Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
File: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft (raw, json)
Hash identifier: JkTvM3NyJe7U7teTaiwrADraKskJVHm5gX4p7fk/bmk=
Subject key identifier: D3:7E:6E:CA:93:0D:F7:1B:AF:5E:EC:2B:68:49:99:91:EA:98:5E:A6
Authority key identifier: 83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
Certificate issuer: /CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Certificate serial: 01A13559CDDBE849DCBB488BE13E9229E94F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
Manifest number: 1AA0
Signing time: Tue 13 Oct 2026 13:00:40 +0000
Manifest this update: Tue 13 Oct 2026 13:00:40 +0000
Manifest next update: Wed 14 Oct 2026 13:00:40 +0000
Files and hashes: 1: GFlr8uF2r8cVqmDJ2JXiNxwY91k.roa (hash: gwpmNBpGA7FAOM9cF2rmHJiCr7Axf/GeGVR5kW5sxyc=)
2: eR1kJt3AkvnRh9nnXa_66NaaHYY.roa (hash: vhKP6Uu//ijg9IWe7RT8txZCBV20sw0GmYZPsJN+rXk=)
3: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl (hash: ts3bKNdVDZw/K3iKPdKE9aJjwxk32vDQUVrvTOjb09U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:59:cd:db:e8:49:dc:bb:48:8b:e1:3e:92:29:e9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Validity
Not Before: Oct 13 13:00:40 2026 GMT
Not After : Oct 14 13:00:40 2026 GMT
Subject: CN=d37e6eca930df71baf5eec2b68499991ea985ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7d:5d:3d:3d:25:42:50:94:76:08:0b:e3:d3:
2f:9a:47:f2:02:e1:72:43:3c:f2:72:df:cf:0d:17:
9a:60:7b:ea:13:16:c1:5c:0f:2c:0b:a9:97:1f:80:
9f:90:9d:ee:b4:a1:2c:90:fc:56:3d:62:2c:aa:cb:
db:ee:d6:2f:c7:80:28:a8:d4:33:0c:22:85:f3:97:
24:df:d0:e1:75:96:6d:53:82:c2:af:5c:70:fe:57:
b0:ef:ac:65:63:15:1e:66:c6:52:70:f3:43:33:f2:
ac:52:21:f0:31:59:e0:cb:01:68:65:7d:8f:6e:92:
63:bf:e6:30:87:09:b3:4b:98:bf:77:27:2b:16:20:
e9:5c:97:3b:9f:c3:94:8d:14:f1:7f:ea:74:67:dd:
5a:68:f7:d8:70:68:9a:a1:0b:06:d9:98:20:b2:6a:
a3:9a:42:ba:ce:4d:73:3e:14:37:af:02:b2:17:be:
bb:ad:91:ac:26:ef:48:bc:20:8c:97:a9:55:ec:47:
34:b1:d8:63:39:fe:ec:7a:3a:4d:20:2d:11:62:1c:
7d:4e:ef:90:2a:a0:75:00:7a:fa:d0:cd:8a:f2:6e:
c0:e2:73:68:4e:b1:6b:be:48:f2:77:16:36:3a:ca:
25:be:36:21:bb:e7:8a:34:ec:7c:34:73:9e:78:b5:
20:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7E:6E:CA:93:0D:F7:1B:AF:5E:EC:2B:68:49:99:91:EA:98:5E:A6
X509v3 Authority Key Identifier:
keyid:83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:dd:b1:91:c5:23:3e:91:2d:3f:5c:c3:30:21:56:3c:54:a3:
17:73:6c:5a:46:4d:78:2e:fe:d2:bf:52:45:44:a3:9c:87:38:
28:da:8d:d6:23:b5:fa:91:4d:a2:54:25:4c:cc:30:57:3e:2f:
f4:f3:32:81:f0:a7:f0:84:43:e5:c7:90:ae:c7:28:10:e8:34:
4d:13:57:67:ec:2f:b8:84:07:cf:ab:39:1b:0b:bb:1f:4c:d9:
c3:13:49:f6:3c:58:26:c7:2d:68:d8:0b:b4:37:8e:64:3e:b0:
af:fd:10:c8:c5:44:08:15:6d:f6:9b:3c:34:f9:7c:2d:39:dd:
50:b3:b3:89:00:47:ca:f2:11:3f:5f:2b:62:ee:4b:c9:7f:79:
59:d0:94:00:f7:6c:70:46:4b:e2:3e:e9:44:fe:47:a8:9e:8f:
ce:69:dc:7d:de:a7:11:ac:4f:e4:24:2b:50:96:1b:74:84:70:
14:14:11:ad:bc:7c:4f:83:4a:67:05:99:e2:d1:42:c3:30:87:
29:d8:66:20:28:20:03:99:0f:a9:48:53:15:c4:e2:cc:c1:1f:
c6:e4:c4:59:63:ba:dc:b2:80:63:57:a5:cf:33:2a:02:d5:14:
9e:5e:04:f0:73:cd:82:72:04:80:69:54:4e:50:fd:71:89:85:
5d:25:61:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:39:14 2026 by rpki-client