
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File: gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier: Ot/DlEygVUPzWoYLO/YWwPSbVR7GJW7TPnQxhq++BbM=
Subject key identifier: 30:6A:F7:93:C9:F0:5F:21:39:1F:6A:3D:B5:81:B6:3D:F5:2C:2F:64
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 01A026218BB5F5D7BD18FEE7F8932936A920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number: 1A15
Signing time: Fri 21 Aug 2026 21:02:07 +0000
Manifest this update: Fri 21 Aug 2026 21:02:07 +0000
Manifest next update: Sat 22 Aug 2026 21:02:07 +0000
Files and hashes: 1: L4uFGOHvLEPXps89rmc7cieKnGo.roa (hash: WAylc2U6EehO6X6NFUAmv8+wiqpowHD6dwxbr/1OINk=)
2: Wcbt97rneJ6uhU8_PT27jnNgfLI.roa (hash: qSxCnXv18dyEf04PSc7gPJRKdfJ+AzYFyylZthUkbiA=)
3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: A4F2/ewWVp9Nnz6EkDEUH5JAjaKRcLKgr4gP43H79LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 19:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:21:8b:b5:f5:d7:bd:18:fe:e7:f8:93:29:36:a9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: Aug 21 21:02:07 2026 GMT
Not After : Aug 22 21:02:07 2026 GMT
Subject: CN=306af793c9f05f21391f6a3db581b63df52c2f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:7e:75:33:74:5e:f8:3e:b2:5b:7d:ac:3f:
45:79:67:62:48:27:b6:b6:ab:78:57:99:ac:3b:3c:
02:48:a4:69:b2:42:47:4e:0c:e1:02:d1:c2:16:14:
05:a1:5e:a5:f6:66:6a:b8:d4:40:48:a8:37:98:dc:
f6:ce:39:24:9e:f1:a8:d2:c7:ee:aa:44:6e:ca:d7:
cc:f4:91:46:28:77:2a:e7:9f:ce:3e:f1:81:2f:76:
3a:b2:20:37:9b:94:6c:d4:8b:c0:fd:0c:36:c3:ac:
53:8f:32:75:74:6b:d1:99:26:71:6f:4c:50:90:30:
f9:54:ef:37:b3:1f:b4:6c:35:28:30:b7:91:5b:e1:
fb:ac:54:62:a0:5c:c9:41:38:96:f8:43:ca:b2:10:
45:2a:f7:c0:7d:c4:08:31:86:5a:33:43:bb:98:f3:
0f:bc:5f:e6:6e:16:43:b6:2c:67:81:84:3d:60:17:
c6:9a:43:e8:e5:97:05:92:a4:f8:04:62:e1:32:b2:
30:43:95:6a:00:6b:01:23:b4:41:ca:ae:39:70:4c:
20:ed:08:cb:6b:b5:81:29:17:90:e5:7f:c6:4c:24:
48:bd:ce:24:da:86:78:b7:08:2e:f2:81:20:8e:44:
bd:c3:95:d8:20:e9:d2:51:7a:db:5b:ae:db:11:37:
c1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6A:F7:93:C9:F0:5F:21:39:1F:6A:3D:B5:81:B6:3D:F5:2C:2F:64
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:d9:b1:c2:52:21:56:e1:f6:8a:2f:7a:93:b0:e1:aa:fe:1a:
53:cb:d3:65:4a:8a:f9:6f:24:e9:70:b0:58:8f:44:cb:1d:96:
ff:87:8e:4d:26:17:d8:b8:fd:97:fe:6a:1c:a0:72:00:c1:ef:
13:1b:0d:66:f8:62:60:78:46:7a:9c:e7:e2:f3:d8:8c:26:ac:
e5:db:0c:dc:8b:67:30:9e:e0:c0:2c:bd:16:f8:f9:43:4b:53:
4b:54:a5:ed:83:41:15:62:b3:3e:fd:bb:2e:e4:b5:2f:8a:8e:
4f:75:6e:a5:da:46:96:14:8b:6c:ba:2b:f1:7d:8e:fc:d3:0f:
af:f1:7b:14:22:a4:20:78:23:e0:46:ff:52:ff:70:12:be:32:
8f:cb:a3:21:68:06:5c:46:d5:02:30:8e:cc:4c:56:a4:4d:9e:
6f:87:f0:5b:66:8e:02:07:95:ee:d6:c2:3f:22:a6:3c:0c:e5:
e4:73:59:ff:e1:59:eb:40:c2:e9:16:d2:22:c5:fb:d7:2c:be:
80:72:96:2b:da:a3:c8:93:d1:15:0c:d9:30:36:b9:71:ab:e9:
1b:98:17:cb:c0:4c:4e:72:51:74:77:93:ef:3b:78:1e:78:f9:
fa:f9:80:be:3f:c2:6e:83:4b:15:56:85:e3:82:41:6c:20:d3:
4b:58:9e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 05:26:14 2026 by rpki-client