Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
File: gYFECjZ6NNMGvA9oWunNhpUvf5U.mft (raw, json)
Hash identifier: kbfc4ZiBe8RUKcka5ZdlKlcY3RqIRkw4Q0CYXciidtI=
Subject key identifier: B1:A5:C9:31:38:F1:5A:0A:D7:35:35:0B:94:5E:7B:26:87:86:92:EE
Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
Certificate issuer: /CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Certificate serial: 019F93C8B37E4381F808BEB1DAED670E40D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
Manifest number: 056C
Signing time: Fri 24 Jul 2026 11:00:31 +0000
Manifest this update: Fri 24 Jul 2026 11:00:31 +0000
Manifest next update: Sat 25 Jul 2026 11:00:31 +0000
Files and hashes: 1: AEyZjBDd8JRa3C8Qu8Ed1pPfWTA.roa (hash: t/3GieMGxWoGjj/AjR+XfDv+Hv6o+nbcwMgeFZJBMF0=)
2: gYFECjZ6NNMGvA9oWunNhpUvf5U.crl (hash: k9YXUZcVDtuN8K5+J5Q3pqvooDuCrmmc9mfzYI8u2Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:b3:7e:43:81:f8:08:be:b1:da:ed:67:0e:40:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Validity
Not Before: Jul 24 11:00:31 2026 GMT
Not After : Jul 25 11:00:31 2026 GMT
Subject: CN=b1a5c93138f15a0ad735350b945e7b26878692ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:80:ba:f5:71:80:c5:9a:57:cd:89:a6:26:
2e:3a:82:b8:61:75:5e:03:83:b8:61:9e:a9:90:aa:
5f:59:69:c5:8f:82:00:cd:ca:67:de:b2:d1:16:fa:
d0:b6:b9:20:71:48:44:32:75:2a:0b:f1:50:18:04:
40:9d:64:15:99:94:ef:96:3f:57:ab:fc:d5:84:0b:
e7:19:0a:59:d7:44:2f:ba:9a:1f:42:fa:af:f0:b0:
a2:74:d9:e0:44:07:a2:dd:64:19:92:d6:ef:62:ba:
4d:a8:43:70:91:04:31:77:16:50:af:69:c9:fa:eb:
44:5b:10:a6:14:dc:80:f3:7f:4e:1b:4b:66:fa:15:
52:0f:c3:ff:61:44:2d:60:a5:3c:81:ba:ab:d3:b6:
cf:c5:f1:86:7b:47:76:37:88:cc:a3:3e:63:01:37:
f0:69:7a:6d:0e:74:db:a4:86:99:d3:1a:62:83:05:
54:2f:71:fb:68:9c:74:ac:b7:78:11:86:04:b3:f3:
9c:f5:0f:a5:54:fc:66:e2:f3:da:f4:88:17:e7:f2:
86:e8:14:f7:58:ab:2a:f8:c2:62:81:fb:ea:64:0b:
df:b9:87:2a:2d:d4:05:d7:49:4d:db:8d:7e:f3:00:
12:1d:f4:99:6a:a0:66:2b:fc:29:8f:e0:4e:09:25:
36:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A5:C9:31:38:F1:5A:0A:D7:35:35:0B:94:5E:7B:26:87:86:92:EE
X509v3 Authority Key Identifier:
keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bf:e7:8b:58:9f:df:6d:96:e1:7e:48:60:05:b5:de:a5:48:
9d:bc:ec:a9:da:cb:b2:3f:7a:60:80:7b:49:8f:dd:f5:64:3f:
4a:6f:63:7a:d9:fa:2a:5b:ae:6c:70:eb:cc:39:57:9c:bd:78:
84:c7:dc:00:b8:96:32:21:96:dd:e5:24:be:69:0a:6a:60:a9:
4c:0d:fa:7b:fe:4c:23:be:8b:6a:83:92:47:a8:0f:44:62:ea:
f7:9e:b4:29:17:58:3a:58:5d:ad:c2:d4:44:01:83:00:12:17:
d5:db:86:1f:05:c3:36:28:05:dd:31:7d:0b:e1:03:25:cb:b9:
e8:36:f6:c3:83:73:2c:4b:70:b2:92:0e:ca:9f:b0:b9:cb:0e:
ee:80:05:7b:50:44:14:85:44:49:cf:09:6d:fc:af:0e:81:6e:
a6:30:70:4b:37:c0:55:77:4e:62:2e:87:80:d6:7b:8e:62:07:
42:e0:92:cb:d5:fa:ff:2c:ab:97:de:ae:84:b0:13:1e:e1:6f:
da:19:bd:5a:82:a8:b3:6f:ba:a1:ca:d2:48:ca:dd:6f:3d:b3:
89:af:1a:0b:ab:3c:85:8a:d0:9c:e4:be:a0:60:63:4b:09:98:
ab:1a:37:a8:49:0b:58:ed:52:25:7d:30:a9:85:73:5e:23:ff:
ba:fc:fb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:57:48 2026 by rpki-client