Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json)
Hash identifier: AE1ySbHjN2K4g2k8TQD3KL6cjYfrTUi6fjvjo+emAEM=
Subject key identifier: 9E:28:36:F8:B0:54:48:94:4E:EE:10:26:BE:C2:11:8E:8A:3F:4A:D2
Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Certificate serial: 01A0E8C0CAAC71F3E57AEDE7E8DC5AD10FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
Manifest number: 1890
Signing time: Mon 28 Sep 2026 16:02:23 +0000
Manifest this update: Mon 28 Sep 2026 16:02:23 +0000
Manifest next update: Tue 29 Sep 2026 16:02:23 +0000
Files and hashes: 1: 3fcVrImGg7jj5KwrtAd-bYf7aAM.roa (hash: S1b9AmYLLzxAfeSxaH7YVQhFBj8TwadZxNGNH30/GyI=)
2: CVSRElmsqlgWcEdghVOc7WPdDdc.roa (hash: Hn/0sT1HWFlLcY0Ekg5urzbmDq/zA7lmExICAldUfLE=)
3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: q43Fbt5gi6DEFqNl7k+GWNsj1MYnHU6ofpzrjYb2dgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 16:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c0:ca:ac:71:f3:e5:7a:ed:e7:e8:dc:5a:d1:0f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Validity
Not Before: Sep 28 16:02:23 2026 GMT
Not After : Sep 29 16:02:23 2026 GMT
Subject: CN=9e2836f8b05448944eee1026bec2118e8a3f4ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:63:3b:0e:95:10:30:a5:ee:4d:57:96:03:6d:
4e:ef:8d:56:6e:a6:ed:60:db:bd:cc:15:46:34:27:
25:8d:0c:de:d2:3b:50:9c:16:35:9e:9a:08:be:f6:
3a:48:3c:9c:15:b1:8f:17:14:85:92:5f:69:5f:fb:
83:64:c2:c6:9a:cf:ce:f2:ef:12:00:77:5a:06:0b:
e3:91:93:4b:2d:cb:3c:2f:bd:b6:b5:08:c1:b7:cb:
e8:39:13:ed:66:84:b6:13:c2:11:30:63:68:4c:6b:
55:a3:14:55:65:c7:3e:96:76:eb:e5:60:af:80:3e:
7c:02:48:44:e0:ee:ef:9e:1e:56:0f:98:63:e8:37:
d7:f3:fe:a5:42:5c:83:95:46:6a:a0:33:64:9a:42:
b7:cc:fd:03:7b:4d:9b:3e:a8:91:15:88:6b:ad:51:
58:eb:45:e8:17:e9:52:a5:8a:54:d5:53:2c:e2:86:
7e:14:72:df:ad:03:31:7d:68:61:39:ab:58:fe:17:
48:26:f4:11:80:44:b2:39:9b:b5:d9:c4:66:71:db:
4a:f8:22:00:5d:fa:a8:b2:19:06:1c:f7:db:32:bb:
34:09:53:4a:f0:a7:c1:26:1c:76:cd:08:d7:68:ae:
9a:e3:ec:36:66:06:a9:5e:9e:40:5f:ae:67:09:c9:
0a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:28:36:F8:B0:54:48:94:4E:EE:10:26:BE:C2:11:8E:8A:3F:4A:D2
X509v3 Authority Key Identifier:
keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:e0:f4:03:5a:08:49:53:96:3a:c9:3c:f5:1c:ac:61:10:3f:
ac:8a:80:62:32:07:df:af:b6:59:bc:fb:ff:1e:9c:ed:c0:2d:
51:49:12:97:bf:3a:96:47:93:d4:e6:2e:d7:bd:af:20:17:ba:
8b:8d:95:21:37:5b:c7:01:d3:5d:d4:9f:82:f8:ff:e0:79:e7:
16:5b:b7:7f:8d:9b:cb:c8:49:93:b8:9e:ee:a3:aa:31:e2:67:
d4:b9:65:12:41:66:15:c2:e6:9e:94:db:97:3d:54:f4:63:af:
f6:ae:22:08:19:aa:4c:5a:01:fb:f9:47:7e:ce:98:1e:f8:92:
ec:bc:f6:d1:f2:4e:db:cf:7b:65:5d:7b:9e:2a:96:60:f8:38:
5d:98:72:e2:72:92:19:73:6a:73:cd:93:35:42:14:fb:fd:10:
d9:11:e2:69:71:a4:51:2d:bd:31:3b:82:c6:c0:be:b1:02:56:
91:1b:96:33:3e:0f:9a:6a:78:71:a6:8a:51:7f:5f:6d:77:6a:
d9:31:34:c2:7a:f8:ea:6f:af:30:44:2f:c6:6c:d0:7e:23:75:
8b:70:65:98:c5:72:65:54:66:cf:3a:4c:a0:15:60:36:2e:f8:
dd:54:63:56:0b:c1:db:73:aa:e6:4e:a2:a6:72:cf:fa:37:50:
89:af:6f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:30:19 2026 by rpki-client