Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
File: gTPYnAaoocydvDYiAffsVZ1_3Ug.mft (raw, json)
Hash identifier: j0L2uucIa2qiJvblBjgScDiZ28aw+KuvwzHJyOuE3dQ=
Subject key identifier: DE:00:0D:7F:7A:29:D9:C3:91:45:37:8C:5F:D5:A2:7C:82:66:C5:FC
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Certificate issuer: /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial: 019DCED03BB0409552866342825EB67BA627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
Manifest number: 18E8
Signing time: Mon 27 Apr 2026 12:00:46 +0000
Manifest this update: Mon 27 Apr 2026 12:00:46 +0000
Manifest next update: Tue 28 Apr 2026 12:00:46 +0000
Files and hashes: 1: DqhpFnPCBC-nXiqoo22t2JOTosc.roa (hash: ajs/QjIOGij7SJQTsZozQDpENdvgepWfCERRvK8a2WE=)
2: HxVorLXm0yTMdgmPOzs8OYBM6LM.roa (hash: z2JydnrSsQ2VCjSLoL2TGZXu5BWrRoEvvg+D8RtBoMk=)
3: bPvHroswcwAkdBw_epDr6gouAwg.asa (hash: bY+XhEE+AaYgV3V8EVL7hrM7XjVUTKeRjopiuQFPAQE=)
4: dNKhuGOoBSmUX8gdSXBPbNyrIHI.roa (hash: 7Y16xJEdb4Me5YuoYupB+Yr4hsFnykSVxLvgMaBpgUU=)
5: gTPYnAaoocydvDYiAffsVZ1_3Ug.crl (hash: oVkT3H7SVRZF86jBONreJJQCyQrG7Ob417VgEepsWYk=)
6: nn_1VMvKIWzw2XUgpRSRQ0YbCXA.roa (hash: CAV1aicJa1xV33pauRJjVUr2k+nxSkItYvLJyPNkTTs=)
7: sQ-8x48Ep1WS3twqy1J4_OTWMmY.roa (hash: l3jPEDwSn0P6BHcza22rairxFhC7gu9uXyzjbUobCl8=)
8: uZOm1tg1qNqD8IlY2U1oJ1qnlig.asa (hash: V59RDlnWRRn+EdVBUc5GRnaFwy5JZDP/rY0LRZhUhmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:3b:b0:40:95:52:86:63:42:82:5e:b6:7b:a6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Validity
Not Before: Apr 27 12:00:46 2026 GMT
Not After : Apr 28 12:00:46 2026 GMT
Subject: CN=de000d7f7a29d9c39145378c5fd5a27c8266c5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:50:ff:56:e6:04:13:2b:0e:0a:91:7e:50:b4:
ab:91:12:77:a0:a4:05:ed:9f:e0:db:8b:c6:6d:c4:
67:11:64:86:45:9f:f7:58:0e:4a:d5:8a:ec:e9:5f:
e0:56:7b:df:cf:f3:30:ce:66:59:37:23:b3:5a:80:
54:29:05:c0:78:98:29:a0:08:3b:cc:d2:3a:9b:7f:
f4:5b:aa:3c:b5:8e:8c:24:ea:02:b7:39:43:27:dc:
59:58:ea:7c:a2:48:41:09:f5:85:94:df:99:fe:e8:
30:4c:9b:c6:47:98:f6:b0:54:53:ac:34:00:dd:bb:
67:dd:ed:cd:c0:92:50:c3:3b:e1:ac:41:47:dc:dc:
b1:19:f5:9b:70:42:ad:87:f9:fa:e7:9b:72:4b:f3:
be:53:fa:00:28:a1:8e:9f:2b:3e:17:c9:7d:44:4e:
14:47:88:51:24:9a:2d:4d:28:4b:92:b7:19:07:e1:
f1:64:e8:8e:b7:e7:56:45:2e:f4:c3:5f:68:30:e6:
92:6b:de:8d:4d:c0:6d:9d:54:8c:5a:18:82:c0:8d:
59:13:af:ba:fc:53:7b:e0:71:ab:dd:d8:34:b2:87:
b1:c2:d1:c9:66:7c:4d:57:41:e0:34:f3:e1:75:1f:
a3:0b:c4:48:78:d3:65:66:3d:8d:d1:9e:0d:91:b0:
c7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:00:0D:7F:7A:29:D9:C3:91:45:37:8C:5F:D5:A2:7C:82:66:C5:FC
X509v3 Authority Key Identifier:
keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:6e:0a:06:20:47:89:a2:4e:59:7f:bb:f7:47:16:f1:ec:0b:
90:6b:1a:8e:bb:2b:c0:41:8c:80:c5:11:b9:b8:ac:2f:9e:a2:
b0:a7:5d:9e:0a:85:d9:53:0f:8a:14:41:d2:68:23:24:ae:04:
c6:f5:fd:02:ac:d8:49:c5:8a:4b:f8:9a:36:43:a9:b9:10:2b:
16:f9:86:a4:25:63:76:a9:a0:70:59:e8:e9:c9:b6:f2:67:0b:
33:63:0f:d3:9b:0e:d0:61:90:fe:e1:1a:9e:b3:8c:81:52:80:
e1:6c:d9:05:dc:de:b7:26:8e:27:34:2a:4b:83:2c:6d:7e:a4:
4c:27:d9:5b:e7:3e:44:ba:52:bd:53:38:78:4d:86:67:cb:d5:
e9:63:15:54:10:d6:05:46:4c:64:59:e1:ec:d7:13:89:aa:78:
34:94:58:51:ab:8a:a5:f4:83:85:da:9c:96:61:37:be:6a:d7:
a3:87:54:bb:79:a7:88:40:2a:84:a7:d6:d6:d5:e6:21:c0:7b:
54:08:16:88:87:88:d4:c3:ec:e1:86:ad:c8:83:17:96:19:74:
3a:f4:a1:3a:35:a9:2f:0c:3f:f2:c0:2a:12:bc:00:82:69:0b:
c4:f2:41:ee:a7:65:44:bf:1e:12:7b:e3:13:b8:2d:59:ff:65:
91:56:c7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:21:00 2026 by rpki-client