Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json)
Hash identifier: bO0+PSxZRw6gwbSoDWFXR419jM8J0fXXsFBdvcCXC4c=
Subject key identifier: 7E:08:87:AE:74:50:73:3E:A3:7D:9E:99:FB:34:CC:49:CA:F3:F2:E7
Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Certificate serial: 019CAD59D59494739506C6BBCB817EDF817B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
Manifest number: 165F
Signing time: Mon 02 Mar 2026 07:01:11 +0000
Manifest this update: Mon 02 Mar 2026 07:01:11 +0000
Manifest next update: Tue 03 Mar 2026 07:01:11 +0000
Files and hashes: 1: 3fcVrImGg7jj5KwrtAd-bYf7aAM.roa (hash: S1b9AmYLLzxAfeSxaH7YVQhFBj8TwadZxNGNH30/GyI=)
2: CVSRElmsqlgWcEdghVOc7WPdDdc.roa (hash: Hn/0sT1HWFlLcY0Ekg5urzbmDq/zA7lmExICAldUfLE=)
3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: 0ethoyD6n/oucYhS0VzX9iS/N7PzR94+L1sU+M9RZ9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:d5:94:94:73:95:06:c6:bb:cb:81:7e:df:81:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Validity
Not Before: Mar 2 07:01:11 2026 GMT
Not After : Mar 3 07:01:11 2026 GMT
Subject: CN=7e0887ae7450733ea37d9e99fb34cc49caf3f2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:02:ce:b4:d7:f9:15:03:e0:4b:fa:f4:8a:37:
4f:54:3a:60:75:51:26:75:e2:07:69:38:d8:1b:95:
f0:0d:aa:90:4b:c9:b0:07:6d:c7:ec:83:79:d2:57:
a3:48:19:06:41:a8:37:48:a9:9f:1d:97:dc:9a:83:
ae:c4:6f:ca:e1:db:77:f1:d4:b3:2e:5e:f7:e5:ac:
de:ee:94:ed:01:fd:36:83:e7:ea:2a:cb:33:65:d3:
fb:c5:f7:9e:5b:3c:b7:c2:e7:5d:a0:56:e4:63:e3:
bc:20:ed:d9:6f:b9:80:b0:3a:42:ec:32:3a:55:53:
50:ef:26:be:23:0f:84:44:24:29:ee:f8:48:6c:fb:
b5:24:e8:2b:73:58:0d:9f:93:1b:23:18:3b:1c:1d:
a6:1e:f4:0d:8b:30:0e:8d:4e:ea:f4:86:33:cf:ec:
d1:cf:cc:1b:d2:a4:11:f4:96:67:ed:2b:d0:17:ea:
b3:32:96:26:06:d8:0b:c1:da:09:25:33:db:c5:dd:
c5:2a:80:c5:15:3b:e7:58:0a:93:a5:d0:ac:6d:30:
4c:47:a3:b0:d7:93:70:66:f9:9b:7e:54:e9:1d:17:
4d:5a:76:06:96:00:ef:ef:e6:c8:9b:68:29:4a:0b:
ca:32:58:cd:5c:59:e9:7f:de:9a:87:eb:ed:ba:c6:
7a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:08:87:AE:74:50:73:3E:A3:7D:9E:99:FB:34:CC:49:CA:F3:F2:E7
X509v3 Authority Key Identifier:
keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:be:81:bd:f1:b1:4b:60:56:ef:dd:7c:29:a4:ac:d3:75:0f:
71:49:58:c5:4c:dd:41:72:27:12:5e:b7:5f:2b:47:f1:ff:4d:
f5:43:41:bd:b7:b8:2c:15:d0:bf:13:7c:28:7f:3d:65:d2:b0:
15:d5:4a:53:b8:1d:c3:4f:be:49:1f:8a:42:c8:8e:ab:b8:16:
97:88:73:83:be:a3:47:77:3d:64:f1:75:96:7b:dd:31:f8:e2:
c4:57:0b:83:56:bf:7f:31:10:4c:76:a8:de:14:38:98:7b:83:
a9:0e:fe:89:7c:65:99:13:3a:53:3a:04:6f:81:5f:62:2c:bb:
1a:81:6a:6b:37:e2:8a:db:27:0e:b2:5e:33:72:d4:4f:7d:f0:
51:b2:0e:c0:bd:a9:06:f0:8e:ad:b2:f6:05:d7:87:81:dc:76:
8f:bf:97:ca:99:a8:c3:0a:61:98:cd:67:10:38:21:71:c1:8d:
59:c4:66:69:ee:73:18:62:bc:25:bb:97:b0:81:09:ab:b0:83:
18:e6:f9:0c:0a:77:db:af:a0:c6:a6:a5:13:95:fc:5d:85:a4:
62:ab:dc:2e:14:26:0f:0a:e3:c2:c2:84:85:79:27:05:f0:34:
75:09:3d:4d:39:a2:48:bc:c4:0f:78:b1:1d:57:46:e9:fe:3e:
c6:f8:73:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:34:03 2026 by rpki-client