Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
File: gTPYnAaoocydvDYiAffsVZ1_3Ug.mft (raw, json)
Hash identifier: WAnd/x0/7Betaan+QNHrSoXWpDe8Z0p4GpvhUX3BuvQ=
Subject key identifier: 2C:BC:33:7C:F3:72:A5:FC:A1:C1:F6:D4:3A:54:8C:9F:43:60:C2:2B
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Certificate issuer: /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial: 019D24DE472CAA247ECC750D813DD339F1FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
Manifest number: 1890
Signing time: Wed 25 Mar 2026 12:00:40 +0000
Manifest this update: Wed 25 Mar 2026 12:00:40 +0000
Manifest next update: Thu 26 Mar 2026 12:00:40 +0000
Files and hashes: 1: DqhpFnPCBC-nXiqoo22t2JOTosc.roa (hash: ajs/QjIOGij7SJQTsZozQDpENdvgepWfCERRvK8a2WE=)
2: HxVorLXm0yTMdgmPOzs8OYBM6LM.roa (hash: z2JydnrSsQ2VCjSLoL2TGZXu5BWrRoEvvg+D8RtBoMk=)
3: bPvHroswcwAkdBw_epDr6gouAwg.asa (hash: bY+XhEE+AaYgV3V8EVL7hrM7XjVUTKeRjopiuQFPAQE=)
4: dNKhuGOoBSmUX8gdSXBPbNyrIHI.roa (hash: 7Y16xJEdb4Me5YuoYupB+Yr4hsFnykSVxLvgMaBpgUU=)
5: gTPYnAaoocydvDYiAffsVZ1_3Ug.crl (hash: wOPotoi496AaMrtdul5vM2F5+KhaaikjiuV3uUbXerM=)
6: nn_1VMvKIWzw2XUgpRSRQ0YbCXA.roa (hash: CAV1aicJa1xV33pauRJjVUr2k+nxSkItYvLJyPNkTTs=)
7: sQ-8x48Ep1WS3twqy1J4_OTWMmY.roa (hash: l3jPEDwSn0P6BHcza22rairxFhC7gu9uXyzjbUobCl8=)
8: uZOm1tg1qNqD8IlY2U1oJ1qnlig.asa (hash: V59RDlnWRRn+EdVBUc5GRnaFwy5JZDP/rY0LRZhUhmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:47:2c:aa:24:7e:cc:75:0d:81:3d:d3:39:f1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Validity
Not Before: Mar 25 12:00:40 2026 GMT
Not After : Mar 26 12:00:40 2026 GMT
Subject: CN=2cbc337cf372a5fca1c1f6d43a548c9f4360c22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:56:69:0c:12:50:dd:3f:0b:6c:ff:7e:dd:
64:67:04:2e:4f:65:77:44:1a:e6:22:2a:b6:5e:4c:
0c:5f:98:20:87:5b:22:92:ac:c8:45:4d:b2:7b:4c:
7d:48:8c:0d:ec:7d:09:7f:84:55:8c:29:79:33:7d:
a4:42:c3:04:c3:35:5b:81:e7:32:89:92:f7:ae:9b:
af:d0:06:fe:e5:f1:78:d8:fc:c1:9e:da:57:c2:31:
ff:17:ff:f5:22:7f:05:01:61:21:79:95:03:29:99:
51:e2:b1:04:0d:45:1b:b3:bb:d5:b3:bb:04:b2:b2:
dc:46:cf:12:dd:cf:96:e8:7d:01:ce:94:d4:7b:98:
32:4e:7f:f6:70:72:75:25:8a:cd:46:a3:79:8a:80:
60:21:e6:2e:c5:5e:47:ee:5a:93:9c:98:9b:0a:ec:
04:b1:fb:d8:9e:29:9e:c0:7e:04:5e:f2:dd:8a:e9:
f2:30:4f:a6:0e:62:a9:b9:b1:6e:14:12:f9:fa:d8:
ef:80:1c:87:a6:1c:6d:0b:6d:f9:29:88:8c:01:c4:
bb:a8:11:9a:90:79:6f:1e:eb:99:72:6d:3e:bb:89:
ac:0d:1e:6e:2a:ab:c0:74:72:dd:ca:ec:0d:a9:83:
48:bc:fd:c8:f7:cb:9f:bc:0e:cd:ba:59:44:b0:6c:
c6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BC:33:7C:F3:72:A5:FC:A1:C1:F6:D4:3A:54:8C:9F:43:60:C2:2B
X509v3 Authority Key Identifier:
keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:85:86:e7:96:af:22:f1:2e:68:c3:2f:20:e9:c6:b0:46:50:
bc:1d:ea:88:3d:47:ac:14:ef:e1:63:bf:a7:c8:9f:dc:28:06:
78:06:ea:1a:83:f9:8a:7d:42:e5:ff:3a:1e:05:89:de:9d:2d:
07:2c:40:9b:0e:57:fa:5b:ef:5b:f9:64:69:f6:b0:5e:69:79:
31:6b:78:44:c0:25:3b:59:6f:67:98:b7:89:0c:fc:6f:05:84:
1d:4b:d9:2a:a1:36:62:13:3b:55:fa:c3:72:34:1f:75:96:7c:
3e:11:fa:10:3c:0b:b6:ec:fa:72:b4:a1:ae:c4:53:d2:40:76:
d1:b5:bb:eb:94:9c:5c:0c:bf:41:6e:c8:17:23:88:a1:6d:0b:
48:f9:ff:e1:51:ae:12:99:4a:b4:a7:79:8b:47:ba:60:40:65:
fe:29:8e:cc:b8:50:89:b1:f5:69:57:63:df:d3:48:67:25:f2:
5d:15:2f:c5:30:a7:0c:20:55:5d:06:65:e2:e0:9e:56:70:6d:
65:9f:ab:9b:c6:b1:ab:1c:ad:ca:83:78:1a:1d:bf:42:af:db:
4c:5f:45:ed:78:35:14:a4:f4:6d:24:3f:8a:4a:b8:69:63:3c:
d9:db:ac:75:3d:61:44:db:7a:c8:dc:72:f1:2a:8b:a6:32:ae:
e7:c3:60:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:24:20 2026 by rpki-client