Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File: gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier: tVD6wjikY0VxBWzIQuta9Pt84A3kJ56ndAdsNb2Qf4s=
Subject key identifier: A5:EA:91:E9:2B:4B:7A:7A:29:20:5F:18:B1:B7:FA:1A:90:85:17:BE
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 019D38D3B08533CA2D19928824DFA522846D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:01:30 +0000
Manifest this update: Sun 29 Mar 2026 09:01:30 +0000
Manifest next update: Mon 30 Mar 2026 09:01:30 +0000
Files and hashes: 1: L4uFGOHvLEPXps89rmc7cieKnGo.roa (hash: WAylc2U6EehO6X6NFUAmv8+wiqpowHD6dwxbr/1OINk=)
2: Wcbt97rneJ6uhU8_PT27jnNgfLI.roa (hash: qSxCnXv18dyEf04PSc7gPJRKdfJ+AzYFyylZthUkbiA=)
3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: lxTd/cfnfvlFmkNlr7VkypynMSWICSO5lhapKFIZbR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b0:85:33:ca:2d:19:92:88:24:df:a5:22:84:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: Mar 29 09:01:30 2026 GMT
Not After : Mar 30 09:01:30 2026 GMT
Subject: CN=a5ea91e92b4b7a7a29205f18b1b7fa1a908517be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a2:74:f6:44:49:29:30:89:7b:bd:98:3e:da:
e9:73:fd:53:de:47:b1:80:7e:db:dd:fb:cd:71:60:
31:b6:93:09:d0:d5:3e:be:d5:e1:fe:03:a5:7c:4e:
72:a1:23:1d:3c:b4:ea:3e:ff:7b:73:93:ad:50:46:
f9:4d:da:d1:59:45:0d:62:36:e9:bc:3f:9a:a2:5a:
d8:b5:1f:af:b5:0f:3d:65:af:c8:a0:f7:89:15:08:
94:15:c9:10:35:c6:b0:da:d5:dd:f8:0b:7c:a7:4a:
d4:ed:92:f7:75:15:d8:a6:72:fd:c2:99:85:c8:05:
11:09:42:f2:85:30:7b:3e:52:9b:87:b7:6b:32:ae:
d8:9b:8c:3c:f4:de:ff:b6:66:57:8e:71:90:c0:e5:
aa:b9:e6:2b:de:92:7a:98:4f:c8:69:8b:63:da:f4:
c5:2a:ce:8b:32:09:b7:f3:f3:25:86:e3:08:96:bb:
13:ec:e3:4c:34:ce:74:cf:52:b6:a9:52:5e:bc:bc:
64:5e:31:fe:a7:14:43:14:b3:60:7e:53:d8:9c:d1:
c3:1d:cf:09:18:0b:3e:45:2d:6d:d1:3e:00:e0:2d:
db:72:1c:85:77:e7:d5:20:a3:73:51:f6:14:2a:6b:
f3:f1:35:a8:51:a9:25:e6:36:6c:5e:8b:b7:55:f6:
2e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EA:91:E9:2B:4B:7A:7A:29:20:5F:18:B1:B7:FA:1A:90:85:17:BE
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:36:97:d5:88:fd:25:42:62:e9:90:e2:e6:1c:be:91:10:91:
c6:e6:07:48:17:5b:49:49:79:99:97:38:8f:ee:4c:19:d7:e4:
6c:8a:f4:da:61:d7:23:5c:99:29:7c:26:56:d3:3f:32:40:f3:
f9:38:45:ab:64:77:1a:d8:4c:24:7f:51:90:d3:96:6e:6e:33:
67:4e:74:28:d4:c4:35:02:dd:d8:dd:f1:d1:a2:c8:91:4a:1a:
fa:9e:f0:39:93:a8:b3:58:ac:3a:16:b1:52:4a:96:23:e2:77:
20:ec:aa:5c:31:8a:a3:c6:b3:65:c6:ec:00:4d:80:15:21:aa:
ef:c2:71:65:bb:67:96:c2:46:cd:e7:02:d4:17:cb:a4:f3:9a:
48:54:86:01:73:12:10:51:74:85:3c:c8:01:32:ed:88:d2:32:
8a:d5:f3:41:be:75:bf:0c:3c:73:d8:a2:50:0e:bb:f0:33:9d:
85:97:43:c1:34:cd:06:57:4e:95:38:c0:dc:93:cf:f2:1f:b6:
ec:7e:26:cd:71:26:8e:17:85:d6:65:98:bb:2c:b8:e8:c9:96:
ce:0e:11:bf:10:1d:63:7c:e2:c2:41:8c:d8:f9:09:03:e4:eb:
4e:ed:5a:b4:07:b5:65:44:04:f3:e3:66:eb:80:c1:05:93:c5:
fd:d5:8e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:24 2026 by rpki-client