Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
File: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft (raw, json)
Hash identifier: 3qtdgU0jAGjKIjnCEFdzJxg8TxuonkqlAPVxxqC/tYc=
Subject key identifier: EA:A3:22:A3:17:C2:6A:D1:DA:D1:AB:2C:C4:6A:A5:7A:59:EA:01:50
Authority key identifier: 83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
Certificate issuer: /CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Certificate serial: 019FAB64073E32FFB6A722652DB0A0FBAD1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 01:01:27 +0000
Manifest this update: Wed 29 Jul 2026 01:01:27 +0000
Manifest next update: Thu 30 Jul 2026 01:01:27 +0000
Files and hashes: 1: GFlr8uF2r8cVqmDJ2JXiNxwY91k.roa (hash: gwpmNBpGA7FAOM9cF2rmHJiCr7Axf/GeGVR5kW5sxyc=)
2: eR1kJt3AkvnRh9nnXa_66NaaHYY.roa (hash: vhKP6Uu//ijg9IWe7RT8txZCBV20sw0GmYZPsJN+rXk=)
3: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl (hash: HVUTuK+c03EDSPTfTvVmpXimdULTxZUSef7gLHDp2lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:64:07:3e:32:ff:b6:a7:22:65:2d:b0:a0:fb:ad:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Validity
Not Before: Jul 29 01:01:27 2026 GMT
Not After : Jul 30 01:01:27 2026 GMT
Subject: CN=eaa322a317c26ad1dad1ab2cc46aa57a59ea0150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:19:a4:82:dc:90:9e:5e:d9:9f:7f:54:fc:1a:
d8:92:f3:9d:91:de:c5:97:65:2d:28:44:65:31:ef:
26:c3:c2:2b:ff:6b:50:15:9e:80:fa:22:21:df:26:
65:5b:a9:92:00:94:fc:e0:62:48:54:7a:54:87:e3:
5d:63:98:dc:a8:65:de:b4:df:8c:e9:7d:50:a8:75:
3c:eb:bf:38:7e:77:ad:d8:29:1c:8a:f6:85:8c:2e:
3a:b5:5b:79:ca:eb:5c:89:9a:86:4d:79:07:7d:58:
62:73:75:55:7d:e5:5f:ee:8e:e5:5e:2d:72:8b:5f:
1e:be:9a:2b:c2:78:da:ef:69:1e:cb:0f:92:fc:9a:
71:bb:f4:4e:d1:be:f1:73:6b:09:de:2b:79:8c:65:
98:5c:5a:28:18:be:f1:5c:c1:27:fc:64:85:1a:62:
e0:a9:9b:c1:8c:2a:db:44:66:55:19:41:ab:1d:62:
57:96:08:b0:3a:ad:35:6a:47:a4:4f:b1:bb:cb:4c:
f5:94:b9:bf:22:27:23:de:aa:83:44:03:13:50:9e:
69:b0:bb:ed:09:08:e5:d0:03:43:7e:fa:e5:b6:e9:
63:a0:67:18:3d:04:c3:72:35:9f:df:8b:2c:c2:8e:
4d:bd:7c:dd:e3:68:55:2e:a5:05:0a:d1:18:6e:cf:
c4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A3:22:A3:17:C2:6A:D1:DA:D1:AB:2C:C4:6A:A5:7A:59:EA:01:50
X509v3 Authority Key Identifier:
keyid:83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:75:7d:67:5a:d5:26:b7:4a:c5:10:db:63:55:17:dc:40:76:
e0:3f:88:0f:0d:9d:05:33:97:f1:ed:38:00:28:9d:c9:76:78:
1f:63:28:65:5a:e7:45:59:25:cd:03:c4:65:3b:46:97:6e:0e:
41:8a:91:fd:5e:d5:7b:9c:db:09:7e:3b:ac:8f:64:75:8e:5a:
21:d9:e0:8b:74:73:48:15:d1:f6:49:f2:c1:20:1f:96:d2:45:
ae:e2:8f:8d:46:a0:d9:04:12:10:83:16:cd:d9:ac:b5:41:28:
8c:72:08:f5:32:dd:1c:4f:e5:f1:45:79:b8:71:ca:9f:14:c6:
31:c1:8e:a3:fd:3c:1c:3f:4a:96:5e:70:34:1e:7e:c6:dc:a0:
b9:22:1d:89:b4:b0:10:a3:77:1d:38:d4:a8:11:66:be:45:71:
28:83:83:77:4c:97:ee:de:f0:46:9b:fc:4f:92:f9:25:aa:bd:
bb:7f:7d:69:95:99:d1:22:1c:37:6b:01:17:38:1d:1b:e5:8f:
6f:4c:1c:ad:07:72:5c:7f:e2:63:44:be:04:59:46:36:ec:85:
29:cf:6a:de:7c:e1:54:8f:c1:aa:cc:92:42:ea:73:0d:18:4e:
63:40:40:3a:cc:a0:79:65:ae:35:6b:5c:bd:9c:df:ff:0d:23:
13:f3:e2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:54:33 2026 by rpki-client