:de:c8:17:44:5a:10:3d:50:5d:c3:39:2c:
85:b9:2f:cf:b3:3a:26:2b:80:a1:1d:86:ce:de:8b:
ea:5a:b3:05:18:f4:b4:6e:65:09:75:c1:7c:1b:c7:
1b:74:f9:e7:f8:07:f1:98:71:c1:db:26:ff:73:ea:
1a:c8:9f:37:20:bc:7f:24:de:03:14:7c:49:d8:9e:
9f:90:ff:7d:cf:4c:a3:9d:8d:db:14:08:f8:ba:77:
5c:15:30:24:37:9e:15:8f:7a:26:57:76:85:26:b8:
c6:ee:32:ae:3f:fb:1d:1a:b2:45:0b:a0:48:07:9b:
4e:9f:46:17:58:88:b4:43:66:5e:2d:00:dc:b4:75:
e4:b5:0a:fb:83:e0:34:f8:c0:a2:a1:46:de:1b:a1:
ab:f1:ec:35:4b:1a:05:ce:69:2c:df:a9:dd:6b:5d:
86:72:ae:7b:aa:77:cf:04:e6:b5:25:df:0d:66:b8:
2e:4f:86:97:ef:da:7d:99:a6:4b:61:c4:ba:34:fb:
42:d2:29:0c:e1:0e:e1:85:c0:8f:01:11:0a:95:98:
0d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:02:26:E2:B0:0C:35:F9:CF:74:3A:C9:BD:ED:42:CB:83:E9:A1:10
X509v3 Authority Key Identifier:
keyid:80:F3:58:B2:CE:02:BA:8F:F0:BA:14:EE:C5:F3:37:A8:DA:11:C0:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6c:e2:77:d2:fb:89:ed:3f:f1:e1:14:e0:c4:54:08:e7:b2:
1b:49:5f:d5:77:47:2f:7a:0a:dc:e3:27:34:b0:33:38:5e:66:
b1:1e:c6:79:cb:47:c7:bc:95:67:8b:7c:5a:be:9d:31:ae:2a:
cf:18:ab:8b:54:5d:21:b9:0e:2e:81:aa:ec:33:dc:5b:fa:99:
d5:53:6c:ae:a9:02:b7:de:e6:b8:20:80:11:3e:71:90:3a:9c:
e8:ce:0e:0f:f2:9a:80:b4:5f:df:34:38:af:6c:f6:48:03:f0:
0f:da:2c:b5:77:ad:2f:0b:3d:ff:cd:dd:2d:53:8f:f0:f2:1e:
8d:b9:de:14:b1:15:b0:87:a2:41:38:36:da:fa:22:30:50:01:
4e:3d:82:13:79:96:07:f5:47:f2:a9:58:04:b5:88:42:e3:f8:
be:d1:79:94:be:8d:57:26:5e:da:34:9c:bb:6a:42:3e:01:ab:
65:83:69:39:f8:3f:71:9e:52:3a:4c:2f:a1:0c:3c:2c:53:7b:
9b:a5:f8:d2:8b:d1:0b:15:24:fc:30:05:0c:f8:af:58:27:16:
a7:61:2d:af:cf:36:9c:b3:03:f4:20:2d:2b:52:51:96:4a:e8:
23:75:9c:34:54:47:90:2d:6d:26:e8:b6:c4:33:17:a0:c4:fe:
19:60:2d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:06:28 2026 by rpki-client