Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File: gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier: sIisOq7dik1UG1pOvW/lZuSi0/BOv5ivlwKgAYqaNBM=
Subject key identifier: 5C:59:E3:ED:70:8A:91:96:2D:DC:25:66:80:DA:B3:E1:2C:9B:25:96
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer: /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial: 019F94A4E189EC649A77DC0BF323385B28BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 15:01:01 +0000
Manifest this update: Fri 24 Jul 2026 15:01:01 +0000
Manifest next update: Sat 25 Jul 2026 15:01:01 +0000
Files and hashes: 1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: 1Gqvmc03DZlFyh2xCBuajOwUY5uho0Kxkbt1qzW/WsM=)
2: zXFwqAAnYrIjiWd8TXgaxxMmw0s.roa (hash: Ovzx2APxYoxGQIUTR5wFv0olnXJaY9uRnLcnYqntG64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:e1:89:ec:64:9a:77:dc:0b:f3:23:38:5b:28:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Validity
Not Before: Jul 24 15:01:01 2026 GMT
Not After : Jul 25 15:01:01 2026 GMT
Subject: CN=5c59e3ed708a91962ddc256680dab3e12c9b2596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:85:45:7f:1b:11:9b:c3:5f:1d:c1:57:33:43:
54:58:8b:6f:d1:11:38:b8:8a:2f:3b:4e:a2:dc:c6:
55:2d:16:ce:c2:61:a6:19:9a:73:2c:1a:68:f5:4e:
a2:1d:54:be:18:91:30:c4:9c:99:d4:6c:c2:9a:85:
51:bd:f1:1d:b2:4f:bd:11:f4:39:e2:26:77:27:ac:
5f:bc:07:29:bb:2a:79:19:95:f0:81:a5:99:d6:7a:
89:7c:6e:e2:b6:d9:56:cc:bc:58:a1:78:57:a5:ca:
38:3f:f4:0f:8c:31:ce:f9:de:e1:c4:c5:bd:e8:d4:
6c:a5:08:b8:fb:87:a3:7c:ec:ee:f8:9f:a1:32:d9:
f7:4c:93:f9:48:cb:be:99:f4:3c:ad:26:b3:0a:3e:
da:37:32:28:81:be:f9:0d:39:5e:cc:b3:ae:47:70:
f5:30:85:74:ac:dd:d3:e1:14:17:e9:02:d1:21:02:
db:06:c3:de:65:c9:89:73:f8:b8:58:ca:d9:d9:2e:
18:8f:ab:af:4c:95:86:86:e4:c4:95:da:5f:bf:85:
1c:4c:ce:2e:28:b3:53:74:6c:dc:b8:9a:63:26:2c:
0e:48:6a:f8:d5:99:a7:e9:e1:62:be:77:bd:b9:f2:
b6:24:e3:69:11:f3:cc:cd:b4:84:c5:6c:d6:39:15:
2f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:59:E3:ED:70:8A:91:96:2D:DC:25:66:80:DA:B3:E1:2C:9B:25:96
X509v3 Authority Key Identifier:
keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:39:44:b0:2b:05:1a:3c:75:41:a5:1a:9e:43:51:7b:a3:05:
3a:88:7a:38:fc:bb:2d:f8:da:af:72:b5:e9:59:5b:2b:26:06:
3b:32:f8:1a:35:e0:94:22:e7:6d:92:91:04:31:5a:e3:2d:dc:
57:35:91:dc:cd:27:8f:c9:2f:46:cd:34:b4:26:c8:b7:98:d6:
29:93:29:5a:11:99:d3:b3:3f:25:c6:b1:a9:5e:82:c5:99:16:
07:51:2d:66:7d:47:20:2b:b2:05:eb:a7:93:d1:aa:14:dc:39:
d6:0a:85:db:5f:24:a4:db:11:b6:89:b0:4f:f3:b9:f2:df:5d:
65:dc:dd:b8:b4:27:9b:ee:a4:be:0a:89:74:73:fe:c1:47:cc:
45:28:06:13:19:4d:f3:5f:bc:20:50:17:35:ae:91:2d:28:92:
37:57:3b:14:c2:2d:fe:2a:de:e1:b7:61:06:b1:2f:7e:49:b5:
c7:6d:df:ef:3d:c6:15:e3:6e:58:52:9b:08:97:d8:ec:94:72:
6e:d3:db:bc:00:46:af:e8:4d:5b:6e:b4:52:1b:77:76:e9:70:
2c:1c:14:ea:b4:cd:5e:6d:ce:06:29:5c:6b:84:da:13:96:53:
e7:3e:6a:72:6e:85:09:5e:4c:da:3d:73:ad:9c:c7:08:c6:00:
b5:16:57:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:25:59 2026 by rpki-client