Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier: jRNJxTL6oyC0QFmucbLSBVWnshbthYEmEZ5Y2h5cLDs=
Subject key identifier: BB:C8:2E:46:B8:E9:7B:94:0A:2E:8D:C7:E2:7D:67:CF:2D:C0:D6:44
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 019CACB556947A4BD198C2E08F3C269F2579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number: 18DA
Signing time: Mon 02 Mar 2026 04:01:30 +0000
Manifest this update: Mon 02 Mar 2026 04:01:30 +0000
Manifest next update: Tue 03 Mar 2026 04:01:30 +0000
Files and hashes: 1: IUI0XObzqlXmJSe9907ojhvvGKY.roa (hash: lh17xK7xmqGsZK8e6QUcQhpWBvUMvRGKUOxPhaUyu88=)
2: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: QtDg1r3W/PAxzkeUsgD9WOoUGxFbP/XTm3kemPhxlww=)
3: yxM7J-fncjH39qOsj_6YqBGJVWU.roa (hash: AjHV8rOTeMWNj3biUMbUNtv+kWtvN/aGZ8u6KDIN/SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:56:94:7a:4b:d1:98:c2:e0:8f:3c:26:9f:25:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Mar 2 04:01:30 2026 GMT
Not After : Mar 3 04:01:30 2026 GMT
Subject: CN=bbc82e46b8e97b940a2e8dc7e27d67cf2dc0d644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:92:37:2e:29:c8:fd:71:12:26:46:27:65:66:
9f:45:78:d7:42:5c:8b:1a:5d:79:31:7e:6f:d0:e5:
1c:ab:53:2c:ac:f8:20:19:02:9b:60:1c:ba:37:fd:
24:67:02:c6:93:93:7c:5f:c9:06:bb:5b:b2:52:c9:
f7:90:3c:33:7c:4a:fe:7d:13:0f:1d:49:d7:2b:19:
d4:3f:00:8d:5a:86:2a:0a:f5:48:cf:ec:f5:a1:9b:
e6:43:5f:76:5c:dd:ff:77:b9:7d:ed:00:20:01:ca:
1e:fa:01:1a:d6:d4:7d:2c:8f:d5:af:8b:c8:2c:af:
02:b0:24:08:45:7f:8a:2b:a8:95:9a:1c:b9:c9:6d:
ab:4b:c1:68:f8:14:29:2f:a2:54:a2:b0:d1:2e:c5:
2f:b5:b6:98:2c:b2:94:05:37:83:18:87:88:3e:a4:
87:34:06:71:6f:ed:06:85:1c:ce:e6:a4:12:23:e3:
4f:4f:3f:c0:7f:8a:e0:6e:62:67:8a:7c:60:e4:e4:
83:79:5e:d9:ba:b7:5b:aa:57:31:e3:2d:f8:75:cc:
2d:92:3c:e9:48:4d:e2:41:82:ad:d7:d3:e7:61:43:
f2:02:e4:56:30:c9:8e:3f:ce:2a:74:02:ee:a5:b2:
3e:38:cc:e6:83:82:c5:f0:95:2f:52:9f:2e:6f:fe:
e4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C8:2E:46:B8:E9:7B:94:0A:2E:8D:C7:E2:7D:67:CF:2D:C0:D6:44
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e1:d3:ce:8c:de:d2:d1:4c:42:a1:36:f5:6f:24:ae:f7:07:
f3:a3:31:a5:bc:bf:9a:cd:dd:0d:16:cb:40:37:eb:64:d1:0b:
ee:e9:f4:38:f9:79:26:71:8b:f2:07:e3:a2:33:86:2a:d4:11:
f7:fa:f7:4d:46:53:27:a3:b8:07:fe:22:9a:e9:29:52:7d:1f:
72:55:0f:aa:4a:80:09:25:13:15:b0:ed:a4:95:23:03:e8:b7:
38:08:74:96:b7:d1:33:06:c2:ee:e4:33:0d:d0:e0:d1:47:ad:
1f:b2:95:a4:4e:2e:c2:a7:0e:9c:21:84:51:d2:13:6d:b3:9b:
9e:98:0e:75:88:dd:f8:6c:20:53:47:03:68:6c:68:98:87:98:
ad:b4:86:41:ad:51:92:ce:cf:db:fe:fd:83:8d:52:93:3c:99:
34:ff:2b:50:c5:3b:6f:a6:ff:90:6f:8a:df:29:b8:4c:41:28:
f5:15:7f:7f:bd:4c:21:23:b3:dc:df:07:1d:93:89:e3:7d:73:
ee:de:9a:33:89:de:8d:2b:6b:5c:72:a1:13:95:57:24:05:91:
15:c5:0f:86:4c:1e:7c:f8:5a:42:8e:1e:47:4e:f1:1b:27:69:
1a:4e:b5:eb:d8:a1:7b:24:61:97:5f:87:f8:6b:3e:0e:5a:23:
85:75:7b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:27 2026 by rpki-client