Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File: gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier: L8wimux3dGDN8DugRvcJptNHFlwVpe8BabweWk85HY8=
Subject key identifier: 87:90:70:3F:A2:57:34:2A:E3:36:3B:9D:C9:34:19:A4:71:11:07:E6
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 01A0E3623C5F8342F9904A4992FE72D18BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number: 1A77
Signing time: Sun 27 Sep 2026 15:01:01 +0000
Manifest this update: Sun 27 Sep 2026 15:01:01 +0000
Manifest next update: Mon 28 Sep 2026 15:01:01 +0000
Files and hashes: 1: L4uFGOHvLEPXps89rmc7cieKnGo.roa (hash: WAylc2U6EehO6X6NFUAmv8+wiqpowHD6dwxbr/1OINk=)
2: Wcbt97rneJ6uhU8_PT27jnNgfLI.roa (hash: qSxCnXv18dyEf04PSc7gPJRKdfJ+AzYFyylZthUkbiA=)
3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: x0sRLQtMJM/FBWWFTFfZa9HlEjjHFA22xRqLbKfFsoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:62:3c:5f:83:42:f9:90:4a:49:92:fe:72:d1:8b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: Sep 27 15:01:01 2026 GMT
Not After : Sep 28 15:01:01 2026 GMT
Subject: CN=8790703fa257342ae3363b9dc93419a4711107e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:12:43:7b:cc:22:c4:4e:96:36:c7:a8:4b:79:
b5:f9:8f:8e:b9:d9:cf:00:dc:c9:7b:55:aa:b8:33:
c8:c9:a0:21:cf:03:6d:c3:aa:2b:b5:ef:a7:f2:74:
26:6d:20:e1:c9:d8:6c:af:50:cc:6a:24:4e:ea:cd:
cd:7c:e1:f0:cd:f4:00:ac:e1:4f:07:fb:16:75:86:
2c:45:35:16:74:f2:78:31:02:96:10:59:49:58:a4:
ca:d5:f7:b4:5d:56:c0:6f:96:a9:7f:75:cf:40:e8:
fe:b7:42:2c:5f:37:5d:53:c9:26:e8:f5:7b:5a:ed:
5b:4a:ca:20:c9:d8:c5:f2:a6:11:84:ea:54:8c:29:
c8:8e:f5:dd:ba:88:ad:0b:57:91:65:c2:b4:66:7b:
cb:56:2b:a8:4e:75:fb:63:07:96:15:3e:61:7f:c0:
0e:a9:49:a5:e0:d5:2a:ce:df:c0:d4:04:1e:5e:b1:
47:e6:a9:d2:fc:43:92:1f:88:00:ac:d2:36:e3:19:
b4:53:c4:64:b8:de:93:36:cf:15:fc:6b:6d:c1:32:
b1:14:01:6b:09:a3:36:63:64:a0:4f:0d:68:50:b2:
0e:56:c0:14:a5:38:9d:ba:47:46:07:46:d4:8a:cd:
29:01:9a:ee:4b:92:a3:c4:d0:63:8a:cd:4f:30:0b:
41:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:90:70:3F:A2:57:34:2A:E3:36:3B:9D:C9:34:19:A4:71:11:07:E6
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:0f:ce:f4:dc:2f:ef:b1:84:39:95:31:3d:67:20:5e:07:8f:
01:38:ad:d8:7d:ee:5a:7f:bf:11:35:a7:53:37:9f:62:a3:0d:
3c:57:f2:73:83:80:a5:74:c0:28:65:5f:07:aa:4e:8f:bb:93:
d2:3a:23:36:5b:f7:7a:cb:33:53:f9:00:19:b3:1b:a9:dd:78:
43:c4:a3:d6:dc:74:ad:c6:1c:34:ef:76:34:df:0a:32:6a:ec:
b9:be:b4:34:73:6e:54:9b:6e:17:df:ae:6e:15:5e:b7:02:18:
69:33:3c:e4:8e:fe:f3:7d:6e:2e:e5:c8:96:e1:64:78:e6:da:
fb:5c:29:58:45:a8:55:5a:36:11:7e:b7:96:03:35:68:79:81:
2c:97:de:cd:d1:f5:01:7a:2b:8d:45:d8:e7:56:3d:0c:1c:c5:
6a:37:6d:3c:4b:d8:0b:87:93:42:51:52:d3:ea:26:6f:ad:af:
0a:97:fa:0b:35:6d:c6:60:01:1e:fd:52:98:cf:af:27:00:9c:
49:88:70:07:b8:24:17:e7:e2:0a:4d:96:30:73:64:79:ad:4c:
fb:eb:04:a8:e1:47:30:cf:fb:b5:2c:29:dc:24:86:0e:12:05:
e4:3f:ad:fa:fc:40:e6:bc:f0:5b:2d:22:91:c7:5c:00:1b:51:
9e:0a:24:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:11:27 2026 by rpki-client