Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
File: GyHb_7GS4UkZz-J4a69EhAw6yjw.mft (raw, json)
Hash identifier: Wvc5vvevL+8MQx4TrYIy7EBPnvwWFFamsxqLiJ0GIFg=
Subject key identifier: 45:B0:7E:FC:D1:C7:6C:A3:D4:36:41:26:5E:45:3C:53:C1:9A:CA:5D
Authority key identifier: 1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
Certificate issuer: /CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Certificate serial: 019D258361522D2D0B793AC5C944B71FACEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 15:01:00 +0000
Manifest this update: Wed 25 Mar 2026 15:01:00 +0000
Manifest next update: Thu 26 Mar 2026 15:01:00 +0000
Files and hashes: 1: GyHb_7GS4UkZz-J4a69EhAw6yjw.crl (hash: tTbuzxPYf2waOk6U5EVZKFZFKyWNQBpZ/lRd87dubb4=)
2: OjQ0zzKUV1mIuissX7R6oiwC7R4.roa (hash: RqtRopS3nAAsoOtWVCcZpZzIHlMNh6J6RVxWQzfONms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:61:52:2d:2d:0b:79:3a:c5:c9:44:b7:1f:ac:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Validity
Not Before: Mar 25 15:01:00 2026 GMT
Not After : Mar 26 15:01:00 2026 GMT
Subject: CN=45b07efcd1c76ca3d43641265e453c53c19aca5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:83:30:dc:45:c7:d7:77:cd:09:d5:35:23:
38:b1:91:a0:65:d3:3f:55:14:2b:55:09:fe:65:c9:
bd:00:f9:10:f1:34:e4:2d:04:fa:48:74:a0:1e:f3:
1d:be:73:dd:75:e7:f3:23:ba:82:e6:6f:fc:b8:3a:
20:3e:55:1f:7d:cc:44:e7:f3:8b:c1:9b:0a:88:7e:
ce:ed:b4:8c:ad:63:b3:b3:38:01:b3:5e:38:de:d3:
02:91:5c:ed:aa:10:c7:1a:18:c5:a3:a4:e5:07:71:
f7:16:b2:35:a8:40:6a:ec:8c:b4:db:45:79:a9:18:
46:1e:2b:91:34:4a:f1:00:05:70:97:b0:ae:c0:b8:
2a:0d:9f:d3:09:b9:cf:4d:de:9e:97:69:2c:2d:14:
26:7d:ba:30:a6:e5:79:52:19:73:11:93:6c:05:f6:
14:15:ca:6a:c1:4b:87:22:69:93:1b:95:9b:3c:ff:
80:0d:40:f2:f0:2f:a0:6c:fc:45:7b:37:9f:a3:ea:
42:8e:f6:0c:da:b4:51:25:b5:f2:f2:cc:0b:b5:b1:
7e:ad:11:9d:3b:28:eb:05:bb:b3:cd:1e:5b:95:63:
3d:ba:cd:d1:8b:68:b9:1a:e3:01:03:90:a2:e4:ef:
3b:a1:05:45:02:ae:2b:22:91:cc:97:86:4d:a5:5e:
26:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B0:7E:FC:D1:C7:6C:A3:D4:36:41:26:5E:45:3C:53:C1:9A:CA:5D
X509v3 Authority Key Identifier:
keyid:1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:4b:81:cd:39:31:cd:97:ab:d4:2e:80:83:57:d6:47:9e:eb:
0f:b7:ca:a6:91:6c:39:a9:c4:05:99:18:35:62:c8:e4:ae:e2:
7b:49:20:cc:cd:67:bc:cf:fe:10:dc:3b:76:62:ac:f5:f3:bd:
e0:a6:43:64:d2:ac:19:1f:75:ec:80:6c:7b:b7:c7:2d:b7:99:
dc:60:14:9a:2b:e9:df:3d:76:cf:55:f8:23:b6:73:79:d6:45:
17:2b:64:bf:84:dc:bc:e2:ef:47:0d:8c:fd:3b:c2:9b:ca:9e:
88:c1:52:27:cc:29:82:c8:13:16:ee:b8:9b:30:02:fd:a1:71:
3d:5f:a3:08:86:ce:8e:73:27:d1:52:c4:45:49:0d:16:ec:5a:
6f:14:61:f5:26:ca:ff:0e:20:48:a7:86:d5:f1:18:73:41:a1:
02:fd:df:99:16:f3:d7:e2:82:61:1e:17:74:5a:66:a2:be:d1:
8e:27:e0:27:aa:f3:8d:e3:93:40:96:db:4c:a7:86:a0:61:09:
fc:c9:aa:98:1f:14:4d:36:04:b9:9f:ca:27:0b:5d:55:68:38:
b2:84:87:7b:84:16:02:98:d6:ee:e6:6a:e2:73:af:02:63:b7:
09:53:64:71:cd:0d:65:d3:a8:bc:e1:09:84:75:2a:a1:5b:af:
ac:0c:1c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:28 2026 by rpki-client