Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File: gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier: xKoX0DGghXhhDJhPsZxxlXynbkkWxC/73HBwrQaNmqw=
Subject key identifier: 37:0E:CB:15:32:75:68:98:BA:E6:FB:20:37:04:4D:21:9C:C7:08:06
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 019E1EA347FD36E543ACCAA616B4675A39C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 00:01:17 +0000
Manifest this update: Wed 13 May 2026 00:01:17 +0000
Manifest next update: Thu 14 May 2026 00:01:17 +0000
Files and hashes: 1: L4uFGOHvLEPXps89rmc7cieKnGo.roa (hash: WAylc2U6EehO6X6NFUAmv8+wiqpowHD6dwxbr/1OINk=)
2: Wcbt97rneJ6uhU8_PT27jnNgfLI.roa (hash: qSxCnXv18dyEf04PSc7gPJRKdfJ+AzYFyylZthUkbiA=)
3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: HKkGyynt0agXl82mPT0BLIJARLCDMCV5ZcllK6cnuMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:47:fd:36:e5:43:ac:ca:a6:16:b4:67:5a:39:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: May 13 00:01:17 2026 GMT
Not After : May 14 00:01:17 2026 GMT
Subject: CN=370ecb1532756898bae6fb2037044d219cc70806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:45:1c:e2:ab:f6:9f:c5:fd:33:14:af:4c:33:
36:0d:98:b6:ae:6f:ea:4b:4b:0f:c5:5a:e4:f6:a5:
61:e0:b5:70:29:fd:91:90:f8:cb:7e:c4:77:60:85:
ee:1c:fd:d0:27:48:39:c9:14:4b:9f:73:2d:74:22:
1a:85:6d:c8:e2:f2:71:fa:af:21:cd:ab:1f:ab:c6:
5c:1f:71:bc:db:5a:6d:6c:75:ce:c0:3c:dc:c3:98:
12:fe:e3:81:00:5d:69:51:1d:21:0b:3b:bb:24:c9:
e1:c6:11:f7:05:e8:2c:2f:b6:09:62:ce:b7:83:63:
d9:47:ee:54:0b:a4:ed:25:c8:28:4b:af:dd:cf:0a:
0a:04:56:9d:3b:45:df:07:61:ef:a8:32:61:ae:e7:
c3:14:86:b1:7e:b5:8f:69:24:8a:b7:ab:d5:ae:ac:
51:ff:c7:5e:e8:ee:69:f6:a0:ec:60:4b:65:3d:b5:
42:66:ce:78:79:ec:25:02:e8:94:23:73:78:42:48:
95:a0:8c:28:f9:7c:57:94:ec:95:ae:3e:03:c4:31:
4b:eb:a1:30:0f:5f:0d:b1:36:46:27:28:41:5b:1e:
72:17:d9:66:a8:a4:ab:8c:ed:11:3d:7a:76:0e:99:
23:15:d4:66:35:5f:02:7b:ce:12:ad:b7:dc:83:91:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0E:CB:15:32:75:68:98:BA:E6:FB:20:37:04:4D:21:9C:C7:08:06
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:26:c3:f5:25:be:19:bf:f4:5a:c0:db:93:d3:5f:1f:33:fa:
a4:62:09:f3:29:0c:df:10:93:bd:a0:08:87:e6:e7:26:d5:62:
60:a6:c6:2b:e2:2f:bb:7f:eb:53:59:b6:46:03:1d:03:50:66:
d4:26:45:6a:1f:62:7e:26:6f:a9:0f:e2:7b:0d:25:8d:37:bb:
d5:22:06:47:a5:45:25:a4:2b:87:3f:fe:90:73:15:33:14:61:
be:f1:09:e0:6d:56:86:aa:74:aa:a8:28:34:c6:86:18:0e:b0:
9e:96:f0:9c:1b:6e:d3:14:7a:d2:d8:74:ca:db:8f:48:8b:11:
d0:90:bf:88:3a:13:be:b6:a4:ec:40:10:07:a2:34:36:67:f3:
4e:a6:46:be:07:ff:44:17:7f:0f:b0:9f:c6:fd:a8:37:f9:1c:
97:48:2b:39:89:6d:07:a5:7d:f2:d8:1b:ed:4a:e5:2f:f0:44:
18:2c:61:b9:1d:b2:62:33:ab:e8:bf:d1:65:40:3e:a9:06:8f:
7e:61:6b:97:1c:03:f8:ff:3c:33:be:5d:fa:e6:75:00:2a:1a:
71:a5:26:cb:ac:c5:45:fa:d1:75:db:fd:0e:70:d1:12:6a:fb:
21:db:9d:1d:1b:ad:27:b2:19:28:f6:ca:53:76:c4:61:8e:85:
cf:eb:de:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:27:24 2026 by rpki-client