Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
File: gTPYnAaoocydvDYiAffsVZ1_3Ug.mft (raw, json)
Hash identifier: Ff/jZ0ZmrWgavXUcoOAnId459sO9RsijO6xHHH+wG8k=
Subject key identifier: F7:36:85:A5:6D:22:4F:68:FF:9E:5D:52:F2:9C:FF:D4:2C:B1:62:0B
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Certificate issuer: /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial: 019D26CCF8810F74B67C0869241335A25D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
Manifest number: 1891
Signing time: Wed 25 Mar 2026 21:01:00 +0000
Manifest this update: Wed 25 Mar 2026 21:01:00 +0000
Manifest next update: Thu 26 Mar 2026 21:01:00 +0000
Files and hashes: 1: DqhpFnPCBC-nXiqoo22t2JOTosc.roa (hash: ajs/QjIOGij7SJQTsZozQDpENdvgepWfCERRvK8a2WE=)
2: HxVorLXm0yTMdgmPOzs8OYBM6LM.roa (hash: z2JydnrSsQ2VCjSLoL2TGZXu5BWrRoEvvg+D8RtBoMk=)
3: bPvHroswcwAkdBw_epDr6gouAwg.asa (hash: bY+XhEE+AaYgV3V8EVL7hrM7XjVUTKeRjopiuQFPAQE=)
4: dNKhuGOoBSmUX8gdSXBPbNyrIHI.roa (hash: 7Y16xJEdb4Me5YuoYupB+Yr4hsFnykSVxLvgMaBpgUU=)
5: gTPYnAaoocydvDYiAffsVZ1_3Ug.crl (hash: S6uwNyf7pu1raqQL1KfwQwLfuDfgz4lCvf9f/ZBs+uw=)
6: nn_1VMvKIWzw2XUgpRSRQ0YbCXA.roa (hash: CAV1aicJa1xV33pauRJjVUr2k+nxSkItYvLJyPNkTTs=)
7: sQ-8x48Ep1WS3twqy1J4_OTWMmY.roa (hash: l3jPEDwSn0P6BHcza22rairxFhC7gu9uXyzjbUobCl8=)
8: uZOm1tg1qNqD8IlY2U1oJ1qnlig.asa (hash: V59RDlnWRRn+EdVBUc5GRnaFwy5JZDP/rY0LRZhUhmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:f8:81:0f:74:b6:7c:08:69:24:13:35:a2:5d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Validity
Not Before: Mar 25 21:01:00 2026 GMT
Not After : Mar 26 21:01:00 2026 GMT
Subject: CN=f73685a56d224f68ff9e5d52f29cffd42cb1620b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8a:f7:59:f7:e5:1b:2b:26:e8:2a:5c:c8:ca:
7e:1d:47:05:03:32:45:f1:62:25:f9:91:5e:dd:05:
f7:7e:3b:8a:f2:6d:9f:fd:5a:1c:d6:6c:cd:99:cf:
c8:88:3a:80:ca:bf:4c:ae:55:07:27:7d:a4:bb:ad:
e2:4c:db:10:f7:63:0a:8d:39:16:ce:cf:8e:23:33:
f3:63:0e:56:d0:0d:d7:63:be:45:ab:f3:bd:8f:6a:
d2:7b:dc:a5:c6:23:58:8a:50:9f:50:5f:ad:4a:e2:
18:c0:e2:bd:ef:7a:ea:01:a0:ad:89:b4:e1:c2:f2:
53:10:cc:c7:8b:99:e3:e5:fe:70:c2:ad:4e:fe:40:
4d:73:1c:46:d8:10:20:16:71:46:dd:1b:ad:7c:97:
3f:3c:21:4b:40:14:85:46:ad:37:76:78:3e:aa:a4:
fc:62:8a:e8:00:4d:ea:f9:4a:43:92:67:7b:20:c0:
46:25:d1:0e:95:9a:07:81:8d:88:a9:a6:99:b5:56:
20:24:ca:44:0c:0e:c0:c6:67:e2:61:75:ab:35:97:
bd:e1:e5:9c:6a:67:0d:59:83:cc:38:52:12:be:de:
30:92:b1:c6:86:9d:1c:61:e9:90:19:5b:b0:1b:c5:
c1:4d:ab:ac:39:54:15:b7:74:a6:75:cd:ff:a9:56:
4b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:36:85:A5:6D:22:4F:68:FF:9E:5D:52:F2:9C:FF:D4:2C:B1:62:0B
X509v3 Authority Key Identifier:
keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:98:00:4b:a3:b6:db:58:aa:f3:58:f8:b2:e0:be:73:a4:24:
52:2e:3f:64:9f:75:00:c2:ed:9b:63:b1:c7:3c:21:7a:42:a2:
fd:15:e0:2e:88:91:75:16:7f:c4:a0:1f:2c:83:ff:fc:bf:f7:
2d:31:ad:93:c6:96:32:31:b9:7b:49:02:5c:51:13:88:f3:85:
47:fc:13:c5:95:66:66:3a:de:7a:29:78:14:7d:9f:26:11:47:
2c:8d:02:a6:15:1c:03:9b:17:5f:2f:e7:b9:6d:00:41:7e:59:
f5:58:21:bc:bb:f6:a7:61:f0:54:07:aa:99:0d:fe:26:a6:34:
b5:47:ae:4b:8e:0b:57:c2:0b:95:71:f4:b4:af:29:79:89:e5:
74:1c:1a:62:27:9c:c6:10:ea:d2:67:00:a2:08:6d:7f:57:3d:
0c:7d:f0:bd:3d:ce:5a:df:d9:7f:db:45:e5:4e:a1:55:9f:fe:
19:47:d4:45:f8:65:b2:69:9b:46:37:13:0c:be:b2:2e:07:7e:
e5:92:df:5e:02:1d:63:2e:14:ea:cf:0a:e4:47:b1:69:f1:f6:
37:a9:cd:c6:19:90:d4:be:28:dd:2a:b8:13:73:52:2e:91:53:
4b:ee:50:af:f7:8e:34:69:6a:9b:26:07:a3:f8:5d:1a:25:25:
ea:78:e8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:35 2026 by rpki-client