Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
File: gySHKx3b4yZPpmambx9OS7Uv2FQ.mft (raw, json)
Hash identifier: o4+P1IF9RGPy5qtI82QP6jS6edNa2CnTaTvTM8unI64=
Subject key identifier: 12:C2:7C:89:EE:E5:46:ED:1B:45:17:66:20:C2:0D:2D:97:55:A0:88
Authority key identifier: 83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54
Certificate issuer: /CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854
Certificate serial: 019F8EA29431DA706B9D699FA7281892CC21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
Manifest number: 1160
Signing time: Thu 23 Jul 2026 11:00:47 +0000
Manifest this update: Thu 23 Jul 2026 11:00:47 +0000
Manifest next update: Fri 24 Jul 2026 11:00:47 +0000
Files and hashes: 1: P_eGv8Ts4S81-hoIfGkINiGVVGQ.roa (hash: GLTssa41ICMBtipCA+V62cyNywz11Q3QOpboQaIrZ9o=)
2: fzzkXydSJcu8jxv7wlIrYLHaMaY.asa (hash: L5BSLPOIT1Jf6EjOfGHOiew0ovdh5GD4tkDmFzci4tI=)
3: gySHKx3b4yZPpmambx9OS7Uv2FQ.crl (hash: b+3yBYvZyvGNgucUNkab4VCTNvMQmE2xSvgMdI3HaRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:94:31:da:70:6b:9d:69:9f:a7:28:18:92:cc:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854
Validity
Not Before: Jul 23 11:00:47 2026 GMT
Not After : Jul 24 11:00:47 2026 GMT
Subject: CN=12c27c89eee546ed1b45176620c20d2d9755a088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:fd:e7:13:e3:d5:86:9b:6e:81:ca:fa:a1:
79:9c:ad:ac:ce:de:38:1a:3a:8b:ce:09:62:cc:45:
08:62:51:7e:64:52:50:4b:74:79:91:07:0d:25:38:
6f:e8:9b:e3:b9:da:59:df:33:10:af:8d:38:53:c7:
78:bf:05:db:37:6f:e8:dc:de:9b:c4:0f:76:d4:05:
83:83:73:45:5d:4e:e2:e5:23:11:42:2a:a2:fa:8b:
8b:01:b4:5c:23:c8:f0:e7:a2:d9:af:0a:c9:95:bc:
14:5a:1d:7b:ec:4d:cb:00:67:b1:28:ee:19:71:48:
78:99:72:77:ee:8a:1a:07:c4:06:d8:08:5f:8c:14:
ff:e9:9b:7a:31:19:cf:fe:70:28:5a:b3:54:69:16:
0e:33:4c:d8:d4:e3:8c:34:86:62:82:64:c7:ed:4e:
c5:18:d7:56:d8:6f:c5:c1:64:03:aa:d0:fe:99:85:
1f:a5:5d:72:df:0b:e4:7b:da:f3:50:4b:4a:38:99:
ea:ed:73:eb:c1:27:0d:95:1b:4c:25:cf:07:07:5a:
ef:ed:2b:c1:05:e3:1d:44:69:ae:50:b5:15:8c:29:
4e:fe:eb:18:7a:08:90:71:e9:c3:d6:1a:2b:ed:d9:
b8:25:76:eb:2a:0f:73:7c:07:67:c5:b7:11:23:41:
0f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C2:7C:89:EE:E5:46:ED:1B:45:17:66:20:C2:0D:2D:97:55:A0:88
X509v3 Authority Key Identifier:
keyid:83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:64:09:98:e6:91:bb:90:c2:bd:8f:3e:83:7a:01:df:ba:a4:
74:d5:e0:46:bf:56:53:34:bc:cc:a0:a2:c0:bd:da:04:c8:b4:
6a:9b:a6:b5:48:0c:15:63:a1:4c:3b:cf:73:72:5c:1c:68:76:
f2:a0:ec:30:84:68:05:31:b1:e0:2c:4a:81:22:54:04:2a:97:
73:40:37:c9:2c:ff:de:51:ef:3a:60:f7:6d:a5:30:88:7c:df:
96:36:10:12:ac:3a:61:0e:4d:14:6c:31:92:0c:b2:b1:f3:0d:
83:e4:b5:d4:89:e6:7e:5a:7b:32:7b:79:88:91:a3:f8:b5:b6:
8d:66:99:1d:59:b3:a3:cb:9d:1e:6c:ba:30:14:28:f7:fd:d4:
76:7b:34:70:88:2a:51:09:49:f9:d5:44:bc:1b:d6:22:90:e9:
48:70:51:c1:9b:c7:78:d2:5d:33:09:3d:cf:76:43:6b:bb:f5:
ae:de:e9:18:d7:fb:35:fa:88:9d:2d:fd:53:9c:44:24:99:a2:
05:ab:69:89:a9:3e:1a:57:80:ab:ea:31:63:a7:ce:05:66:fc:
5b:a9:a6:3e:8d:76:22:9d:9f:8b:06:9e:e3:8d:51:ba:f6:d8:
e2:0f:66:12:32:2f:db:ae:91:fb:99:e2:16:68:33:8e:df:04:
de:35:e7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:47 2026 by rpki-client