
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier: 0rHRsmmF/pRUMwPfrH9zW+G3RueOKkRI4QVvg4eT158=
Subject key identifier: F1:08:63:E8:BC:AE:57:10:66:50:25:18:7D:22:98:10:F8:58:82:D1
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01A0CEFF6D1AF985CC3245D5ADD312DA407A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number: 1AFE
Signing time: Wed 23 Sep 2026 16:00:41 +0000
Manifest this update: Wed 23 Sep 2026 16:00:41 +0000
Manifest next update: Thu 24 Sep 2026 16:00:41 +0000
Files and hashes: 1: IUI0XObzqlXmJSe9907ojhvvGKY.roa (hash: lh17xK7xmqGsZK8e6QUcQhpWBvUMvRGKUOxPhaUyu88=)
2: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: i/1eYSj/DSjKmTW4eTjkFTrwa+M91vd9u+YGLqm2AbA=)
3: yxM7J-fncjH39qOsj_6YqBGJVWU.roa (hash: AjHV8rOTeMWNj3biUMbUNtv+kWtvN/aGZ8u6KDIN/SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:6d:1a:f9:85:cc:32:45:d5:ad:d3:12:da:40:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Sep 23 16:00:41 2026 GMT
Not After : Sep 24 16:00:41 2026 GMT
Subject: CN=f10863e8bcae5710665025187d229810f85882d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:37:4f:d0:03:db:fd:d0:dd:27:b1:78:c6:31:
9d:2a:dc:bd:a9:a5:51:ba:cc:cc:a8:4e:c5:40:fc:
6c:cd:f9:c6:03:d3:9b:e3:2b:a9:7f:1b:1b:48:8d:
03:6b:3e:05:b4:2e:72:8b:18:ee:9f:a3:a5:0c:1d:
17:f5:ab:fa:f7:2e:88:4f:fd:5d:b3:b5:48:bf:47:
9a:e5:d4:3c:94:6b:11:42:51:26:7d:99:a8:62:a0:
e6:ed:a6:55:1d:34:2d:f3:a9:ef:7e:da:8b:0b:69:
df:d5:e6:c8:bb:ea:19:43:b0:89:2c:7f:2e:a3:c6:
77:7f:12:f5:f0:5a:69:34:bb:94:19:5a:16:f4:37:
11:7d:1c:d9:5d:64:55:c1:0f:29:d6:8a:0d:08:ce:
db:e0:07:2e:26:e7:6e:d6:9a:df:33:44:6d:af:57:
8f:b9:33:1a:63:5e:65:2f:d0:86:cc:19:45:64:bb:
b7:27:3c:91:e1:01:56:a7:df:be:9e:f6:9b:08:5f:
4b:f0:94:76:3d:f1:37:7e:c0:9b:87:59:3b:6f:74:
21:7f:8e:22:38:9c:29:fe:d7:e5:7b:b5:a7:67:34:
06:8a:3a:ab:75:39:9d:80:a0:d1:e7:90:ce:54:9e:
cb:55:8e:d4:6f:0c:76:b1:d7:6d:3b:d3:79:e2:fd:
5b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:08:63:E8:BC:AE:57:10:66:50:25:18:7D:22:98:10:F8:58:82:D1
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8d:bd:6b:59:7f:3e:c3:78:88:4c:42:5e:8c:db:64:54:ca:
f1:ed:98:48:a5:a1:c2:29:c1:5b:fc:19:f2:8c:f9:36:56:61:
ef:78:e2:b8:cf:23:c2:24:68:07:55:d6:00:21:90:80:db:bd:
8e:7a:c6:07:ce:ac:44:5e:ed:ad:69:d5:b4:6e:b3:22:7f:d5:
0b:5c:14:9f:1f:e4:ed:2c:6a:f8:8d:13:49:b1:7e:02:76:42:
42:c1:ec:8c:9a:b0:17:94:90:65:e5:c6:3e:15:18:db:78:12:
f4:37:c3:04:ac:c7:b8:f6:25:2a:e4:3f:8e:f8:79:c3:c2:1e:
a6:c0:9f:6b:32:0a:68:06:17:d6:3a:89:25:f2:3d:3c:8b:9a:
63:c4:39:ff:ad:10:6f:b2:96:dd:55:ad:5b:a5:b6:43:22:cf:
f5:f9:0a:40:17:1c:db:80:b8:79:7c:2b:24:d5:7d:f4:8e:25:
8e:ef:f5:66:aa:eb:78:86:41:4d:08:f0:0f:f4:5c:58:3b:fb:
15:8a:3c:42:f2:22:56:03:ff:34:5a:b8:3c:99:e0:d0:c7:35:
53:b4:38:f9:9c:4b:89:b6:bd:49:b1:d3:66:6e:1c:61:fd:ef:
0d:5e:1b:49:88:07:60:2e:e3:29:e2:38:5d:44:8a:48:a5:84:
c5:b0:73:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:11:11 2026 by rpki-client