Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
File: gySHKx3b4yZPpmambx9OS7Uv2FQ.mft (raw, json)
Hash identifier: 8F6+nkITs9jFVZMjtmPLCsyc9vQ3WEWA05xFUGj5OD4=
Subject key identifier: E9:75:60:A9:0D:67:A2:C8:73:2E:A7:FC:F5:69:21:44:18:47:C3:EC
Authority key identifier: 83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54
Certificate issuer: /CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854
Certificate serial: 019D27E06257BA4A7E7F3B05305B28389372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
Manifest number: 1021
Signing time: Thu 26 Mar 2026 02:01:49 +0000
Manifest this update: Thu 26 Mar 2026 02:01:49 +0000
Manifest next update: Fri 27 Mar 2026 02:01:49 +0000
Files and hashes: 1: P_eGv8Ts4S81-hoIfGkINiGVVGQ.roa (hash: GLTssa41ICMBtipCA+V62cyNywz11Q3QOpboQaIrZ9o=)
2: gySHKx3b4yZPpmambx9OS7Uv2FQ.crl (hash: p6t9VNArOm6gnCXFokm2f2TIqkCdUtUXaZjUiOBdbzY=)
3: veGRJyfVlGMUeDlXsMIWMrUCUkY.asa (hash: iDuke+wunsJJ6I+kgnxyUVmEGdAcBoO8S3XojBOWblY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:62:57:ba:4a:7e:7f:3b:05:30:5b:28:38:93:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854
Validity
Not Before: Mar 26 02:01:49 2026 GMT
Not After : Mar 27 02:01:49 2026 GMT
Subject: CN=e97560a90d67a2c8732ea7fcf56921441847c3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0e:2d:98:fd:1c:b0:d2:5a:b2:b3:52:98:28:
87:6e:8c:a7:03:5f:05:1e:74:df:cc:24:ed:d3:02:
ed:fa:be:a8:c7:db:13:01:98:d9:25:81:99:b8:03:
54:67:8b:15:a3:59:91:fd:06:67:c2:af:d9:4e:cc:
56:f3:bb:1e:39:e4:25:d8:e3:d6:f8:47:fe:d8:64:
e2:ab:73:2d:b2:10:2d:d0:d0:2d:2e:c1:dd:1a:fa:
11:c1:c9:16:57:aa:94:9c:57:01:4f:38:18:47:c0:
be:ca:2a:41:3f:9c:f2:b3:15:41:03:d3:ce:a9:ba:
e2:74:39:b8:2d:93:f7:ca:74:c3:ec:cc:9d:4b:e2:
f9:d8:c5:3b:c3:d1:6b:15:bd:b1:f6:c4:95:c5:1f:
1b:74:5f:7b:89:94:15:c1:d4:28:5a:ca:fe:68:7c:
6a:d2:03:67:97:92:d8:af:e3:b6:45:d2:fe:05:03:
81:e7:bc:bf:ee:4e:2b:f1:9c:ec:21:05:92:25:46:
8b:9a:09:f5:8e:8d:bc:d3:a8:04:48:8b:f8:dc:32:
43:99:44:4f:a4:9c:36:11:ec:7b:60:8d:04:c0:83:
fb:b2:ae:ab:bb:e0:fc:f5:b1:4c:5a:68:db:84:67:
3e:d5:76:11:bb:b8:1b:eb:f9:0f:81:e1:72:e9:db:
01:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:75:60:A9:0D:67:A2:C8:73:2E:A7:FC:F5:69:21:44:18:47:C3:EC
X509v3 Authority Key Identifier:
keyid:83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b5:a1:11:15:26:19:5b:c4:c8:5e:27:70:6e:27:e9:f4:74:
2c:96:9a:97:6d:00:4b:a2:12:d0:22:ff:10:89:c7:9b:05:cc:
4e:6f:9e:1c:a2:be:82:88:15:e5:23:0d:4d:91:61:1b:e4:01:
67:d5:9b:63:db:5d:c7:b2:ef:a0:26:7d:c9:fa:32:b3:78:b5:
5c:c3:ef:c2:24:50:46:2e:ed:59:6f:8f:25:92:30:19:ff:57:
90:c0:53:c1:a7:aa:f4:84:0e:e4:5e:4f:73:69:95:8a:cd:80:
b4:48:d5:e9:a6:ba:41:cf:30:4a:9e:bc:80:ab:00:e1:2e:dc:
d3:0d:63:3c:d7:09:3c:3a:8f:26:3c:97:ae:1b:be:86:b2:6c:
59:9c:00:c9:6b:38:eb:ad:29:5c:18:37:03:f2:6a:d9:ab:fd:
4a:fd:db:39:e5:da:d1:08:58:f5:70:7d:72:dd:55:1f:3b:8c:
0e:de:c4:42:1c:ff:d1:ea:8d:90:ab:6b:5a:65:ac:82:1c:29:
8e:b4:b6:18:cf:38:70:af:8d:54:17:57:a2:fc:06:1d:47:cc:
50:60:f3:ee:55:0e:d4:27:d9:8f:2d:34:9a:97:a2:0c:1f:58:
b3:31:3a:95:30:54:89:aa:4e:ac:42:ac:15:fb:e9:d7:30:b8:
0c:cd:ac:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:34 2026 by rpki-client