Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File: gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier: vir96gD0g6BVWU7vTIkv47sRdCnH8V4aGw/JhLfYGz0=
Subject key identifier: 72:A4:BC:2D:48:7A:78:AB:B9:64:54:4C:82:5D:FB:6F:47:EF:39:D7
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 019E491F4DFAB0397DE2A51E80E2A2A43519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number: 191E
Signing time: Thu 21 May 2026 06:00:48 +0000
Manifest this update: Thu 21 May 2026 06:00:48 +0000
Manifest next update: Fri 22 May 2026 06:00:48 +0000
Files and hashes: 1: L4uFGOHvLEPXps89rmc7cieKnGo.roa (hash: WAylc2U6EehO6X6NFUAmv8+wiqpowHD6dwxbr/1OINk=)
2: Wcbt97rneJ6uhU8_PT27jnNgfLI.roa (hash: qSxCnXv18dyEf04PSc7gPJRKdfJ+AzYFyylZthUkbiA=)
3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: pig9tYoy93967dPd6SKRp4QxuCtoaonye+fk6vzkt8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:1f:4d:fa:b0:39:7d:e2:a5:1e:80:e2:a2:a4:35:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: May 21 06:00:48 2026 GMT
Not After : May 22 06:00:48 2026 GMT
Subject: CN=72a4bc2d487a78abb964544c825dfb6f47ef39d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1f:da:19:92:8d:f2:b1:ee:70:6c:b9:45:f6:
0c:b5:c6:c4:3b:60:55:58:29:32:fb:bd:85:72:3f:
28:84:9a:37:4b:a8:b8:32:a0:80:95:97:3a:21:c2:
7b:ff:ba:ae:07:1b:81:94:a5:45:40:5b:48:77:b5:
24:db:55:3a:8b:43:b4:5a:a3:2d:24:7a:19:5c:0c:
0a:1c:fc:be:37:b4:ff:ad:e0:fa:60:3c:24:06:91:
a7:ac:c2:79:67:6c:cc:09:94:3d:38:bb:0d:a7:86:
b5:1f:6c:fa:6d:40:9a:3a:eb:de:42:14:72:fc:0b:
1c:23:9f:9d:25:cf:59:49:41:15:7e:c3:ca:24:0d:
1f:ca:52:c5:20:d2:80:c0:d5:99:76:89:b1:67:61:
ac:86:db:33:07:8a:4d:76:a2:2d:bd:56:47:1e:dd:
49:d1:c0:1e:9f:3d:30:4a:48:67:fa:fc:db:cd:3b:
19:b0:89:63:bc:90:d2:b9:e5:22:f4:e0:3b:40:5d:
fd:01:a0:42:03:56:fa:89:e6:a1:b7:c3:19:28:b9:
4e:44:25:84:2d:d8:57:62:e6:f4:d1:58:fc:8a:67:
4c:37:c0:e1:81:f8:6a:53:3e:b3:93:48:31:e1:29:
52:24:1c:61:b3:8f:7e:bb:0e:78:b4:66:c8:1d:ef:
82:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A4:BC:2D:48:7A:78:AB:B9:64:54:4C:82:5D:FB:6F:47:EF:39:D7
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:f8:1f:00:c5:ea:85:7c:79:da:46:95:dc:d8:6d:4c:e1:e8:
4b:2c:6b:c9:b5:46:f4:83:e4:ac:47:40:78:f1:3b:44:9c:d5:
d9:d0:77:76:30:8d:44:ce:91:65:fa:66:d3:44:95:a7:d7:ae:
bd:36:f2:c4:9f:bd:85:5d:69:67:a9:ff:39:ec:2b:5e:cd:73:
41:56:44:e4:db:6e:96:ea:13:0d:13:92:84:ce:41:4e:5c:70:
24:d6:ce:72:0b:0b:38:7b:f7:8d:1e:38:0c:c3:50:b2:80:13:
1c:a6:81:1b:7f:26:21:23:bc:32:33:6a:9a:2d:d7:c4:f0:30:
85:bf:cf:19:f0:92:39:74:3d:70:56:ac:b8:72:3e:54:4d:56:
91:75:a0:f5:71:1d:1d:3e:34:67:e4:2a:b8:5e:9f:fc:bf:cd:
77:b8:ad:04:3c:b1:b4:46:7c:db:86:09:e9:73:24:ec:17:78:
90:2b:f4:71:fa:be:86:5c:d8:eb:16:11:a1:b1:e2:2d:53:30:
fd:dc:1a:34:a0:22:a7:2f:f9:f9:eb:3f:ea:4f:98:64:8b:54:
c8:bc:fc:0f:17:58:ab:a1:b6:e3:6b:d7:5c:f9:5c:ac:d0:3b:
fb:b3:e7:fe:02:fa:82:04:16:36:2b:40:04:13:a7:30:f4:37:
4d:c6:e4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:35:56 2026 by rpki-client