Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
File: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft (raw, json)
Hash identifier: 16Th5IYIw6rwiNy0oNMAXSiYZstU4RrClzDC9v/M1Mg=
Subject key identifier: 03:B5:2A:1D:F8:12:BF:92:11:54:2A:0D:75:74:D5:6A:31:3E:09:5F
Authority key identifier: 83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
Certificate issuer: /CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Certificate serial: 01A12BB1E3FECB50CEEFA0E4A5E03E5E7C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
Manifest number: 1A9B
Signing time: Sun 11 Oct 2026 16:00:40 +0000
Manifest this update: Sun 11 Oct 2026 16:00:40 +0000
Manifest next update: Mon 12 Oct 2026 16:00:40 +0000
Files and hashes: 1: GFlr8uF2r8cVqmDJ2JXiNxwY91k.roa (hash: gwpmNBpGA7FAOM9cF2rmHJiCr7Axf/GeGVR5kW5sxyc=)
2: eR1kJt3AkvnRh9nnXa_66NaaHYY.roa (hash: vhKP6Uu//ijg9IWe7RT8txZCBV20sw0GmYZPsJN+rXk=)
3: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl (hash: jZF23H/Df/9g5wJ0LDCWOjAnCE+xfHaOwFV5o58Bx8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b1:e3:fe:cb:50:ce:ef:a0:e4:a5:e0:3e:5e:7c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Validity
Not Before: Oct 11 16:00:40 2026 GMT
Not After : Oct 12 16:00:40 2026 GMT
Subject: CN=03b52a1df812bf9211542a0d7574d56a313e095f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:82:14:0d:f7:08:ec:d3:2a:01:d4:d6:61:0f:
7a:c9:f3:1e:eb:89:a6:a5:75:a9:82:ce:de:ac:4b:
dd:91:14:d0:91:ad:25:4f:2a:6e:e2:9b:30:0b:67:
c1:a3:f2:13:4c:78:a0:4f:64:24:15:bf:bc:ab:cb:
48:a9:e3:69:25:6c:22:09:f9:15:2d:4e:a1:c7:ff:
f6:c3:20:e1:7f:e2:03:cf:85:03:76:16:6b:7e:d8:
16:4b:ab:3f:bf:fc:53:6f:3f:b0:68:02:22:09:2d:
8a:40:77:42:59:19:06:d8:d1:44:87:5d:87:5b:6b:
b6:06:65:1d:cc:d8:8b:fd:27:13:32:b0:89:ff:28:
26:5f:9a:51:b9:83:13:b2:ab:c9:ca:7c:c7:d9:67:
64:a6:ce:ab:82:c6:35:47:ac:f3:03:c7:89:da:15:
4c:08:41:8d:e9:65:df:db:89:02:4b:07:65:b2:78:
e4:21:fe:42:c6:cb:96:eb:15:aa:2e:27:65:3a:b8:
90:55:90:1b:3c:54:d3:35:9e:13:a3:72:40:0d:7f:
c0:dd:c8:59:0b:6a:db:4e:cd:7c:29:a2:8a:c9:df:
58:bc:30:cc:c3:ed:eb:c1:ee:0f:11:38:f9:80:af:
aa:51:a1:97:86:be:24:8c:c8:a9:04:03:15:66:3c:
6a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B5:2A:1D:F8:12:BF:92:11:54:2A:0D:75:74:D5:6A:31:3E:09:5F
X509v3 Authority Key Identifier:
keyid:83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:18:92:6d:9a:18:83:fc:ea:90:43:f9:90:5b:eb:6a:b7:0d:
59:f3:3f:04:a2:5e:a7:cd:56:79:95:1e:c5:ab:05:40:96:6c:
35:81:56:20:a5:30:fd:78:d5:75:a8:5b:8b:fe:7e:8b:f1:57:
9f:bf:2a:15:43:4d:49:d1:a9:d0:58:f8:44:35:f8:fc:ee:6b:
be:16:61:82:29:63:67:33:8b:2d:fc:60:09:71:a9:f2:0d:21:
e1:e3:9a:86:c5:40:b4:77:ec:3c:df:d6:a6:b0:69:72:3f:58:
e4:fd:c6:ca:d5:9b:f9:dd:a3:9a:94:1c:6f:0b:99:f0:37:96:
56:ef:8b:d1:75:07:92:1a:5d:d2:21:29:a2:0f:19:44:45:61:
97:b8:2f:d9:3e:a1:a4:56:c1:1f:de:a7:9b:96:93:3a:d8:8d:
38:a5:3c:0b:0d:c2:95:92:f0:a3:fc:c1:3a:f0:bc:09:ca:1e:
d9:8c:87:0e:dd:be:de:a4:92:99:08:72:0d:d9:d5:8f:95:7c:
b5:2a:23:89:ed:cf:ba:04:7c:4a:39:02:02:fc:73:41:6d:d1:
45:ea:1b:03:a2:0e:f1:05:e4:6c:b4:f7:38:2d:c1:07:d4:b2:
5b:8f:a7:d0:73:28:15:4f:c8:70:76:94:60:53:77:e6:e9:ca:
bf:37:38:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:23:38 2026 by rpki-client