Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json)
Hash identifier: UcxGaDBGNJL48YkMfwiWtpO898Yp9QpD2+JDnm4MRFw=
Subject key identifier: 9A:04:A8:C8:6B:80:EC:70:9A:AA:F1:81:21:B7:F5:E5:C7:CE:0D:D6
Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Certificate serial: 019E2023DB300965D2F77D70603DA96B40AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
Manifest number: 171F
Signing time: Wed 13 May 2026 07:01:21 +0000
Manifest this update: Wed 13 May 2026 07:01:21 +0000
Manifest next update: Thu 14 May 2026 07:01:21 +0000
Files and hashes: 1: 3fcVrImGg7jj5KwrtAd-bYf7aAM.roa (hash: S1b9AmYLLzxAfeSxaH7YVQhFBj8TwadZxNGNH30/GyI=)
2: CVSRElmsqlgWcEdghVOc7WPdDdc.roa (hash: Hn/0sT1HWFlLcY0Ekg5urzbmDq/zA7lmExICAldUfLE=)
3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: NWVQam2/ihiXImZCQFJtt0L01wbfT4UHZV72jAdurmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:db:30:09:65:d2:f7:7d:70:60:3d:a9:6b:40:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Validity
Not Before: May 13 07:01:21 2026 GMT
Not After : May 14 07:01:21 2026 GMT
Subject: CN=9a04a8c86b80ec709aaaf18121b7f5e5c7ce0dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:cb:6c:d9:b2:3c:e8:d9:31:8b:19:a7:c9:
bc:c2:fd:50:49:cf:12:05:2b:c6:b6:f1:ee:3e:ee:
40:0c:f4:47:da:81:55:7f:5c:3e:c6:e0:ba:c3:14:
a7:3c:0a:d7:cb:e9:08:fb:fb:46:70:d6:e2:f3:f7:
7e:21:29:72:cf:1d:0e:16:a6:9f:bd:96:f9:50:a2:
7f:7b:22:b7:9f:ca:00:46:27:2d:98:f6:f4:e6:1d:
c9:13:8f:8a:de:23:9b:25:4b:66:82:5f:b3:19:45:
cc:ee:de:47:ae:3e:41:09:db:a4:07:14:d9:2f:57:
a3:83:15:23:7d:2b:55:45:b3:3a:dc:66:ac:4a:30:
58:67:8e:fc:f8:d3:1b:1b:83:95:1f:a3:93:89:81:
b0:39:1e:c7:03:f8:ac:dc:28:ff:87:03:09:03:c0:
9b:b7:58:13:94:bb:8a:15:94:9e:93:c4:55:9f:87:
e8:1b:64:71:fd:dc:17:eb:e4:ef:65:96:7f:7c:78:
83:29:cf:49:2b:63:e6:48:be:8b:4b:cd:a8:a3:c7:
df:fb:15:17:42:bb:68:65:46:37:a1:ea:16:c8:53:
8a:0b:86:d6:20:63:22:e8:42:c5:b5:4f:69:7e:86:
5f:76:01:7d:ef:ed:01:2c:69:bf:8e:40:4a:67:7b:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:04:A8:C8:6B:80:EC:70:9A:AA:F1:81:21:B7:F5:E5:C7:CE:0D:D6
X509v3 Authority Key Identifier:
keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8f:71:e0:df:93:e9:a5:47:44:57:d2:69:a5:72:c7:3c:e7:
a3:6b:c1:90:9d:6a:b8:31:ba:74:53:20:4e:df:db:33:d1:40:
59:ae:62:4f:75:1e:1e:fd:b7:a0:ea:61:ac:ad:b0:45:b2:36:
c9:e1:0d:df:c8:4c:b8:cd:de:51:b5:05:12:53:95:ac:89:67:
53:5e:86:a0:5a:39:c3:47:68:22:5d:3f:3c:e4:e0:e9:ad:b5:
2e:35:d3:ec:6d:23:44:d9:e0:57:bc:97:1d:f8:ee:21:7d:9f:
ad:3a:78:8c:42:2c:10:d8:93:5f:d1:16:30:f5:43:6d:84:1c:
67:29:fc:ce:e8:70:a6:29:b2:86:0f:65:19:34:72:53:57:44:
a5:e8:0b:19:58:34:fd:11:67:27:25:af:42:8c:22:e5:de:51:
eb:e2:10:37:cd:95:da:ce:a9:e2:ca:bf:e2:30:8a:93:96:8b:
f5:20:f9:b6:33:2f:ac:76:ec:b2:b4:00:13:15:f9:df:b6:57:
24:33:1b:9b:dd:20:cc:9a:09:b9:8f:a1:14:b0:cd:fd:87:2f:
88:ae:c7:39:53:19:5d:84:d3:76:d7:7b:09:06:5e:b4:ef:c6:
a1:d1:b5:39:20:25:69:e6:06:4d:c7:8b:f0:88:36:2f:73:64:
94:f0:1b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:54:34 2026 by rpki-client