Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json)
Hash identifier: tenHrJkaS4HdIx6EMhUZEDOEudoSVR5xHIpDXUMymNk=
Subject key identifier: BF:2C:B5:5F:9D:72:1C:4D:64:68:28:9B:6A:7E:81:9A:59:AF:5A:55
Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Certificate serial: 01A132226769E60B00670C6CCEFB63EFE3FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
Manifest number: 18B6
Signing time: Mon 12 Oct 2026 22:01:17 +0000
Manifest this update: Mon 12 Oct 2026 22:01:17 +0000
Manifest next update: Tue 13 Oct 2026 22:01:17 +0000
Files and hashes: 1: 3fcVrImGg7jj5KwrtAd-bYf7aAM.roa (hash: S1b9AmYLLzxAfeSxaH7YVQhFBj8TwadZxNGNH30/GyI=)
2: CVSRElmsqlgWcEdghVOc7WPdDdc.roa (hash: Hn/0sT1HWFlLcY0Ekg5urzbmDq/zA7lmExICAldUfLE=)
3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: CByRfb4s67QD0QIzdv3Zkh5QNhWWygiNI61lR3f/MzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:22:67:69:e6:0b:00:67:0c:6c:ce:fb:63:ef:e3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Validity
Not Before: Oct 12 22:01:17 2026 GMT
Not After : Oct 13 22:01:17 2026 GMT
Subject: CN=bf2cb55f9d721c4d6468289b6a7e819a59af5a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:94:de:65:d0:09:35:c5:59:e1:56:74:d2:
ba:08:7f:28:29:ef:25:1d:12:9b:8d:3f:75:7e:b6:
98:3b:5f:4c:0e:21:79:54:4e:73:f1:7c:dd:d9:d0:
43:20:b9:45:4b:a1:d5:e0:b2:77:fe:f3:e3:fa:52:
76:a6:b9:32:3c:06:92:07:c0:80:c6:66:5b:4b:88:
95:da:b2:38:91:64:f2:4e:25:2f:ee:2f:d0:0a:07:
9d:69:2d:dc:77:8e:bb:e2:76:b7:0d:cf:0e:92:8c:
a7:51:f4:16:3e:70:44:43:13:a5:83:ed:5c:9a:d1:
cb:34:0d:e8:56:45:3c:16:e6:7d:b6:0f:79:bd:1a:
e2:c7:5d:8a:f1:cf:38:6d:12:c0:e6:f0:d0:85:45:
cf:32:90:dc:0c:42:47:9f:db:5b:a5:0c:1c:28:e2:
3c:ac:29:46:8c:5f:ec:e0:6d:18:7f:45:df:02:f7:
a1:cc:db:a3:19:1b:ff:a2:28:0d:3a:41:a0:fe:1e:
b7:be:4f:8a:87:23:18:29:ab:76:0f:f0:5e:dd:a4:
91:bb:2a:31:48:11:75:ef:46:da:93:6e:aa:0b:43:
9e:ad:d3:a9:9a:27:03:cc:5e:a8:ac:94:6e:d0:67:
6d:fd:59:d5:8e:d7:be:f7:7d:4a:dd:b3:be:8e:78:
26:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2C:B5:5F:9D:72:1C:4D:64:68:28:9B:6A:7E:81:9A:59:AF:5A:55
X509v3 Authority Key Identifier:
keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:96:66:58:f6:0e:7f:be:d7:7f:b4:c7:9a:64:be:5a:79:cf:
b1:ea:68:15:db:c5:84:fc:b2:5b:58:17:9f:e6:f2:8c:43:f1:
c1:91:27:ce:9d:e0:1a:6f:dd:51:de:0e:d4:dc:7f:a4:27:ad:
4a:cb:35:99:d3:1d:8f:83:59:c9:55:c8:47:1f:2d:9e:18:38:
aa:95:ae:f0:ca:02:03:41:8a:d7:08:d4:60:1d:9f:25:7b:66:
c9:0e:51:c4:e1:ce:8c:a6:f5:10:45:77:27:b6:78:75:6b:e3:
2a:cc:cd:92:ee:d0:e4:41:c6:6e:34:d7:40:d2:e4:21:33:1a:
da:e2:29:60:57:72:7c:34:42:4a:1c:6d:85:ff:a5:42:21:96:
bb:01:b5:1b:ca:91:e3:cf:4a:25:cf:2e:4e:9a:17:b0:18:b3:
d9:10:d2:4a:a8:35:b7:3c:25:9b:96:c0:d8:c2:12:c9:f9:bf:
b6:85:f5:10:f7:6d:67:f9:3b:f9:76:b9:fd:1f:21:37:ea:df:
a1:50:9b:d6:b5:64:8f:91:c7:d7:14:44:e4:4c:26:ad:3c:3f:
d5:99:31:3d:83:05:2c:24:de:86:df:46:10:50:a2:a5:ae:7d:
eb:a2:1b:e8:89:08:d4:bb:dc:e8:98:78:6e:fd:90:52:6c:c0:
98:5e:79:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:22:51 2026 by rpki-client