Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier: tLZvmriatzJ/Yfr3ZU4aHlTwSqCfkSpx1xpbFba3K6I=
Subject key identifier: 17:CE:95:65:F4:BE:C2:17:32:64:DF:FC:76:31:1E:51:09:A4:E9:91
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 019D9A3ED274AAFD2B2E1541A94E6DF8EBF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number: 1955
Signing time: Fri 17 Apr 2026 07:01:41 +0000
Manifest this update: Fri 17 Apr 2026 07:01:41 +0000
Manifest next update: Sat 18 Apr 2026 07:01:41 +0000
Files and hashes: 1: IUI0XObzqlXmJSe9907ojhvvGKY.roa (hash: lh17xK7xmqGsZK8e6QUcQhpWBvUMvRGKUOxPhaUyu88=)
2: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: seqNFrj4+v/qD7KKnL2IYGqD54PBIp0tegG7rkgadFc=)
3: yxM7J-fncjH39qOsj_6YqBGJVWU.roa (hash: AjHV8rOTeMWNj3biUMbUNtv+kWtvN/aGZ8u6KDIN/SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:d2:74:aa:fd:2b:2e:15:41:a9:4e:6d:f8:eb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Apr 17 07:01:41 2026 GMT
Not After : Apr 18 07:01:41 2026 GMT
Subject: CN=17ce9565f4bec2173264dffc76311e5109a4e991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:6c:db:5f:ef:c1:04:03:ca:a0:b1:58:fd:
11:8c:b8:f2:f7:93:14:3f:ba:2a:cb:14:0a:85:9b:
83:c7:e6:06:2f:ba:76:cb:0b:93:57:1f:e1:ab:59:
5e:56:19:8b:e6:65:09:6c:07:06:71:84:0c:54:41:
f8:3c:8d:a6:31:e1:7d:55:22:51:19:c8:26:ce:cd:
d1:54:58:9a:6c:7a:1f:f0:78:fd:a7:3b:92:cc:7f:
04:ea:b9:5b:25:52:bf:64:50:fc:ba:d9:d5:98:ae:
25:06:41:04:65:3a:de:93:b2:28:76:0c:80:e4:c9:
f8:74:6a:c5:70:7c:47:bb:fd:90:85:8a:8e:a0:d2:
24:0a:76:aa:27:93:91:e7:6f:8c:7e:6c:e9:72:9a:
53:95:32:00:19:5a:d2:24:3a:6d:21:49:47:cb:9d:
6c:d4:5d:ae:e3:a5:3d:49:9f:ac:5d:f6:35:fe:ba:
60:8c:c8:6b:e0:5c:13:fd:ca:da:97:ff:c5:42:93:
b0:96:da:36:b4:f8:0a:2e:86:8d:3c:7b:73:08:fa:
b2:00:4d:28:a4:2d:75:5b:cc:51:e6:76:2b:00:8e:
16:bb:30:7a:4c:a8:65:42:d9:cf:b1:78:8e:59:91:
53:6f:d3:1f:63:b2:05:1d:b2:47:8f:c9:fb:b5:72:
8f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CE:95:65:F4:BE:C2:17:32:64:DF:FC:76:31:1E:51:09:A4:E9:91
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:77:b1:75:1b:75:19:e4:a9:00:fe:c8:2f:4a:1c:06:07:66:
59:4b:b0:ec:19:88:af:c9:b9:24:6d:2a:c6:af:f5:cd:0b:d9:
33:5e:35:a6:50:b7:69:ee:6e:7f:9a:cb:77:ed:69:ac:fa:aa:
46:64:25:a7:d1:0f:a3:3f:7c:e2:91:89:e5:42:1c:4f:c8:ce:
1e:89:25:b9:dc:c4:5c:64:27:13:9e:2f:d8:40:d1:8a:90:a0:
2d:de:70:4b:99:b3:4b:1d:60:0a:f0:75:84:50:08:95:25:61:
b0:c1:56:a9:f5:78:88:21:5b:91:5b:9f:24:0e:d8:64:d2:38:
6c:d7:41:10:7a:b0:91:ce:d2:7e:9f:a2:cb:e7:70:d6:f8:77:
c6:4f:ff:05:bb:77:4f:0f:2d:f2:31:25:71:b0:8a:64:61:b9:
3d:68:9b:a1:19:15:6a:aa:bf:9c:a4:92:b2:78:f6:d4:69:05:
9c:90:02:98:53:d0:46:94:7a:63:f5:f9:6d:e2:13:88:2d:cc:
9a:46:6d:1c:69:28:ea:c9:2a:0e:52:5a:fb:7f:27:74:0e:1c:
c4:9c:c0:af:d6:03:12:a8:96:a5:5b:e3:3a:58:fb:19:2a:2e:
a1:88:3a:06:a5:54:ee:75:d4:f3:c3:a5:aa:10:fa:58:92:a5:
f5:6c:0c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:01:15 2026 by rpki-client