Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
File: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft (raw, json)
Hash identifier: y2l5vBkjalLktQwU3HNy98E1QLjp7jzpvz+VHbOC2uE=
Subject key identifier: 9A:1C:22:75:DA:3C:AC:6C:E2:9B:AA:B4:60:E0:20:DA:94:59:C4:30
Authority key identifier: 83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
Certificate issuer: /CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Certificate serial: 019F94377163DA445B97F0346A644C8551B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 13:01:29 +0000
Manifest this update: Fri 24 Jul 2026 13:01:29 +0000
Manifest next update: Sat 25 Jul 2026 13:01:29 +0000
Files and hashes: 1: GFlr8uF2r8cVqmDJ2JXiNxwY91k.roa (hash: gwpmNBpGA7FAOM9cF2rmHJiCr7Axf/GeGVR5kW5sxyc=)
2: eR1kJt3AkvnRh9nnXa_66NaaHYY.roa (hash: vhKP6Uu//ijg9IWe7RT8txZCBV20sw0GmYZPsJN+rXk=)
3: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl (hash: izhK/wFl9Zwz1eSWIFWjaZ0h+Gu11D17mMEH5WzqTT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:71:63:da:44:5b:97:f0:34:6a:64:4c:85:51:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Validity
Not Before: Jul 24 13:01:29 2026 GMT
Not After : Jul 25 13:01:29 2026 GMT
Subject: CN=9a1c2275da3cac6ce29baab460e020da9459c430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:11:89:48:2e:4a:a3:82:e9:32:22:e5:13:
24:4e:37:9c:48:0d:81:6c:08:56:2b:6d:43:0e:6a:
24:6d:eb:c9:62:90:c7:bc:67:c9:5e:75:fa:b9:c1:
fd:6f:09:ae:6e:bd:87:cc:21:a3:d3:2a:ab:14:78:
fc:b6:98:4a:01:f6:b5:c1:87:98:3c:a4:47:03:8c:
42:48:87:4a:50:f2:10:e9:31:8b:ae:4e:31:e9:cf:
22:88:7b:4e:4e:16:b4:83:e4:e5:55:a6:44:e2:79:
fb:43:52:ba:e0:6c:8c:7c:b1:e4:d8:d0:e2:cb:e7:
d4:5f:b8:bd:c0:cf:5a:08:47:91:e2:ef:ee:25:e1:
0b:24:74:cd:41:ec:42:96:68:d0:6c:cd:f3:e0:a2:
46:d9:1c:2e:15:74:21:d4:39:31:bc:fc:d1:10:af:
75:33:3d:e3:a0:67:fd:3c:f9:99:72:a9:55:4d:8a:
6e:ed:73:75:67:db:b8:46:13:0f:69:47:30:7f:bb:
ed:80:9b:59:4f:64:cd:18:6e:c1:57:41:32:d8:34:
eb:00:0a:14:60:3f:df:24:2d:a2:33:54:bf:f5:b1:
88:7e:d8:d5:9e:e8:b9:b0:56:77:5e:cb:ca:3b:b2:
ad:ba:16:6f:9f:1d:7c:bc:6b:ac:68:ca:c8:5a:c8:
05:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1C:22:75:DA:3C:AC:6C:E2:9B:AA:B4:60:E0:20:DA:94:59:C4:30
X509v3 Authority Key Identifier:
keyid:83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:95:5a:a4:d0:6b:f1:ba:bc:7b:fd:7c:54:83:02:cf:f2:2d:
21:16:86:db:37:08:bb:00:21:c9:92:45:6f:ea:c7:b2:19:15:
3f:20:a5:61:fb:36:c6:18:7d:25:eb:0b:74:78:2e:34:f6:51:
2f:23:99:57:a0:26:f2:71:11:fe:62:12:8c:93:88:fc:78:60:
32:0b:5f:79:16:8b:50:b6:c1:88:3c:13:58:23:2c:1a:fb:d7:
1e:32:f0:3e:32:9c:38:ec:39:89:32:36:57:0a:97:6a:67:23:
3e:f1:c3:86:9e:68:d5:0b:ad:42:61:3e:83:62:41:a1:49:fc:
ba:5c:e6:59:62:0b:b5:a0:4e:60:ec:40:5f:53:b1:60:f0:fc:
39:fc:58:fc:69:2e:49:6a:34:2c:9e:2e:55:1e:cc:42:67:6d:
90:39:cd:b9:a3:38:6c:f1:0b:2c:b9:57:e5:69:ad:74:73:bd:
6a:3d:06:33:ce:48:28:d3:42:54:b2:ce:0e:82:ae:41:63:c4:
d1:9f:fb:de:f7:47:be:8e:ac:bb:1b:7a:3d:17:b0:d5:8c:19:
c4:c9:48:d4:36:5c:b1:e4:ce:6f:55:6f:85:89:c0:ff:92:ba:
f2:3c:5f:09:1c:76:ba:63:38:e1:d6:75:de:83:3a:51:8b:89:
07:54:e9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:13:40 2026 by rpki-client