Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json)
Hash identifier: 86ej0TsRXATPpc2L8FkSrWBJkloqfQNbeh+LeuNUyBg=
Subject key identifier: 7C:14:EB:E0:04:85:25:15:50:5E:BA:64:9B:42:AF:85:FB:97:D1:39
Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Certificate serial: 019D9AE33FBDB636450CCEB69EC9004AD252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
Manifest number: 16DA
Signing time: Fri 17 Apr 2026 10:01:17 +0000
Manifest this update: Fri 17 Apr 2026 10:01:17 +0000
Manifest next update: Sat 18 Apr 2026 10:01:17 +0000
Files and hashes: 1: 3fcVrImGg7jj5KwrtAd-bYf7aAM.roa (hash: S1b9AmYLLzxAfeSxaH7YVQhFBj8TwadZxNGNH30/GyI=)
2: CVSRElmsqlgWcEdghVOc7WPdDdc.roa (hash: Hn/0sT1HWFlLcY0Ekg5urzbmDq/zA7lmExICAldUfLE=)
3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: meeEuuJUn6jjcN0psvFkdHEWHaZkJxffxE7tQvQysEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:3f:bd:b6:36:45:0c:ce:b6:9e:c9:00:4a:d2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Validity
Not Before: Apr 17 10:01:17 2026 GMT
Not After : Apr 18 10:01:17 2026 GMT
Subject: CN=7c14ebe004852515505eba649b42af85fb97d139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:8e:4d:7a:99:ef:f7:7b:77:06:df:51:4b:
3c:d4:72:c3:cf:ca:ae:2a:e6:d6:2a:e6:f3:27:35:
a6:24:2a:86:c7:97:de:63:62:a7:11:40:ed:cf:b8:
86:d2:f9:7b:eb:5a:11:bb:e4:4c:c4:31:7a:52:43:
fb:08:fa:b6:cf:cf:7c:6b:68:61:1e:d7:cb:78:8c:
13:93:78:83:a0:d5:13:70:95:6b:cf:3e:6d:cf:58:
11:76:c5:77:4c:3a:a5:2a:37:95:38:4b:d5:fc:d8:
87:88:10:45:44:4b:78:89:c9:cf:3e:28:14:d2:9f:
cc:a7:62:76:43:f3:9b:d7:7c:08:da:f7:33:92:35:
2f:fd:5f:ba:f6:99:94:a8:6d:e8:eb:4f:e9:e8:7e:
75:e0:fc:11:2c:22:e6:99:ee:48:37:d0:c3:bf:24:
6e:a2:44:da:9a:43:f0:ff:02:c9:37:1c:da:16:65:
e0:7d:f0:03:d9:8d:57:88:56:69:b3:9a:a3:9f:d0:
6b:28:be:72:b0:c9:31:f6:3e:11:6e:50:95:68:32:
6f:69:5f:ee:b3:c1:32:b1:90:c4:10:50:49:c5:cc:
f3:36:e0:c6:02:d5:4e:7f:da:58:14:d7:18:b7:b8:
d0:c3:87:c1:52:5a:4e:8d:7b:e4:ad:f6:67:01:6f:
36:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:14:EB:E0:04:85:25:15:50:5E:BA:64:9B:42:AF:85:FB:97:D1:39
X509v3 Authority Key Identifier:
keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0e:3c:99:66:ae:43:b8:62:6b:4d:1f:58:46:3c:c8:30:5e:
48:ec:25:f5:e9:e1:88:8b:8c:8a:38:41:85:51:9a:f5:c1:eb:
55:2d:1d:4c:55:9b:ff:b3:c7:c2:6e:d9:b6:b0:47:44:ed:48:
6d:bd:70:52:d2:b1:0e:c9:68:ce:31:16:68:95:bd:3e:dd:96:
02:6c:e6:43:a3:6d:7d:7a:6f:08:8f:d5:27:41:c3:68:56:3d:
a5:b3:ee:e4:9a:df:5b:cf:2f:51:10:98:7f:93:f6:d1:b7:f9:
41:19:b1:15:31:ff:4a:b4:27:db:22:90:3b:7d:ad:62:60:ba:
16:d7:3f:8b:be:73:d6:7f:2e:c3:83:f7:73:57:a9:3a:aa:c2:
bf:e8:2f:50:b0:42:ae:1c:43:5e:61:c4:5b:26:2b:90:9a:6c:
c9:13:e7:ae:18:50:17:2c:8d:65:3c:e7:5e:cb:15:ae:e7:3f:
f4:f4:14:bd:36:b2:11:3f:cb:91:5c:d8:30:a8:a9:8e:5e:c7:
88:e0:25:40:94:d6:62:48:b2:69:dd:e3:7c:90:c3:2e:29:7e:
0d:2d:da:bf:7e:b4:ae:67:9d:a9:1f:35:72:8f:51:4a:5a:b8:
f1:4b:be:51:8e:55:30:17:95:96:85:3e:8a:42:74:de:f7:19:
8d:66:d9:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4z+9tjZFDM62nskAStJSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMjNiOTczMWIxOTZiMWFjYmM4MjlmNWIyOGIzMjVmZDlk
M2UzZDQwHhcNMjYwNDE3MTAwMTE3WhcNMjYwNDE4MTAwMTE3WjAzMTEwLwYDVQQD
Eyg3YzE0ZWJlMDA0ODUyNTE1NTA1ZWJhNjQ5YjQyYWY4NWZiOTdkMTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGWOTXqZ7/d7dwbfUUs81HLDz8qu
KubWKubzJzWmJCqGx5feY2KnEUDtz7iG0vl761oRu+RMxDF6UkP7CPq2z898a2hh
HtfLeIwTk3iDoNUTcJVrzz5tz1gRdsV3TDqlKjeVOEvV/NiHiBBFREt4icnPPigU
0p/Mp2J2Q/Ob13wI2vczkjUv/V+69pmUqG3o60/p6H514PwRLCLmme5IN9DDvyRu
okTamkPw/wLJNxzaFmXgffAD2Y1XiFZps5qjn9BrKL5ysMkx9j4RblCVaDJvaV/u
s8EysZDEEFBJxczzNuDGAtVOf9pYFNcYt7jQw4fBUlpOjXvkrfZnAW82awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwU6+AEhSUVUF66ZJtCr4X7l9E5MB8GA1UdIwQY
MBaAFIMjuXMbGWsay8gp9bKLMl/Z0+PUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kYTFmMjMtMzY5NC00ZjU5LTg1Y2Yt
Y2ExZTVmMDgxOTUwLzEvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kYTFmMjMtMzY5NC00ZjU5LTg1Y2YtY2ExZTVmMDgxOTUw
LzEvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATA48mWau
Q7hia00fWEY8yDBeSOwl9enhiIuMijhBhVGa9cHrVS0dTFWb/7PHwm7ZtrBHRO1I
bb1wUtKxDslozjEWaJW9Pt2WAmzmQ6NtfXpvCI/VJ0HDaFY9pbPu5JrfW88vURCY
f5P20bf5QRmxFTH/SrQn2yKQO32tYmC6Ftc/i75z1n8uw4P3c1epOqrCv+gvULBC
rhxDXmHEWyYrkJpsyRPnrhhQFyyNZTznXssVruc/9PQUvTayET/LkVzYMKipjl7H
iOAlQJTWYkiyad3jfJDDLil+DS3av360rmedqR81co9RSlq48Uu+UY5VMBeVloU+
ikJ03vcZjWbZPg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:16:12 2026 by rpki-client