Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
File: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft (raw, json)
Hash identifier: Oc1XokMGIPf4TjWLRcji0EcZWhDBcfcdqEkmcPOMo1M=
Subject key identifier: 22:5A:88:B6:E1:B5:3F:7F:C6:CE:69:01:EA:AE:68:5E:52:26:A3:1E
Authority key identifier: 83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
Certificate issuer: /CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Certificate serial: 019D265FA25461878B204BA6C56E609D4B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:01:34 +0000
Manifest this update: Wed 25 Mar 2026 19:01:34 +0000
Manifest next update: Thu 26 Mar 2026 19:01:34 +0000
Files and hashes: 1: GFlr8uF2r8cVqmDJ2JXiNxwY91k.roa (hash: gwpmNBpGA7FAOM9cF2rmHJiCr7Axf/GeGVR5kW5sxyc=)
2: eR1kJt3AkvnRh9nnXa_66NaaHYY.roa (hash: vhKP6Uu//ijg9IWe7RT8txZCBV20sw0GmYZPsJN+rXk=)
3: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl (hash: qJBMEOsQX5/EEs8CgtIptOzjxBke1eWDDNS6ZLdbrdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:a2:54:61:87:8b:20:4b:a6:c5:6e:60:9d:4b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Validity
Not Before: Mar 25 19:01:34 2026 GMT
Not After : Mar 26 19:01:34 2026 GMT
Subject: CN=225a88b6e1b53f7fc6ce6901eaae685e5226a31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fc:fb:b8:00:ee:79:39:3d:63:ad:49:d5:3a:
54:2b:cc:a9:9f:dd:0a:40:fd:de:7d:62:bc:39:c9:
15:30:5d:b6:ce:b1:c4:57:e0:c1:3d:f2:fd:26:12:
7c:5f:f2:37:cf:bd:06:90:60:19:22:7f:19:9b:26:
2c:cb:bf:c7:a3:98:91:b0:8c:13:ef:7e:3e:3f:07:
a4:69:16:57:ff:5f:32:e7:df:7d:01:fb:94:de:7a:
16:4d:ed:96:54:eb:ae:3b:bd:ae:bd:14:fe:56:51:
64:9f:1e:cb:af:5b:d4:cd:d6:cd:58:3c:e7:57:c7:
9d:d1:39:3d:67:04:51:d6:ee:e4:75:d4:ca:ec:8c:
c4:e6:a5:d7:39:6f:95:da:1f:d0:d0:b5:d5:3e:cd:
e9:07:89:ef:bd:bf:62:a6:b8:c8:bf:44:25:bf:93:
30:59:11:87:26:c3:3e:71:52:18:78:f8:7b:a1:a5:
56:3c:00:9e:67:cf:c1:f2:bb:6b:d7:07:aa:60:b5:
6d:b4:1b:c5:98:d4:03:71:3f:eb:11:cb:24:7b:70:
ba:f2:d0:1d:08:18:fc:1c:ee:72:5d:5c:02:4f:33:
ef:6e:03:43:77:5b:2d:8e:16:1f:43:1c:f9:c5:da:
ad:fc:e0:e0:58:8f:8d:1f:5e:b7:c5:6e:99:7c:33:
f2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5A:88:B6:E1:B5:3F:7F:C6:CE:69:01:EA:AE:68:5E:52:26:A3:1E
X509v3 Authority Key Identifier:
keyid:83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0d:14:2f:ad:44:7d:a7:24:c9:b5:6c:ea:58:17:a3:9e:f3:
a4:36:76:9a:0e:1f:a9:a0:dc:64:09:e3:ca:e3:fa:5b:b0:b3:
be:85:42:13:d0:c1:cf:22:9e:2a:1c:7c:c4:6a:41:4d:a3:db:
17:bf:52:71:74:72:e3:93:92:20:41:71:0f:f6:fc:01:7c:1a:
85:9f:90:97:14:1c:2c:89:99:97:69:8a:84:a2:f0:15:0a:e5:
09:0f:51:3a:36:15:b5:b5:27:1b:7d:cd:ff:21:3f:9c:cc:3c:
96:66:b2:eb:13:65:ae:2e:1c:59:a7:56:ce:79:1a:74:7d:03:
fa:65:52:01:50:dd:33:01:f8:81:4e:bd:f7:a9:11:5d:53:42:
1a:b8:b4:3d:e5:c4:53:7b:09:37:e6:0b:82:96:ba:40:20:29:
c9:57:ed:e5:14:88:04:00:f6:b3:e3:75:f7:a3:58:77:1b:8c:
c4:45:6e:c4:ce:8c:9a:22:66:b6:32:7b:0e:d3:3d:fb:c4:8d:
4f:ae:e2:7c:ff:3e:68:c9:21:a3:e5:81:dc:c6:ea:68:98:3b:
a3:94:04:19:6d:b8:2d:44:aa:ab:91:d3:29:8d:fc:a3:d4:41:
d1:0a:7f:9f:70:77:dd:42:9a:70:6d:75:2f:1b:7e:bd:b6:0d:
c6:e1:56:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:49 2026 by rpki-client