Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
File: gTPYnAaoocydvDYiAffsVZ1_3Ug.mft (raw, json)
Hash identifier: CZQHJ120jwT1GwD8f5OHe53yQ8VvMcU6oNhdfoQdZD8=
Subject key identifier: A6:DE:08:63:F5:54:34:A9:5E:4F:EF:B6:D3:15:D3:57:8D:F6:69:71
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Certificate issuer: /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial: 019E1DFE263B514540C1516D3C8EFF6B8692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
Manifest number: 1911
Signing time: Tue 12 May 2026 21:00:55 +0000
Manifest this update: Tue 12 May 2026 21:00:55 +0000
Manifest next update: Wed 13 May 2026 21:00:55 +0000
Files and hashes: 1: DqhpFnPCBC-nXiqoo22t2JOTosc.roa (hash: ajs/QjIOGij7SJQTsZozQDpENdvgepWfCERRvK8a2WE=)
2: HxVorLXm0yTMdgmPOzs8OYBM6LM.roa (hash: z2JydnrSsQ2VCjSLoL2TGZXu5BWrRoEvvg+D8RtBoMk=)
3: bPvHroswcwAkdBw_epDr6gouAwg.asa (hash: bY+XhEE+AaYgV3V8EVL7hrM7XjVUTKeRjopiuQFPAQE=)
4: dNKhuGOoBSmUX8gdSXBPbNyrIHI.roa (hash: 7Y16xJEdb4Me5YuoYupB+Yr4hsFnykSVxLvgMaBpgUU=)
5: gTPYnAaoocydvDYiAffsVZ1_3Ug.crl (hash: BODtrUQC6IzpJGuEzkvTuSH/ABzQUy4SsVeGSPzZNZg=)
6: nn_1VMvKIWzw2XUgpRSRQ0YbCXA.roa (hash: CAV1aicJa1xV33pauRJjVUr2k+nxSkItYvLJyPNkTTs=)
7: sQ-8x48Ep1WS3twqy1J4_OTWMmY.roa (hash: l3jPEDwSn0P6BHcza22rairxFhC7gu9uXyzjbUobCl8=)
8: uZOm1tg1qNqD8IlY2U1oJ1qnlig.asa (hash: V59RDlnWRRn+EdVBUc5GRnaFwy5JZDP/rY0LRZhUhmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:26:3b:51:45:40:c1:51:6d:3c:8e:ff:6b:86:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Validity
Not Before: May 12 21:00:55 2026 GMT
Not After : May 13 21:00:55 2026 GMT
Subject: CN=a6de0863f55434a95e4fefb6d315d3578df66971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:38:f5:50:96:11:88:d1:24:c5:0e:7b:06:
21:f2:14:e8:77:0e:f4:15:8b:9b:d4:5e:25:be:d8:
93:e0:59:ee:11:50:9e:4e:2c:48:b7:c6:83:01:e2:
3a:55:32:51:bf:72:61:39:50:b4:8b:64:24:b8:59:
e0:dd:1e:d6:39:68:14:1b:d3:b0:30:0a:ac:f7:66:
03:08:59:24:49:4f:51:57:0d:a3:de:fb:11:f5:2c:
bf:1a:aa:08:45:db:ff:70:73:2c:a7:21:53:dd:21:
b3:ac:7f:b9:6f:93:c8:95:89:80:6b:dc:f6:b5:e7:
a1:f9:ca:68:29:f7:d8:20:b5:c8:8a:d9:22:c1:8b:
a8:c3:67:87:79:0a:d0:02:c8:23:ec:70:e4:38:3d:
75:69:b2:50:70:05:6e:0a:21:df:ba:3e:6b:0d:04:
d4:4c:35:ef:4e:95:42:e6:e8:b7:46:c5:8b:e3:ff:
50:8b:68:8a:b6:11:11:24:a3:ba:eb:84:a1:83:b8:
2d:fa:80:95:ff:f0:91:85:9b:2b:1f:e4:70:0b:17:
ae:8b:ed:eb:a5:ae:8f:be:15:14:41:2d:ea:55:15:
a5:0f:89:6b:28:79:08:ac:64:12:69:44:b9:b4:01:
ae:c3:02:54:d4:13:d4:28:01:d9:09:6b:6a:4a:cc:
26:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DE:08:63:F5:54:34:A9:5E:4F:EF:B6:D3:15:D3:57:8D:F6:69:71
X509v3 Authority Key Identifier:
keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0a:7f:fb:e1:3f:05:d0:b6:7f:2a:31:79:1a:01:c5:74:b4:
d8:05:b3:23:ef:b4:ad:d7:70:a4:14:39:21:48:e1:3f:6d:2c:
16:2c:5a:c1:a5:70:71:1b:67:9c:3d:b5:ff:95:42:ea:2d:93:
2c:c3:c4:fc:d4:90:cc:ed:d6:d6:ae:23:97:12:17:41:b3:4d:
54:05:93:f0:80:22:94:16:c3:93:60:6c:a3:67:eb:3b:fd:bd:
79:a6:ff:95:fd:46:60:1a:b6:8e:f3:a8:a3:f1:2b:a1:25:d3:
4d:d2:47:83:c6:d5:79:c2:b1:88:13:b0:e7:8b:28:d3:1a:88:
dd:0f:a0:07:d9:5a:a4:2d:75:a9:51:9f:62:1c:b6:ba:45:f1:
bb:03:8b:3c:64:84:87:a6:8f:5e:d2:93:32:76:0e:c4:86:5d:
66:b2:3a:4a:24:dd:fa:04:74:51:fa:d9:da:d8:78:f6:de:0d:
f7:71:f3:d2:fa:4a:fe:a5:de:fe:7f:2f:52:e4:aa:38:2e:6a:
46:91:49:21:d5:1f:a4:81:78:c5:af:f1:59:f4:e4:24:f5:32:
d2:51:ba:2b:c5:18:ce:95:86:77:37:6b:9f:83:8d:e0:14:93:
cb:c9:cc:c5:33:1e:5b:58:ee:1c:36:71:55:a6:46:64:6b:fe:
42:39:92:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:29:32 2026 by rpki-client