Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json)
Hash identifier: 9Bzuuuz+AfMeDylfYF7yjNJJ62T1s7PcSqfySDy3pS4=
Subject key identifier: 73:90:CA:DF:74:84:DC:27:28:DF:23:C6:23:52:2C:97:2C:E1:F2:DB
Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Certificate serial: 019FAC07FDE65B99466F5728B08658DF700D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
Manifest number: 17EC
Signing time: Wed 29 Jul 2026 04:00:32 +0000
Manifest this update: Wed 29 Jul 2026 04:00:32 +0000
Manifest next update: Thu 30 Jul 2026 04:00:32 +0000
Files and hashes: 1: 3fcVrImGg7jj5KwrtAd-bYf7aAM.roa (hash: S1b9AmYLLzxAfeSxaH7YVQhFBj8TwadZxNGNH30/GyI=)
2: CVSRElmsqlgWcEdghVOc7WPdDdc.roa (hash: Hn/0sT1HWFlLcY0Ekg5urzbmDq/zA7lmExICAldUfLE=)
3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: XjpryhaILY+XN0Bv7Whuizg0DOBY4ParybDDjSgGHV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:07:fd:e6:5b:99:46:6f:57:28:b0:86:58:df:70:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Validity
Not Before: Jul 29 04:00:32 2026 GMT
Not After : Jul 30 04:00:32 2026 GMT
Subject: CN=7390cadf7484dc2728df23c623522c972ce1f2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6c:fb:92:94:18:0e:8d:c8:7e:73:a1:cd:44:
93:cc:08:aa:0c:f9:a7:b2:42:8c:43:9a:30:ac:d5:
d7:df:6e:67:43:13:6e:aa:93:0c:2f:d7:3b:c2:6c:
f3:a8:88:04:6a:42:85:2d:b5:58:dc:4b:1f:ff:a7:
81:b3:a2:bc:17:d2:d0:31:d2:71:54:a6:02:44:7c:
11:99:ce:71:46:59:11:1b:72:83:86:c1:0c:2e:12:
b2:04:18:82:6d:93:6f:ee:66:60:19:51:f2:bd:ba:
e1:64:85:d4:0e:c2:3e:61:82:e0:53:f8:12:67:4e:
70:56:db:db:ed:ae:a9:e0:36:4a:ed:8b:b8:96:de:
71:d5:05:82:97:0e:62:60:dc:0e:74:e8:64:25:b4:
dd:76:e0:46:4e:75:4b:b6:28:54:50:71:59:8d:e2:
4d:26:c4:1f:6f:80:f2:0b:cc:dd:b9:28:6e:e6:fd:
31:2f:42:22:2d:73:a5:ae:38:fb:ef:26:e0:1a:f6:
1a:6e:bf:a8:82:04:f2:a9:ec:ac:9b:b1:d7:d2:7f:
b1:2e:20:97:8b:e3:db:8b:f8:f1:6f:70:8f:b4:00:
37:e3:2f:98:eb:01:a3:39:91:7b:7a:4e:23:76:10:
01:69:be:c1:10:4b:0b:d6:b9:72:20:22:32:f4:b2:
7f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:90:CA:DF:74:84:DC:27:28:DF:23:C6:23:52:2C:97:2C:E1:F2:DB
X509v3 Authority Key Identifier:
keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a4:79:2e:22:ae:5e:88:dd:0c:47:8f:86:f7:16:11:2d:58:
31:d4:d4:91:03:ec:69:21:7d:b4:c8:a9:94:25:77:7b:ea:3d:
f4:0a:e8:6f:18:35:5f:9c:9a:63:32:95:ff:0b:29:da:e6:0a:
37:10:4a:ab:95:8b:34:6a:6c:b5:e8:f9:19:2b:cd:d3:2f:4b:
94:f7:bf:67:ef:8e:c0:03:56:c6:d2:c6:2c:78:c8:da:60:f6:
33:e9:b0:0a:34:c2:6f:32:b9:f9:df:d3:a0:12:f4:d4:a3:10:
c1:e0:76:26:3b:89:0b:96:43:a8:14:9c:f3:72:b6:ac:d0:9d:
9e:10:a6:11:8f:1e:cf:c1:27:4e:78:00:4d:b1:b8:e8:54:75:
ff:84:c0:18:48:50:fc:39:95:7c:94:89:5c:6e:a1:fe:ef:c5:
61:fa:99:00:8a:b2:ea:6f:c2:9b:ce:26:96:ee:3f:e4:ad:d1:
92:a3:3e:b4:b4:52:c0:15:ff:0a:97:29:28:5e:89:58:df:75:
49:b5:d1:58:50:2d:7b:51:0e:0a:82:a8:ca:09:51:42:36:0c:
07:b6:6a:10:54:ab:96:40:ba:98:84:95:91:1a:04:c9:c9:74:
9c:1b:2f:da:5c:26:94:10:13:ab:30:5d:f7:d1:48:1b:46:e3:
c5:16:83:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:55:57 2026 by rpki-client