Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
File: GYOwLhDKghv-G-bnUdks9z1tTAs.mft (raw, json)
Hash identifier: MOkQx9NSwOC9MI/PMZ8/KmFtE41/GB1IIlvh33Cw4mI=
Subject key identifier: 5F:20:C0:30:4C:35:53:82:27:93:D6:2A:87:30:32:B2:5F:DC:3C:E3
Authority key identifier: 19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B
Certificate issuer: /CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b
Certificate serial: 01A132FE22D33B4F2C8561BABF46F91349A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
Manifest number: 0DB2
Signing time: Tue 13 Oct 2026 02:01:18 +0000
Manifest this update: Tue 13 Oct 2026 02:01:18 +0000
Manifest next update: Wed 14 Oct 2026 02:01:18 +0000
Files and hashes: 1: 4siB5e1GQm-axBvoOugw52N_IkE.roa (hash: /3IxrvNXYC3JPq03y8Dq56bw9cEQPSNh5PVk8H407no=)
2: GYOwLhDKghv-G-bnUdks9z1tTAs.crl (hash: SwrGsm7J6Rzf5W5js+o0vVVdOyAvr8mHKnM7WWeetYA=)
3: OoPG2MT4AbshroGKma-go4-mAqg.roa (hash: MmH8u7qEGNsEDukTF/vmrjDahE/w+pZkLOqm+xYo1ZE=)
4: ughKvz4zorztqh7yWUjfuuHBP5E.roa (hash: XOZZpijgX85rlrIVt7kzdBz4Rca7aZetcDWsBATSYMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:fe:22:d3:3b:4f:2c:85:61:ba:bf:46:f9:13:49:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b
Validity
Not Before: Oct 13 02:01:18 2026 GMT
Not After : Oct 14 02:01:18 2026 GMT
Subject: CN=5f20c0304c3553822793d62a873032b25fdc3ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4f:35:b0:1d:6f:ba:20:df:c4:f0:5b:b0:a3:
14:b4:e9:e2:1b:a4:c8:31:71:62:3c:45:c9:74:dc:
99:2a:4e:5b:a9:db:c3:ab:d0:b7:75:1b:4c:ba:13:
d9:40:58:5d:df:dc:cd:ea:5a:c3:38:2e:9c:27:ae:
56:f1:3c:44:fc:2f:1a:55:4f:bc:3b:bf:b5:ad:ab:
da:8b:33:94:9a:47:ad:3d:c0:43:03:16:a5:98:a8:
b9:e0:35:a0:91:21:90:a3:39:b4:f3:a0:ec:10:1b:
f4:00:18:d0:b1:b3:b9:ac:3b:09:ce:6a:d5:55:a2:
67:ba:62:9f:af:ad:fd:0d:ac:3e:02:41:bf:37:d1:
64:31:aa:bd:2c:78:c1:77:ac:cf:61:ac:33:fc:1b:
61:a8:3b:3d:cc:01:66:52:2a:8c:f8:5f:99:40:64:
9f:6e:13:60:5b:56:4d:6a:10:2c:ea:41:cb:04:c4:
07:98:3e:32:e3:97:88:6e:43:8f:de:0a:09:ed:38:
65:20:ff:ad:ed:e6:67:5e:ee:95:52:9d:21:54:e0:
06:76:ec:37:07:d6:d3:1e:ad:63:c4:e4:a1:f8:62:
a7:28:c9:eb:41:a0:01:29:fe:05:1a:a8:0e:ab:c8:
74:22:6f:c5:16:c8:a6:47:34:df:32:62:32:19:2c:
39:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:20:C0:30:4C:35:53:82:27:93:D6:2A:87:30:32:B2:5F:DC:3C:E3
X509v3 Authority Key Identifier:
keyid:19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:35:9f:ec:94:d1:68:9c:ac:2c:7d:a6:58:bc:cd:04:5a:aa:
02:a1:91:9a:e9:e0:b0:1d:13:11:db:21:9c:6d:54:57:8f:3d:
b3:c6:29:58:51:80:a9:66:7f:96:82:9c:35:09:1b:2f:d1:4b:
ba:93:9b:aa:c9:99:70:b9:95:5f:b8:fe:f0:01:7c:68:a8:de:
a4:73:88:1f:64:bc:8c:9c:96:ff:8c:9a:77:85:f1:a0:0d:8f:
20:ac:d6:8a:88:f4:22:83:0f:6a:f8:22:57:06:18:85:65:b9:
5c:09:ec:f7:40:d2:b6:df:88:4c:5d:e4:38:81:d5:62:23:c7:
82:1e:b6:51:fb:5c:e2:ca:b3:f7:90:c6:59:02:3c:2b:3d:c2:
7e:a1:35:76:40:ee:f7:3e:32:b2:b6:52:67:9a:80:11:87:31:
25:0b:b0:05:5e:1e:41:b1:83:c4:06:a0:0b:bf:d4:0a:4d:81:
1c:90:09:a4:74:9e:22:5e:3a:e3:78:7f:31:6f:2b:79:6d:cc:
03:48:73:a7:32:3b:d6:69:af:4a:5e:5b:8f:3e:94:6c:ff:66:
21:27:e6:ff:64:16:d3:b6:db:9c:4e:bd:09:dd:4e:a8:ab:59:
34:51:24:15:33:37:d4:2b:db:78:8d:3a:45:b7:aa:22:c8:b7:
a9:54:d1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:32:20 2026 by rpki-client