Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json)
Hash identifier: 9oQIaz/usb/xLeQ9YS7IUJM/xWXxV+Hn1vpcNKlTcYw=
Subject key identifier: A3:66:CE:B6:64:F8:0A:43:37:06:34:76:2F:D3:C0:74:7A:CA:EB:DD
Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Certificate serial: 019F94DC032FDDADBF99E54E92CB73147DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
Manifest number: 17E0
Signing time: Fri 24 Jul 2026 16:01:14 +0000
Manifest this update: Fri 24 Jul 2026 16:01:14 +0000
Manifest next update: Sat 25 Jul 2026 16:01:14 +0000
Files and hashes: 1: 3fcVrImGg7jj5KwrtAd-bYf7aAM.roa (hash: S1b9AmYLLzxAfeSxaH7YVQhFBj8TwadZxNGNH30/GyI=)
2: CVSRElmsqlgWcEdghVOc7WPdDdc.roa (hash: Hn/0sT1HWFlLcY0Ekg5urzbmDq/zA7lmExICAldUfLE=)
3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: 0b3GH4006sFOMn45EplBtEneK5DLXyZvqHUx58hrBNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:03:2f:dd:ad:bf:99:e5:4e:92:cb:73:14:7d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Validity
Not Before: Jul 24 16:01:14 2026 GMT
Not After : Jul 25 16:01:14 2026 GMT
Subject: CN=a366ceb664f80a43370634762fd3c0747acaebdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ec:35:fe:e8:72:e0:9c:39:81:1a:4f:7c:1a:
23:7a:1c:da:f0:60:26:c3:ee:ec:02:1d:d4:4e:ed:
6b:80:83:9a:9a:e8:5a:17:24:62:37:73:f2:fb:46:
a8:a9:26:9e:05:96:7b:53:ab:42:88:df:d0:d3:9a:
63:6a:59:58:0b:17:3e:0b:4a:b5:18:80:9f:cb:7a:
a4:ae:9d:55:1a:b2:8f:df:ae:d2:ac:b4:c3:20:5e:
ae:96:60:62:94:6f:0a:d8:2d:2e:e1:a7:22:40:b9:
9b:47:31:90:57:88:2c:3d:bc:29:36:ea:e2:70:86:
60:51:23:38:5f:1e:19:bb:28:65:58:3b:d4:f7:a7:
ce:21:58:e0:db:ee:42:af:be:5d:9d:d9:a1:28:5f:
c2:d8:10:8c:7c:61:26:7d:3b:d9:60:cc:3e:1f:c4:
e2:43:d0:80:02:6c:07:42:2b:29:f3:0e:a0:12:09:
7d:c5:68:35:56:17:32:d7:5b:76:b8:1e:91:b3:f7:
95:8d:0f:84:d6:dd:3f:eb:86:7e:e2:05:ba:36:2d:
ad:58:0d:93:ea:53:dc:24:2d:81:21:74:31:3a:0b:
14:06:f8:8c:4f:fc:1d:d1:5b:80:41:1a:bb:ce:87:
8c:06:bb:72:de:7b:52:b9:3b:63:38:e6:5d:42:3a:
5e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:66:CE:B6:64:F8:0A:43:37:06:34:76:2F:D3:C0:74:7A:CA:EB:DD
X509v3 Authority Key Identifier:
keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:36:2d:de:95:80:4f:c0:6d:be:e3:ee:35:3d:ff:b0:fc:e5:
f2:ff:61:86:7a:38:ee:39:48:06:4c:b2:ef:e5:66:d3:55:46:
ba:0b:7a:2c:3d:27:42:c2:61:f3:2a:d6:94:7b:56:11:38:30:
15:49:74:07:9a:e3:e5:df:32:ca:f4:38:3a:37:17:11:d5:97:
71:a1:7c:33:de:82:60:e1:72:48:e9:84:e8:02:17:d0:9d:3d:
0a:16:66:46:2c:fd:c6:17:91:45:9c:48:5f:b8:8b:5f:19:65:
2a:e6:54:8d:f2:51:e0:bf:05:f6:1d:60:24:13:f0:bd:05:0d:
d9:f3:d0:a9:3f:27:02:ac:a7:a5:99:e1:54:56:87:1f:ed:71:
1e:17:2e:32:89:b9:e8:a2:ab:d3:62:67:e8:8e:91:cc:13:aa:
ea:50:4f:56:4f:ab:53:5f:65:6a:c0:fb:bd:52:1e:7d:5c:ac:
eb:5d:10:8d:47:10:3a:8a:c6:5a:f7:46:26:63:de:d0:84:eb:
16:cf:bc:f7:fb:b7:9d:79:e1:86:83:a8:d0:47:de:6b:ec:20:
3f:3f:88:91:5f:e2:22:5c:8c:65:14:48:d7:57:2b:59:72:68:
43:41:ef:8e:e2:b6:10:bc:ab:4b:9c:7d:6b:74:d6:20:6b:29:
c1:fc:77:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+U3AMv3a2/meVOkstzFH2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMjNiOTczMWIxOTZiMWFjYmM4MjlmNWIyOGIzMjVmZDlk
M2UzZDQwHhcNMjYwNzI0MTYwMTE0WhcNMjYwNzI1MTYwMTE0WjAzMTEwLwYDVQQD
EyhhMzY2Y2ViNjY0ZjgwYTQzMzcwNjM0NzYyZmQzYzA3NDdhY2FlYmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+w1/uhy4Jw5gRpPfBojehza8GAm
w+7sAh3UTu1rgIOamuhaFyRiN3Py+0aoqSaeBZZ7U6tCiN/Q05pjallYCxc+C0q1
GICfy3qkrp1VGrKP367SrLTDIF6ulmBilG8K2C0u4aciQLmbRzGQV4gsPbwpNuri
cIZgUSM4Xx4ZuyhlWDvU96fOIVjg2+5Cr75dndmhKF/C2BCMfGEmfTvZYMw+H8Ti
Q9CAAmwHQisp8w6gEgl9xWg1Vhcy11t2uB6Rs/eVjQ+E1t0/64Z+4gW6Ni2tWA2T
6lPcJC2BIXQxOgsUBviMT/wd0VuAQRq7zoeMBrty3ntSuTtjOOZdQjpedwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNmzrZk+ApDNwY0di/TwHR6yuvdMB8GA1UdIwQY
MBaAFIMjuXMbGWsay8gp9bKLMl/Z0+PUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kYTFmMjMtMzY5NC00ZjU5LTg1Y2Yt
Y2ExZTVmMDgxOTUwLzEvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kYTFmMjMtMzY5NC00ZjU5LTg1Y2YtY2ExZTVmMDgxOTUw
LzEvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTYt3pWA
T8BtvuPuNT3/sPzl8v9hhno47jlIBkyy7+Vm01VGugt6LD0nQsJh8yrWlHtWETgw
FUl0B5rj5d8yyvQ4OjcXEdWXcaF8M96CYOFySOmE6AIX0J09ChZmRiz9xheRRZxI
X7iLXxllKuZUjfJR4L8F9h1gJBPwvQUN2fPQqT8nAqynpZnhVFaHH+1xHhcuMom5
6KKr02Jn6I6RzBOq6lBPVk+rU19lasD7vVIefVys610QjUcQOorGWvdGJmPe0ITr
Fs+89/u3nXnhhoOo0Efea+wgPz+IkV/iIlyMZRRI11crWXJoQ0HvjuK2ELyrS5x9
a3TWIGspwfx3kg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:54:30 2026 by rpki-client