Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
File: gyVb16Los8d3SMPFajBDu8ESbEE.mft (raw, json)
Hash identifier: 3hCZHoRCrhHoz26rBdtQTmz5dwTqyJ74YBEbDr7+nS0=
Subject key identifier: DA:FD:31:4F:09:FE:A4:BC:63:5F:7B:08:B1:EE:4D:C2:BA:92:44:20
Authority key identifier: 83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
Certificate issuer: /CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Certificate serial: 01A0C557BA4959A568E57FA3141B56A150BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
Manifest number: 0797
Signing time: Mon 21 Sep 2026 19:00:55 +0000
Manifest this update: Mon 21 Sep 2026 19:00:55 +0000
Manifest next update: Tue 22 Sep 2026 19:00:55 +0000
Files and hashes: 1: gyVb16Los8d3SMPFajBDu8ESbEE.crl (hash: 7TcEcvsWGy1Sbq63eRu+KL9azo2owj97hTbVcLGSVnA=)
2: ip_fTXtrV6Sb-Uz_23d2v2IhtQo.roa (hash: JShw05Zaz3LphiciGtK8MssYWo5XoUpv7n2tqAbN/Ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:ba:49:59:a5:68:e5:7f:a3:14:1b:56:a1:50:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Validity
Not Before: Sep 21 19:00:55 2026 GMT
Not After : Sep 22 19:00:55 2026 GMT
Subject: CN=dafd314f09fea4bc635f7b08b1ee4dc2ba924420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e6:24:1c:28:85:7c:ec:22:e0:e2:c9:99:f4:
db:4c:2f:b0:e8:a6:ee:98:af:26:35:7d:5d:40:78:
23:e9:b1:4b:0c:f9:da:d0:c4:cd:3d:25:54:eb:9d:
c6:fb:03:d6:71:06:c3:21:b2:c8:29:76:8f:35:83:
00:05:2c:7a:00:3a:65:09:52:7d:ee:9f:3b:bb:ad:
28:47:e4:56:16:b0:2a:2c:34:6c:7d:bc:f8:91:37:
0d:1a:cd:88:9e:31:a1:06:0f:16:ef:78:29:f5:a2:
76:a2:cd:93:7d:03:ad:ec:cb:9a:49:07:f8:2b:f9:
e4:97:3f:21:df:9a:c3:98:bb:b4:01:de:cd:19:66:
59:89:ce:af:2d:c1:0c:09:53:1a:37:55:16:7b:f5:
7f:44:4a:d0:f7:4c:e1:d9:5c:e0:75:98:54:4c:0b:
f9:67:c6:09:65:75:18:5c:1e:62:59:44:11:86:4e:
cd:c2:22:f0:e2:9b:a8:20:a0:9a:a5:6c:5c:ab:f8:
74:42:66:6a:18:a0:c7:f3:69:b3:10:cf:4b:5d:d2:
af:95:bf:6d:0f:6d:b9:9d:85:0a:44:1d:c0:75:1d:
79:9f:7d:79:91:2e:af:43:74:0c:61:1d:c0:a9:cc:
ab:48:97:16:dc:fe:ce:60:4c:30:73:a3:c4:18:e4:
3a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FD:31:4F:09:FE:A4:BC:63:5F:7B:08:B1:EE:4D:C2:BA:92:44:20
X509v3 Authority Key Identifier:
keyid:83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7e:19:cf:4b:f1:f8:71:92:4c:a4:7c:98:03:b4:4c:bf:05:
54:76:79:d7:a6:39:9c:a5:fc:90:14:0f:dd:2e:47:a6:0b:e7:
55:dd:d0:ea:46:1f:fa:a2:70:2c:8a:8d:84:70:64:e1:00:28:
66:fe:c0:bf:0a:6e:e3:aa:68:b6:05:89:25:b0:5c:cd:4e:ad:
35:4a:b0:ea:a1:ba:d5:ad:ee:c7:ee:f2:14:21:dc:ea:2b:49:
78:24:a1:4a:d6:01:a0:e4:80:97:17:40:1e:ad:60:cb:27:73:
89:f1:74:22:0c:02:62:81:0e:3f:4b:20:cd:12:1f:3a:07:3a:
de:29:ca:79:2a:74:68:3f:2b:2d:b9:87:da:32:e0:2b:90:65:
ae:77:ef:09:29:a4:00:6e:f3:42:70:76:c0:bc:5b:82:61:64:
aa:af:26:db:21:bc:71:37:62:f6:28:21:83:76:37:bf:78:62:
f0:d4:af:56:36:f3:33:ce:f7:7a:1f:67:01:0c:e6:44:30:5f:
1f:ab:c7:36:51:f7:2a:d6:35:4c:7d:f6:20:d4:31:8e:89:25:
1c:51:13:c0:10:a3:bc:66:b7:0f:25:7a:9d:8e:84:46:26:d5:
1d:37:5c:7c:a2:ee:ef:01:fc:94:25:dc:34:86:b6:94:64:64:
b3:a1:d7:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFV7pJWaVo5X+jFBtWoVC8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMjU1YmQ3YTJlOGIzYzc3NzQ4YzNjNTZhMzA0M2JiYzEx
MjZjNDEwHhcNMjYwOTIxMTkwMDU1WhcNMjYwOTIyMTkwMDU1WjAzMTEwLwYDVQQD
EyhkYWZkMzE0ZjA5ZmVhNGJjNjM1ZjdiMDhiMWVlNGRjMmJhOTI0NDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OYkHCiFfOwi4OLJmfTbTC+w6Kbu
mK8mNX1dQHgj6bFLDPna0MTNPSVU653G+wPWcQbDIbLIKXaPNYMABSx6ADplCVJ9
7p87u60oR+RWFrAqLDRsfbz4kTcNGs2InjGhBg8W73gp9aJ2os2TfQOt7MuaSQf4
K/nklz8h35rDmLu0Ad7NGWZZic6vLcEMCVMaN1UWe/V/RErQ90zh2VzgdZhUTAv5
Z8YJZXUYXB5iWUQRhk7NwiLw4puoIKCapWxcq/h0QmZqGKDH82mzEM9LXdKvlb9t
D225nYUKRB3AdR15n315kS6vQ3QMYR3AqcyrSJcW3P7OYEwwc6PEGOQ6+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr9MU8J/qS8Y197CLHuTcK6kkQgMB8GA1UdIwQY
MBaAFIMlW9ei6LPHd0jDxWowQ7vBEmxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3lWYjE2TG9zOGQzU01QRmFqQkR1OEVTYkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82OGQ3MjQtZDYyZS00Njg5LTk5OGEt
ZTE0Mzg4ZTYxNDVkLzEvZ3lWYjE2TG9zOGQzU01QRmFqQkR1OEVTYkVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82OGQ3MjQtZDYyZS00Njg5LTk5OGEtZTE0Mzg4ZTYxNDVk
LzEvZ3lWYjE2TG9zOGQzU01QRmFqQkR1OEVTYkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKX4Zz0vx
+HGSTKR8mAO0TL8FVHZ516Y5nKX8kBQP3S5HpgvnVd3Q6kYf+qJwLIqNhHBk4QAo
Zv7Avwpu46potgWJJbBczU6tNUqw6qG61a3ux+7yFCHc6itJeCShStYBoOSAlxdA
Hq1gyydzifF0IgwCYoEOP0sgzRIfOgc63inKeSp0aD8rLbmH2jLgK5BlrnfvCSmk
AG7zQnB2wLxbgmFkqq8m2yG8cTdi9ighg3Y3v3hi8NSvVjbzM873eh9nAQzmRDBf
H6vHNlH3KtY1TH32INQxjoklHFETwBCjvGa3DyV6nY6ERibVHTdcfKLu7wH8lCXc
NIa2lGRks6HXAQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:59:14 2026 by rpki-client