Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/gyaRLzqceyB_u-IP9DwNRsxYbC4.mft
File: gyaRLzqceyB_u-IP9DwNRsxYbC4.mft (raw, json)
Hash identifier: tngfPUx7fvh2f34ztDd4sOfPB50HmTbnzBMPCQjTeMo=
Subject key identifier: 64:B7:2F:99:C7:E4:2A:2F:52:82:74:1A:19:D0:E5:C0:C5:1E:AA:2B
Authority key identifier: 83:26:91:2F:3A:9C:7B:20:7F:BB:E2:0F:F4:3C:0D:46:CC:58:6C:2E
Certificate issuer: /CN=8326912f3a9c7b207fbbe20ff43c0d46cc586c2e
Certificate serial: 019F935B186A0F23623FABB27CA0F18590D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyaRLzqceyB_u-IP9DwNRsxYbC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/gyaRLzqceyB_u-IP9DwNRsxYbC4.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:48 +0000
Manifest this update: Fri 24 Jul 2026 09:00:48 +0000
Manifest next update: Sat 25 Jul 2026 09:00:48 +0000
Files and hashes: 1: ERkEONizgpGBcUj4M6VWv3IFFaw.roa (hash: Iw6tLF3DVntPxrSuBh8Lu9AxxPzSwjwMe2mXzXbqfJ0=)
2: gyaRLzqceyB_u-IP9DwNRsxYbC4.crl (hash: dRr+DFOYC7Dac84Kc5oebc7R2uZ4mIv/wAkpPB6juWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/gyaRLzqceyB_u-IP9DwNRsxYbC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/gyaRLzqceyB_u-IP9DwNRsxYbC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyaRLzqceyB_u-IP9DwNRsxYbC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:18:6a:0f:23:62:3f:ab:b2:7c:a0:f1:85:90:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8326912f3a9c7b207fbbe20ff43c0d46cc586c2e
Validity
Not Before: Jul 24 09:00:48 2026 GMT
Not After : Jul 25 09:00:48 2026 GMT
Subject: CN=64b72f99c7e42a2f5282741a19d0e5c0c51eaa2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:ad:71:89:4b:b7:02:42:97:07:2a:cc:90:
62:82:f8:64:da:6c:af:57:b0:ca:78:2a:27:9b:f8:
4f:37:50:6d:48:70:01:9d:fe:9a:d3:4b:55:d6:fb:
14:eb:cc:05:49:a9:32:45:2a:e8:da:a8:88:c8:3f:
7e:8e:57:a4:4c:c1:b4:2c:58:77:7a:9b:86:76:64:
2b:b1:1a:63:33:98:c4:ea:8a:27:9a:a5:19:36:fe:
96:d4:0c:df:6e:67:e2:b0:98:4b:14:bb:d7:8f:58:
e3:cc:6c:1f:24:0e:3f:5a:2d:82:c4:6f:6b:0b:5e:
fd:07:9f:fb:93:0b:67:12:8d:5a:8b:a4:28:d4:3f:
25:7e:f0:06:ae:c9:f4:4a:70:55:a7:7b:3e:57:cc:
50:45:b3:2e:7c:1e:0a:ea:3f:54:96:43:e3:c7:f4:
9b:d8:25:f1:31:64:e9:3e:b8:62:60:47:a3:7e:75:
8a:a3:b6:e9:ab:7a:5b:17:85:19:16:8c:87:d3:b4:
8a:43:65:e9:84:78:fa:1e:50:c8:03:c8:b5:f7:80:
f9:35:ab:a4:25:96:80:46:71:34:5a:33:d4:68:e9:
e7:ef:a4:c0:57:b1:7d:31:65:a5:36:8c:8c:ac:70:
52:75:e1:8a:8d:c8:37:bb:72:c2:af:63:aa:26:38:
f4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B7:2F:99:C7:E4:2A:2F:52:82:74:1A:19:D0:E5:C0:C5:1E:AA:2B
X509v3 Authority Key Identifier:
keyid:83:26:91:2F:3A:9C:7B:20:7F:BB:E2:0F:F4:3C:0D:46:CC:58:6C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyaRLzqceyB_u-IP9DwNRsxYbC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/gyaRLzqceyB_u-IP9DwNRsxYbC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/gyaRLzqceyB_u-IP9DwNRsxYbC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:65:47:c3:70:59:0b:b9:e8:d4:12:c2:3d:99:44:c4:41:13:
7a:24:d6:bb:ec:1a:da:e0:ee:64:6a:df:1d:f4:c3:3e:69:4f:
4c:9f:98:e2:3d:de:f7:6d:e8:f1:b1:a7:be:81:1d:9e:2d:bd:
be:8c:16:38:6b:60:b0:a1:c6:b9:f8:53:25:48:cb:10:9d:e3:
34:08:38:ee:46:05:66:89:38:ac:07:9f:be:4e:cf:93:ed:b8:
16:37:85:cc:6d:7b:f2:69:d3:42:8e:66:86:0a:35:4c:08:c8:
1c:f1:f6:a5:75:a9:9a:6a:27:ce:b0:94:fa:6e:06:de:4f:54:
31:fb:d7:57:6a:9a:74:57:6b:cc:5e:93:c7:4c:fa:d5:d3:85:
5c:e2:81:6b:78:ab:14:e3:99:7a:39:f7:e6:5c:33:14:79:be:
44:42:de:69:8f:9d:3d:c2:2f:79:47:21:8b:5b:ad:21:4e:80:
49:07:81:96:8d:34:d4:5a:1e:40:67:9d:1b:44:dc:d0:dc:e2:
7d:23:f1:eb:35:0c:4a:34:a7:a2:5d:3c:55:59:f7:dc:0e:96:
72:5a:38:34:fa:91:28:aa:c6:8b:5d:3d:61:9b:a7:b4:06:43:
d3:bf:07:d3:df:97:40:c6:a1:a5:84:75:fb:14:56:e5:87:ad:
be:7a:e5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:53:40 2026 by rpki-client