Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json)
Hash identifier: Ve1mmRX6iVOdDjzr7xAmbyqr7Xr3ltq3lFP3NB5IC2o=
Subject key identifier: 05:BE:1F:CA:E4:41:D7:B9:B4:99:CB:23:F0:B6:DF:37:1A:BC:EB:D6
Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Certificate serial: 019D270497DFB9EFFBE0601C978C94C60B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
Manifest number: 169E
Signing time: Wed 25 Mar 2026 22:01:45 +0000
Manifest this update: Wed 25 Mar 2026 22:01:45 +0000
Manifest next update: Thu 26 Mar 2026 22:01:45 +0000
Files and hashes: 1: 3fcVrImGg7jj5KwrtAd-bYf7aAM.roa (hash: S1b9AmYLLzxAfeSxaH7YVQhFBj8TwadZxNGNH30/GyI=)
2: CVSRElmsqlgWcEdghVOc7WPdDdc.roa (hash: Hn/0sT1HWFlLcY0Ekg5urzbmDq/zA7lmExICAldUfLE=)
3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: x2zI9wLorUkYayOcSB/SxcvzGy2KmeyAa4Qav2GTRDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:97:df:b9:ef:fb:e0:60:1c:97:8c:94:c6:0b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Validity
Not Before: Mar 25 22:01:45 2026 GMT
Not After : Mar 26 22:01:45 2026 GMT
Subject: CN=05be1fcae441d7b9b499cb23f0b6df371abcebd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:25:8b:0b:d5:d1:db:3f:21:ac:52:6a:7c:
6d:6e:00:d4:b8:12:4f:a9:5c:2b:90:a8:b5:17:32:
39:0b:a7:b4:f2:77:5f:1c:8e:a3:bc:06:ef:2c:06:
3a:e2:eb:55:75:41:01:36:57:cd:4a:4a:57:29:c6:
6e:0a:ea:2d:ac:37:82:3f:e3:ec:40:9b:97:4c:27:
e1:f0:a9:4f:2e:ac:1d:46:9d:60:df:cd:93:3c:4a:
f2:a6:e4:5b:a3:12:48:ba:6d:9b:43:9a:8c:44:82:
d7:14:4a:b9:e1:29:42:69:24:77:92:81:58:d0:fe:
95:67:a5:21:92:0d:ab:a9:e1:e0:98:1c:f3:82:9b:
e1:5e:ec:64:dc:62:3d:c4:57:06:d4:4e:ba:9e:7a:
63:b1:2f:fa:84:88:39:33:f8:ec:eb:b0:17:ea:06:
78:c1:e5:44:3f:80:50:dc:a7:2f:d7:58:d3:88:54:
5a:b8:d1:48:d8:5b:65:9a:53:7d:0c:54:3b:51:92:
f4:82:84:86:57:ff:3b:e3:e1:db:be:78:fb:2a:c9:
73:46:e0:57:cf:a7:72:b4:bb:b2:e6:8a:a1:0a:86:
48:a5:fd:0f:7c:45:79:ec:20:d9:97:ea:0c:fd:5c:
8f:86:78:41:1c:9c:07:47:95:59:c5:78:db:f1:56:
84:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BE:1F:CA:E4:41:D7:B9:B4:99:CB:23:F0:B6:DF:37:1A:BC:EB:D6
X509v3 Authority Key Identifier:
keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:18:97:9c:8a:0a:92:3e:34:a9:da:3f:23:2f:d9:ff:f7:c1:
46:79:80:a1:27:41:7d:ba:e7:2c:55:14:9a:81:90:eb:85:61:
38:32:cf:a1:03:9c:4c:11:e0:76:e8:37:be:ea:a6:17:47:92:
24:45:39:cc:33:81:c3:60:65:2a:bc:8c:df:a3:ab:bb:53:6e:
20:66:73:aa:84:d5:60:a5:5d:7f:ea:aa:e2:5a:75:17:fc:3a:
c8:94:8e:b6:9d:e4:58:b9:a5:73:9e:bc:11:cc:10:66:05:a7:
aa:a9:8b:9f:76:59:e7:14:85:a7:fd:01:1f:00:b8:d1:d5:4d:
d6:70:e9:8a:fa:1d:f0:c5:cb:bb:40:c0:fd:c0:83:70:ee:0d:
2c:f2:6f:75:60:6c:26:41:d1:84:86:b6:a9:79:16:48:6b:09:
e0:f8:32:60:74:31:bb:46:db:d0:50:ac:fa:45:d3:48:6d:2b:
ef:d8:27:a9:e0:a7:d0:ad:ac:d0:ec:85:bd:6c:ce:38:ff:50:
d0:45:7c:4b:56:41:f3:5c:87:8a:90:69:e7:7c:de:cd:e9:44:
5a:89:50:9c:d3:12:57:1b:4e:f5:a5:fe:70:e0:b4:e0:2d:a1:
a7:d0:a1:d8:7d:ca:c3:ce:f1:ea:58:07:29:d2:b6:6f:83:9e:
27:5d:4d:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBJffue/74GAcl4yUxgtQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMjNiOTczMWIxOTZiMWFjYmM4MjlmNWIyOGIzMjVmZDlk
M2UzZDQwHhcNMjYwMzI1MjIwMTQ1WhcNMjYwMzI2MjIwMTQ1WjAzMTEwLwYDVQQD
EygwNWJlMWZjYWU0NDFkN2I5YjQ5OWNiMjNmMGI2ZGYzNzFhYmNlYmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArooliwvV0ds/IaxSanxtbgDUuBJP
qVwrkKi1FzI5C6e08ndfHI6jvAbvLAY64utVdUEBNlfNSkpXKcZuCuotrDeCP+Ps
QJuXTCfh8KlPLqwdRp1g382TPErypuRboxJIum2bQ5qMRILXFEq54SlCaSR3koFY
0P6VZ6Uhkg2rqeHgmBzzgpvhXuxk3GI9xFcG1E66nnpjsS/6hIg5M/js67AX6gZ4
weVEP4BQ3Kcv11jTiFRauNFI2FtlmlN9DFQ7UZL0goSGV/874+Hbvnj7KslzRuBX
z6dytLuy5oqhCoZIpf0PfEV57CDZl+oM/VyPhnhBHJwHR5VZxXjb8VaE6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAW+H8rkQde5tJnLI/C23zcavOvWMB8GA1UdIwQY
MBaAFIMjuXMbGWsay8gp9bKLMl/Z0+PUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kYTFmMjMtMzY5NC00ZjU5LTg1Y2Yt
Y2ExZTVmMDgxOTUwLzEvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kYTFmMjMtMzY5NC00ZjU5LTg1Y2YtY2ExZTVmMDgxOTUw
LzEvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRiXnIoK
kj40qdo/Iy/Z//fBRnmAoSdBfbrnLFUUmoGQ64VhODLPoQOcTBHgdug3vuqmF0eS
JEU5zDOBw2BlKryM36Oru1NuIGZzqoTVYKVdf+qq4lp1F/w6yJSOtp3kWLmlc568
EcwQZgWnqqmLn3ZZ5xSFp/0BHwC40dVN1nDpivod8MXLu0DA/cCDcO4NLPJvdWBs
JkHRhIa2qXkWSGsJ4PgyYHQxu0bb0FCs+kXTSG0r79gnqeCn0K2s0OyFvWzOOP9Q
0EV8S1ZB81yHipBp53zezelEWolQnNMSVxtO9aX+cOC04C2hp9Ch2H3Kw87x6lgH
KdK2b4OeJ11Nrw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:43 2026 by rpki-client