Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
File: GYOwLhDKghv-G-bnUdks9z1tTAs.mft (raw, json)
Hash identifier: 0uKT9xRxQSVqYo9HDnu014DskPF6kQm1jcByLymh39w=
Subject key identifier: 8E:06:C0:1A:30:35:79:5A:F4:7D:D2:7E:41:53:C1:32:43:93:3A:21
Authority key identifier: 19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B
Certificate issuer: /CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b
Certificate serial: 019D29CE4C39794FC3D3DB74F724F8144059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
Manifest number: 0B9B
Signing time: Thu 26 Mar 2026 11:01:18 +0000
Manifest this update: Thu 26 Mar 2026 11:01:18 +0000
Manifest next update: Fri 27 Mar 2026 11:01:18 +0000
Files and hashes: 1: 4siB5e1GQm-axBvoOugw52N_IkE.roa (hash: /3IxrvNXYC3JPq03y8Dq56bw9cEQPSNh5PVk8H407no=)
2: GYOwLhDKghv-G-bnUdks9z1tTAs.crl (hash: s3k1p2unXGAc05FpuzpeeL/9cA4Jqua65mXO9kkn08U=)
3: OoPG2MT4AbshroGKma-go4-mAqg.roa (hash: MmH8u7qEGNsEDukTF/vmrjDahE/w+pZkLOqm+xYo1ZE=)
4: ughKvz4zorztqh7yWUjfuuHBP5E.roa (hash: XOZZpijgX85rlrIVt7kzdBz4Rca7aZetcDWsBATSYMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:4c:39:79:4f:c3:d3:db:74:f7:24:f8:14:40:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b
Validity
Not Before: Mar 26 11:01:18 2026 GMT
Not After : Mar 27 11:01:18 2026 GMT
Subject: CN=8e06c01a3035795af47dd27e4153c13243933a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:2c:e5:6c:09:55:54:e4:c7:1b:67:a6:e3:
80:5d:d1:e2:ea:0c:9b:1c:a9:1e:64:30:a5:21:e3:
de:01:34:ff:6b:d9:cf:c6:83:20:05:da:28:54:1c:
2c:2b:06:72:b7:3a:d9:27:d7:26:d2:30:da:fe:44:
a5:f2:dc:76:a9:19:e3:c8:00:44:07:6f:fc:91:9e:
c3:cc:c4:47:22:76:d4:e4:99:82:b1:03:b8:aa:b5:
07:42:8d:f7:ce:90:b3:c4:97:5b:35:1c:24:6e:be:
7d:e0:c0:dc:c5:42:d9:f5:dc:2b:9e:f5:4b:e1:e7:
8d:cf:36:c9:44:31:ce:30:8d:55:4c:4b:2c:2e:f0:
55:e9:0e:71:27:95:58:ef:c8:e6:dd:0a:a7:ee:f3:
c4:e2:ae:6b:d0:ed:a1:24:f3:87:de:58:af:c4:9f:
87:34:6a:bf:f4:d2:b2:a9:af:d1:95:09:3f:5e:0d:
7d:4d:e6:a8:e8:5d:32:6a:ee:d4:44:9d:5c:a9:ea:
74:ea:c4:b0:4a:5c:25:92:40:c2:1f:0c:83:c2:5d:
a0:df:cc:01:df:6c:65:73:0c:0f:b4:0d:e2:e6:fa:
8b:90:39:06:85:c8:6d:d3:55:cb:cf:52:f1:61:3d:
33:97:97:ed:a3:4a:ad:9b:b7:39:7b:a6:23:8a:21:
85:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:06:C0:1A:30:35:79:5A:F4:7D:D2:7E:41:53:C1:32:43:93:3A:21
X509v3 Authority Key Identifier:
keyid:19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7b:e1:f1:59:c1:8c:68:3b:18:fc:2c:63:d3:1b:c1:c2:0b:
f0:01:45:cd:11:63:97:70:66:b5:39:a0:15:20:6c:26:4f:a0:
3b:d3:f2:e1:59:8b:8a:9a:fa:5d:81:67:9b:7b:74:fd:2a:d0:
46:cb:3d:e7:4d:cd:b0:6d:4f:49:cd:37:36:43:77:48:8c:5e:
f5:7f:4d:61:11:19:71:96:1c:b7:2f:39:fa:3e:b8:7b:48:0e:
bf:33:52:4f:87:f0:ac:eb:13:82:59:2d:42:6d:66:7d:63:e9:
03:51:da:05:12:8c:d3:9c:72:81:76:63:56:54:6d:69:56:36:
81:96:e1:9c:7a:b8:ac:67:86:a3:f9:22:33:5b:6b:d3:fc:e2:
69:34:a5:4b:45:47:4a:cc:a2:b6:73:a7:b3:bd:e4:17:9b:d4:
cd:7b:ec:9a:29:2c:ba:62:63:b6:c8:b4:34:64:a8:b1:b1:29:
f5:27:58:4b:dc:f3:4c:07:50:71:23:82:41:6f:d2:78:7a:b2:
fc:04:5d:ea:61:63:03:24:5f:fa:ad:b1:a0:32:e3:41:2c:83:
b4:07:8a:00:64:df:32:5b:b5:f3:55:96:a7:21:17:36:a8:ce:
c6:e8:d8:d3:4e:59:03:f6:63:d5:77:45:84:9d:59:09:98:92:
8e:ca:c5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:24:37 2026 by rpki-client