Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File: gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier: evO8ALt5ulxAELZb++H1WTJprcCKUqaIIRd86O5h+gY=
Subject key identifier: CF:D5:3B:3D:8B:D4:DD:87:5B:73:49:CB:81:4F:17:FC:52:EE:31:14
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 019F3E6221D8B330DEE2BB78BD6357CF0128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number: 199D
Signing time: Tue 07 Jul 2026 21:00:46 +0000
Manifest this update: Tue 07 Jul 2026 21:00:46 +0000
Manifest next update: Wed 08 Jul 2026 21:00:46 +0000
Files and hashes: 1: L4uFGOHvLEPXps89rmc7cieKnGo.roa (hash: WAylc2U6EehO6X6NFUAmv8+wiqpowHD6dwxbr/1OINk=)
2: Wcbt97rneJ6uhU8_PT27jnNgfLI.roa (hash: qSxCnXv18dyEf04PSc7gPJRKdfJ+AzYFyylZthUkbiA=)
3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: nJAob/f7E2HxNpR6qZe+mY+hw6z4El3LcSAD6moI/UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3e:62:21:d8:b3:30:de:e2:bb:78:bd:63:57:cf:01:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: Jul 7 21:00:46 2026 GMT
Not After : Jul 8 21:00:46 2026 GMT
Subject: CN=cfd53b3d8bd4dd875b7349cb814f17fc52ee3114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:e1:8a:3b:f8:25:60:26:cf:26:a7:28:b6:
bb:11:e0:5f:73:09:d1:78:af:ee:ee:80:a6:a4:9e:
1b:68:2f:1b:71:db:83:9d:84:04:d3:40:b6:e4:2c:
31:c6:96:3e:91:71:73:17:bc:57:56:07:8b:89:d8:
b7:ef:6a:10:04:9f:e2:5b:7a:cd:33:fb:a1:1c:7c:
d0:45:15:97:18:f5:19:65:b1:cc:af:34:a6:c3:9d:
33:97:43:1b:aa:7c:b6:67:9f:53:2c:98:df:58:f5:
ee:e4:b2:7b:31:b1:e5:58:bc:bf:c1:13:21:28:00:
0a:7c:f2:14:dc:a4:38:83:8f:fc:d0:1d:98:b7:b1:
97:87:b6:ab:8c:5c:69:84:4d:27:fd:c8:ec:47:3d:
65:90:94:03:f2:7a:4b:7b:0e:a0:0d:8a:85:93:40:
02:1c:bb:d5:e1:70:3f:1c:53:0e:7a:c1:ee:a7:b7:
71:bd:7a:99:bd:e2:f0:6c:d6:e4:af:04:39:9f:31:
42:ad:3b:e9:a2:e9:37:0b:03:93:db:56:c8:a5:db:
b6:a6:f2:20:18:41:a5:b3:f0:49:eb:b6:8d:65:38:
6d:8e:11:9f:d7:26:2c:6a:8f:5b:c6:22:59:e6:85:
e5:9b:39:33:57:01:d5:3d:08:53:2d:8d:fd:2f:1b:
6a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D5:3B:3D:8B:D4:DD:87:5B:73:49:CB:81:4F:17:FC:52:EE:31:14
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fa:cb:97:80:c3:fd:b9:50:a2:fb:db:39:cb:2e:aa:9d:66:
ed:0c:a2:0f:d8:0e:38:32:77:98:1e:e2:7c:f7:d3:4c:75:21:
00:c8:5f:02:0c:6d:b8:cd:c1:b5:53:da:3b:58:71:17:54:9a:
93:9c:59:29:f0:38:5c:5a:c8:16:a5:a9:dd:8c:db:eb:9c:fb:
ab:29:f1:46:bf:25:a3:cb:8f:aa:7f:64:6a:62:8f:a3:aa:03:
38:b6:c9:2c:80:2d:0d:3d:f9:34:c8:c0:4d:36:03:46:67:d6:
1a:03:4e:67:5a:53:ba:7b:a0:64:58:77:25:fd:d4:fb:c0:4c:
46:b8:3a:12:e1:35:00:d8:4e:fc:6c:f3:11:ba:44:84:b5:d7:
d4:e7:47:01:85:10:fe:12:a8:79:25:6c:9e:64:c6:f1:94:9c:
f9:85:92:6c:2a:07:d7:62:4c:54:5d:73:c8:6b:dc:0d:0c:23:
8c:44:60:ab:b2:1d:b8:bb:6d:83:27:81:fb:33:93:d5:de:22:
2e:84:d9:57:bb:20:81:05:74:a7:33:74:85:54:bc:1e:a4:cf:
0a:44:63:b4:6d:61:44:7b:14:0c:9d:f4:c1:95:03:64:40:dc:
bc:08:70:3e:ff:a6:ef:73:e6:f8:81:38:4b:14:03:c7:93:65:
f8:e4:a1:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8+YiHYszDe4rt4vWNXzwEoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZDYwOGExNDExOGIxYThkY2RkZWJiYjQwZjk2ZWNkNDhm
ODVjNzEwHhcNMjYwNzA3MjEwMDQ2WhcNMjYwNzA4MjEwMDQ2WjAzMTEwLwYDVQQD
EyhjZmQ1M2IzZDhiZDRkZDg3NWI3MzQ5Y2I4MTRmMTdmYzUyZWUzMTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFLhijv4JWAmzyanKLa7EeBfcwnR
eK/u7oCmpJ4baC8bcduDnYQE00C25CwxxpY+kXFzF7xXVgeLidi372oQBJ/iW3rN
M/uhHHzQRRWXGPUZZbHMrzSmw50zl0Mbqny2Z59TLJjfWPXu5LJ7MbHlWLy/wRMh
KAAKfPIU3KQ4g4/80B2Yt7GXh7arjFxphE0n/cjsRz1lkJQD8npLew6gDYqFk0AC
HLvV4XA/HFMOesHup7dxvXqZveLwbNbkrwQ5nzFCrTvpouk3CwOT21bIpdu2pvIg
GEGls/BJ67aNZThtjhGf1yYsao9bxiJZ5oXlmzkzVwHVPQhTLY39LxtqlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/VOz2L1N2HW3NJy4FPF/xS7jEUMB8GA1UdIwQY
MBaAFIDWCKFBGLGo3N3ru0D5bs1I+FxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ05ZSW9VRVlzYWpjM2V1N1FQbHV6VWo0WEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMTIxMzAtODEwMy00YzI1LTkzYmEt
OTkyOGRkM2YyZjgyLzEvZ05ZSW9VRVlzYWpjM2V1N1FQbHV6VWo0WEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wMTIxMzAtODEwMy00YzI1LTkzYmEtOTkyOGRkM2YyZjgy
LzEvZ05ZSW9VRVlzYWpjM2V1N1FQbHV6VWo0WEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/rLl4DD
/blQovvbOcsuqp1m7QyiD9gOODJ3mB7ifPfTTHUhAMhfAgxtuM3BtVPaO1hxF1Sa
k5xZKfA4XFrIFqWp3Yzb65z7qynxRr8lo8uPqn9kamKPo6oDOLbJLIAtDT35NMjA
TTYDRmfWGgNOZ1pTunugZFh3Jf3U+8BMRrg6EuE1ANhO/GzzEbpEhLXX1OdHAYUQ
/hKoeSVsnmTG8ZSc+YWSbCoH12JMVF1zyGvcDQwjjERgq7IduLttgyeB+zOT1d4i
LoTZV7sggQV0pzN0hVS8HqTPCkRjtG1hRHsUDJ30wZUDZEDcvAhwPv+m73Pm+IE4
SxQDx5Nl+OShxQ==
-----END CERTIFICATE-----
Generated at Wed Jul 8 02:37:44 2026 by rpki-client