
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
File: gTPYnAaoocydvDYiAffsVZ1_3Ug.mft (raw, json)
Hash identifier: UpkCPDZiECDzwJPRv+JT+YuY312FzCHcBJfIa61gFPs=
Subject key identifier: 35:41:A8:45:C2:9C:61:BA:3D:28:C8:D9:71:27:9B:A9:C9:CD:C6:DC
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Certificate issuer: /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial: 019EFC16498D36920CF60034DEA4295980EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
Manifest number: 1984
Signing time: Thu 25 Jun 2026 00:02:59 +0000
Manifest this update: Thu 25 Jun 2026 00:02:59 +0000
Manifest next update: Fri 26 Jun 2026 00:02:59 +0000
Files and hashes: 1: DqhpFnPCBC-nXiqoo22t2JOTosc.roa (hash: ajs/QjIOGij7SJQTsZozQDpENdvgepWfCERRvK8a2WE=)
2: HxVorLXm0yTMdgmPOzs8OYBM6LM.roa (hash: z2JydnrSsQ2VCjSLoL2TGZXu5BWrRoEvvg+D8RtBoMk=)
3: bPvHroswcwAkdBw_epDr6gouAwg.asa (hash: bY+XhEE+AaYgV3V8EVL7hrM7XjVUTKeRjopiuQFPAQE=)
4: dNKhuGOoBSmUX8gdSXBPbNyrIHI.roa (hash: 7Y16xJEdb4Me5YuoYupB+Yr4hsFnykSVxLvgMaBpgUU=)
5: gTPYnAaoocydvDYiAffsVZ1_3Ug.crl (hash: FIBCW/4L/pO7+p/UybOWeFUIyXdwBfTG6zpm2mK9c1c=)
6: nn_1VMvKIWzw2XUgpRSRQ0YbCXA.roa (hash: CAV1aicJa1xV33pauRJjVUr2k+nxSkItYvLJyPNkTTs=)
7: sQ-8x48Ep1WS3twqy1J4_OTWMmY.roa (hash: l3jPEDwSn0P6BHcza22rairxFhC7gu9uXyzjbUobCl8=)
8: uZOm1tg1qNqD8IlY2U1oJ1qnlig.asa (hash: V59RDlnWRRn+EdVBUc5GRnaFwy5JZDP/rY0LRZhUhmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:16:49:8d:36:92:0c:f6:00:34:de:a4:29:59:80:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Validity
Not Before: Jun 25 00:02:59 2026 GMT
Not After : Jun 26 00:02:59 2026 GMT
Subject: CN=3541a845c29c61ba3d28c8d971279ba9c9cdc6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:b6:b7:b1:a9:3e:44:02:1c:1b:19:fb:c1:
fc:fd:e7:8b:53:c8:e9:bd:81:89:83:88:dd:a5:7a:
b1:72:ef:7b:54:53:e9:4c:4d:fb:bd:f7:03:44:3e:
8d:bb:93:61:9e:49:b2:2e:bd:63:de:58:95:8f:48:
2e:3d:db:a2:c9:22:67:f6:c2:71:c7:0c:44:3a:26:
c2:96:40:aa:c8:bb:4b:a2:c0:3f:9c:f9:ae:b1:7f:
fd:e4:9a:b0:3a:6a:6d:57:3f:b4:1b:8b:be:28:c0:
5f:74:d5:60:38:20:73:40:f2:60:72:a0:a6:ab:d3:
ee:db:4b:7a:d1:56:97:3c:34:92:56:da:fc:ec:40:
c0:43:36:08:bb:56:d2:34:e0:5a:fb:31:79:34:e2:
3a:af:79:f8:49:5d:12:94:5a:3e:5e:c9:c6:02:7f:
9d:93:b1:06:61:70:89:7b:53:21:9a:f8:b8:55:06:
ca:db:25:72:e0:39:be:bc:03:23:f9:b0:62:dd:ba:
b3:27:df:ef:6c:a0:45:4b:36:75:20:f4:c1:2a:29:
d7:4a:a9:5c:0f:7f:78:a7:aa:04:48:aa:a4:32:c7:
17:60:90:dd:d5:47:6a:21:d8:8e:8c:3e:06:00:5d:
df:ea:fe:c0:4b:67:3a:90:17:2b:47:15:47:6a:d1:
e4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:41:A8:45:C2:9C:61:BA:3D:28:C8:D9:71:27:9B:A9:C9:CD:C6:DC
X509v3 Authority Key Identifier:
keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:da:56:b8:db:a3:6f:f2:16:6c:40:ec:8b:a2:8c:0f:45:4b:
c4:11:75:69:ac:f9:4c:ca:29:dc:ea:1b:79:45:90:6c:05:9c:
96:c5:d2:04:6f:04:5c:92:22:41:00:11:e7:49:5f:df:9e:0d:
f2:92:7f:8e:47:8e:36:3a:06:61:d1:25:a5:c5:35:84:1d:cf:
c2:4e:ed:cd:77:64:f1:45:68:4c:8a:e6:4f:15:b1:9b:24:0d:
72:d7:ee:a2:76:d5:1f:09:ac:40:3d:8a:47:db:23:03:55:6b:
c0:19:7f:97:ea:91:82:7c:f7:88:46:04:a8:94:0f:33:9d:51:
9c:b1:61:a4:85:f7:af:34:6b:d1:46:0d:40:60:47:2f:92:5d:
97:91:89:08:8b:07:f1:70:b4:d3:dd:66:5f:c0:d1:52:c7:92:
ce:57:e7:43:a7:d0:ad:46:71:f6:2d:ba:02:54:1e:1d:cb:3b:
ed:2d:fe:20:91:68:54:44:1c:12:49:3a:78:cc:c6:25:34:98:
bb:48:b2:c5:38:f5:32:0d:9f:4e:0e:f8:24:00:6b:cb:b3:da:
f7:82:1f:75:f6:4e:f5:20:75:2d:8f:03:8b:cb:19:f1:f2:ca:
cb:6d:c4:5f:ea:ea:63:8e:33:cb:67:73:25:11:df:20:b2:80:
23:26:76:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:30:23 2026 by rpki-client