Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier: qxeeZnF/1mZZYBaOnxBZmzK/9rJrePKIF/GRqaPdM6w=
Subject key identifier: 65:83:2D:2A:E3:6D:36:FB:93:48:2F:DE:50:55:08:1E:1D:95:01:3F
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 019FAB633A925C294BAA8142D1675BD51C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number: 1A67
Signing time: Wed 29 Jul 2026 01:00:34 +0000
Manifest this update: Wed 29 Jul 2026 01:00:34 +0000
Manifest next update: Thu 30 Jul 2026 01:00:34 +0000
Files and hashes: 1: IUI0XObzqlXmJSe9907ojhvvGKY.roa (hash: lh17xK7xmqGsZK8e6QUcQhpWBvUMvRGKUOxPhaUyu88=)
2: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: TGphwBqJf6Y6VxKCocusFGRjYbfSo3BsUn0GutKXB9A=)
3: yxM7J-fncjH39qOsj_6YqBGJVWU.roa (hash: AjHV8rOTeMWNj3biUMbUNtv+kWtvN/aGZ8u6KDIN/SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:3a:92:5c:29:4b:aa:81:42:d1:67:5b:d5:1c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jul 29 01:00:34 2026 GMT
Not After : Jul 30 01:00:34 2026 GMT
Subject: CN=65832d2ae36d36fb93482fde5055081e1d95013f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:01:36:5e:69:fa:4f:2b:86:67:9c:d3:38:85:
1e:d3:fe:9b:37:50:b1:27:87:16:d2:f4:69:5f:46:
14:a2:f0:33:40:cc:a6:a4:af:ad:07:3c:ca:49:8a:
02:13:d9:f2:3c:f9:11:1f:66:d0:af:63:b7:d0:c0:
10:d3:28:d9:1f:1d:55:5c:06:2b:7f:74:8c:dd:19:
bd:35:c6:e1:28:89:37:f8:60:f4:af:4a:46:3b:c7:
88:64:c5:72:9c:f4:9a:9b:04:5f:b8:a9:e0:8e:16:
ac:8a:8c:7d:db:22:0c:e7:0b:43:6a:b0:81:b1:a1:
6f:c9:a7:c3:db:a6:68:93:8e:f2:8d:c6:7b:0d:d5:
cb:31:5a:e8:ce:4b:50:15:e2:d5:d5:44:e9:36:68:
42:6e:df:15:e5:1e:2f:5e:a7:45:06:48:04:1c:c8:
35:7a:62:21:1e:5d:5c:3b:fc:3d:23:5a:cf:5f:49:
af:46:b0:f6:2c:01:ef:9b:64:f9:0f:2b:ce:d3:a4:
ac:9c:fd:15:c8:93:5f:29:8b:25:26:02:74:6c:a1:
ed:af:4b:55:07:95:68:64:b5:fb:01:07:3f:bd:88:
78:50:dd:fe:7d:65:f4:90:73:00:01:53:8a:10:85:
39:62:2d:b5:48:be:ae:4f:a8:0a:94:f8:05:fc:d9:
5d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:83:2D:2A:E3:6D:36:FB:93:48:2F:DE:50:55:08:1E:1D:95:01:3F
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c5:50:3e:df:a2:e5:55:3d:3f:89:cc:63:7c:09:95:d9:98:
94:72:e8:32:98:fc:62:72:9f:02:a1:f1:f3:97:46:23:98:54:
2d:e2:57:27:4b:5a:ca:27:8f:2a:ab:67:f9:ba:1c:17:4f:70:
f4:82:f6:c9:64:07:a5:60:d3:df:a1:d9:c8:e8:49:9a:48:cf:
29:c8:4a:77:4b:69:3e:fc:88:21:c3:f6:2e:b8:86:5a:c6:ab:
24:cd:73:9d:58:04:45:0a:d0:d9:0e:bf:c0:c6:f3:4a:79:99:
d4:8b:ae:21:3f:cb:81:15:6e:e4:7f:aa:b4:b2:5e:b2:f5:cc:
9b:8f:bf:58:ee:e9:26:cb:3a:e6:dd:6b:87:5b:25:18:36:fc:
84:20:01:f2:31:aa:e0:b2:1a:6f:42:f3:50:27:16:16:f0:4e:
88:69:7b:ec:57:89:55:23:1c:c3:62:a4:a5:e4:40:9d:24:cf:
a4:9a:eb:49:6f:e2:f7:50:35:6f:2f:7c:98:f5:2b:56:3d:96:
06:99:62:87:f4:55:f5:23:1a:b7:14:fc:61:5e:e0:b0:38:b6:
b7:1c:3f:4c:0d:29:db:f9:75:59:05:fa:ba:7e:34:8d:c6:b9:
72:a6:46:0e:60:85:78:17:03:e9:ef:17:18:ea:79:ea:01:e8:
4e:db:54:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:01:31 2026 by rpki-client