Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
File: gySHKx3b4yZPpmambx9OS7Uv2FQ.mft (raw, json)
Hash identifier: QgdfM1cKsXNs8NOL+l/QxlnvkxBUDS2fGyl6y6c2Eng=
Subject key identifier: E9:FA:E6:24:A0:CF:F5:BC:94:90:B2:C1:8D:24:51:B5:C3:6D:35:B3
Authority key identifier: 83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54
Certificate issuer: /CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854
Certificate serial: 01A0E286E834563FD1F38679D6B792E903A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
Manifest number: 1210
Signing time: Sun 27 Sep 2026 11:01:27 +0000
Manifest this update: Sun 27 Sep 2026 11:01:27 +0000
Manifest next update: Mon 28 Sep 2026 11:01:27 +0000
Files and hashes: 1: P_eGv8Ts4S81-hoIfGkINiGVVGQ.roa (hash: GLTssa41ICMBtipCA+V62cyNywz11Q3QOpboQaIrZ9o=)
2: fzzkXydSJcu8jxv7wlIrYLHaMaY.asa (hash: L5BSLPOIT1Jf6EjOfGHOiew0ovdh5GD4tkDmFzci4tI=)
3: gySHKx3b4yZPpmambx9OS7Uv2FQ.crl (hash: i8TthYA7/+gMHBozziodchMGEbS25uQD2pNrP42mtTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:86:e8:34:56:3f:d1:f3:86:79:d6:b7:92:e9:03:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854
Validity
Not Before: Sep 27 11:01:27 2026 GMT
Not After : Sep 28 11:01:27 2026 GMT
Subject: CN=e9fae624a0cff5bc9490b2c18d2451b5c36d35b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8a:94:60:9b:6a:90:11:aa:92:cc:1a:25:d9:
32:b6:39:bd:bd:1b:2e:00:26:65:f1:c2:38:59:59:
51:6c:ff:26:51:1b:e2:80:9b:2c:18:50:ad:39:dd:
56:1e:85:a8:68:ba:aa:a7:bb:11:e1:64:1b:0b:1b:
cf:7a:8e:db:f9:f6:9f:85:24:84:b3:43:f7:07:fe:
8a:43:fb:f5:e3:69:39:f6:2e:54:2f:8b:bf:57:9d:
7b:7d:8c:d1:d0:99:bf:7a:48:2b:0e:a1:a8:d0:1e:
7a:2c:9a:c5:b1:89:19:93:ed:1b:74:31:0e:c0:77:
25:51:29:23:78:c9:7b:e8:5a:4b:45:16:27:14:46:
fe:95:b9:3a:b8:c9:eb:90:23:91:fd:3a:7a:36:12:
ef:5d:40:cc:2f:91:c3:44:f5:4c:7f:7b:62:68:31:
fa:d6:8e:15:55:ec:8d:fc:40:83:70:84:f1:9d:4b:
80:1c:f9:b5:67:d6:b4:06:79:1a:83:51:ce:a0:46:
4a:c7:a6:c8:e5:d4:54:21:12:10:27:fe:57:4e:aa:
63:d7:9b:fa:84:bd:ec:42:63:d9:7e:a7:c1:ef:27:
a1:17:4f:6e:27:c3:98:fc:31:20:2b:77:ce:71:11:
56:2b:e7:eb:fa:ca:f6:7f:29:68:0d:9a:35:f6:e4:
ba:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FA:E6:24:A0:CF:F5:BC:94:90:B2:C1:8D:24:51:B5:C3:6D:35:B3
X509v3 Authority Key Identifier:
keyid:83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:6e:fd:f6:71:20:1c:39:d8:8f:09:09:66:9d:b5:88:03:49:
49:66:87:64:bf:06:d3:04:c2:ee:ec:12:76:1d:b8:ee:ab:60:
71:b0:bf:9f:08:41:5a:d3:5f:9e:13:95:ea:f9:6c:44:81:d2:
90:0c:7e:b0:f3:3a:77:0c:7e:4f:11:57:28:e9:cb:b2:c0:00:
7e:48:66:66:ff:da:b8:f7:38:79:03:2a:4f:88:26:68:8e:1f:
3e:8a:14:ff:69:68:45:b0:bb:a4:5f:a1:63:45:f5:29:fb:90:
29:3d:d0:58:8b:06:d2:41:cf:28:3d:e2:58:19:fb:e9:ce:de:
fe:92:c2:1e:a4:77:a2:d6:75:e7:54:09:14:de:fe:36:40:3c:
0d:c2:60:e9:f7:71:8f:2e:95:9e:bf:a1:8e:a2:20:04:d7:99:
f4:1c:2f:bd:11:e6:29:ca:cd:b1:81:f2:bb:d8:4a:49:8e:6e:
aa:b5:d3:24:b3:d1:44:f5:98:5f:91:0f:ac:61:9f:d0:f4:23:
7b:00:79:bc:28:22:3c:04:66:92:04:02:94:18:20:10:cd:31:
89:1d:d5:4c:fa:9d:07:92:86:6c:84:fd:8d:f1:6c:ef:c2:b6:
c7:48:ac:9e:7d:47:df:b3:0a:c7:0d:22:bc:fe:53:3a:7b:92:
97:8b:1f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:01:34 2026 by rpki-client