Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
File: gTPYnAaoocydvDYiAffsVZ1_3Ug.mft (raw, json)
Hash identifier: QQ1bxiqpwKk9k29b8bu3IsWTHp3Kh2Cg9HS9TuCfPik=
Subject key identifier: 12:F4:44:40:35:8B:A9:44:B0:50:33:41:32:45:A7:5C:F7:57:96:3F
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Certificate issuer: /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial: 01A0CF36B28C61483F940819FE95CE0C2546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
Manifest number: 1A76
Signing time: Wed 23 Sep 2026 17:01:03 +0000
Manifest this update: Wed 23 Sep 2026 17:01:03 +0000
Manifest next update: Thu 24 Sep 2026 17:01:03 +0000
Files and hashes: 1: DqhpFnPCBC-nXiqoo22t2JOTosc.roa (hash: ajs/QjIOGij7SJQTsZozQDpENdvgepWfCERRvK8a2WE=)
2: HxVorLXm0yTMdgmPOzs8OYBM6LM.roa (hash: z2JydnrSsQ2VCjSLoL2TGZXu5BWrRoEvvg+D8RtBoMk=)
3: JYn2M7_rIc8fBVgkcpLz4v7BoHA.asa (hash: eCyWidd/dL2hFEJIIveZsFQRYZ6KUzyiJR/MShyECHo=)
4: OcEwazX2C9FVoYqDaEAklZD51E4.asa (hash: bz8AfjLLlJGeoJFNocqyfMPQndZ1FY5w6GpqKW1t4F0=)
5: dNKhuGOoBSmUX8gdSXBPbNyrIHI.roa (hash: 7Y16xJEdb4Me5YuoYupB+Yr4hsFnykSVxLvgMaBpgUU=)
6: gTPYnAaoocydvDYiAffsVZ1_3Ug.crl (hash: QUaaUrzBnivjS18pEF0WYWBiJVTxf6XIA/3pkzTvdec=)
7: nn_1VMvKIWzw2XUgpRSRQ0YbCXA.roa (hash: CAV1aicJa1xV33pauRJjVUr2k+nxSkItYvLJyPNkTTs=)
8: sQ-8x48Ep1WS3twqy1J4_OTWMmY.roa (hash: l3jPEDwSn0P6BHcza22rairxFhC7gu9uXyzjbUobCl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:b2:8c:61:48:3f:94:08:19:fe:95:ce:0c:25:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Validity
Not Before: Sep 23 17:01:03 2026 GMT
Not After : Sep 24 17:01:03 2026 GMT
Subject: CN=12f44440358ba944b05033413245a75cf757963f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ae:9e:36:9d:48:af:00:38:05:37:e2:ab:cd:
d9:c8:73:04:c7:f8:3a:b0:fd:b9:ef:08:6c:63:74:
d6:56:87:45:71:93:f6:42:5f:0f:8c:5c:9b:3b:f6:
39:cc:1a:6f:8c:51:cf:de:0a:4a:1e:59:f3:0f:e1:
73:13:44:cf:41:1c:80:90:85:cf:eb:86:c2:28:f7:
a3:29:5c:81:e5:8f:3e:1e:ca:45:c8:e7:69:a8:fa:
e3:c1:9f:59:23:52:99:fd:1f:1f:ad:a5:6a:26:4c:
82:a8:19:de:b6:bc:ae:af:14:eb:9e:b3:32:b9:70:
00:50:b5:5a:c8:a1:83:3c:86:9e:38:f4:46:44:58:
fe:85:9d:dd:be:16:a1:23:bc:66:c6:be:27:d8:a7:
20:e7:dc:2d:c4:36:49:d8:38:95:45:c8:dc:2a:ed:
5d:63:a6:fe:be:39:25:a2:82:ec:3c:c2:7c:cd:f0:
36:36:97:89:9d:4a:9b:e5:6d:65:c2:3a:ad:3d:db:
63:74:b0:ec:8b:77:ab:bd:74:e4:8f:cc:99:35:2b:
f7:a4:b9:f2:42:47:03:d8:24:9f:96:e0:4e:ed:96:
6b:b9:8b:ac:b1:60:27:55:9b:ee:cf:1d:a9:d8:fe:
24:aa:f5:db:3f:31:a0:e9:65:b3:f4:22:b1:f5:14:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F4:44:40:35:8B:A9:44:B0:50:33:41:32:45:A7:5C:F7:57:96:3F
X509v3 Authority Key Identifier:
keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:25:ae:84:9d:ae:d7:04:05:1b:b8:9d:af:d9:e9:c0:80:de:
c3:46:e3:0a:da:ee:0c:1c:62:15:96:fd:48:ba:e3:71:0a:89:
30:a2:02:5b:4b:12:8f:f1:ec:ba:1b:3b:fb:bb:a4:87:90:08:
88:b3:2d:1e:95:ce:7a:ba:a4:bc:8c:61:71:15:1b:d8:1a:9b:
1d:c7:fd:5c:ba:1d:46:c3:4e:a3:3e:c7:a5:87:0f:c5:15:5b:
ab:14:bb:0f:e5:8d:aa:ed:d8:3e:9c:ec:67:76:2c:5c:f4:e5:
a1:26:ed:0f:df:6c:52:7d:6a:da:5c:e7:10:78:18:7c:ee:0e:
0f:1e:e6:d8:bd:80:5e:73:1e:50:62:e7:f0:5f:61:2a:03:fc:
46:6d:68:77:e3:60:7e:2d:f8:b9:16:19:8e:cb:21:d3:00:71:
2d:45:db:60:20:44:98:b5:8e:f3:61:04:a5:bf:2c:a3:ff:af:
4e:85:bf:d7:70:d3:66:6e:b6:f2:b8:3b:9d:7a:02:8a:a4:2a:
b0:3f:4c:d0:c8:2e:24:4b:1a:d5:ee:9c:98:8e:0c:b8:4a:27:
d4:92:9d:e2:a8:28:49:69:02:c8:3e:40:a7:76:1a:be:0e:b8:
55:c5:dc:81:78:cc:1a:c7:63:d7:c1:d9:0e:09:0f:43:a4:83:
78:da:bd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:42:51 2026 by rpki-client