Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
File: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft (raw, json)
Hash identifier: 06Yq9r5EL29EyD3cNyLgy+aSRBpdjh0y3GSwRXD/dpo=
Subject key identifier: 68:B4:08:08:F9:A7:F4:BB:CE:38:6C:FD:13:45:85:DD:89:BD:FA:19
Authority key identifier: 83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
Certificate issuer: /CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Certificate serial: 019D9C2D5BF8F35ABF4E3B59DFA5F0448C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 16:01:51 +0000
Manifest this update: Fri 17 Apr 2026 16:01:51 +0000
Manifest next update: Sat 18 Apr 2026 16:01:51 +0000
Files and hashes: 1: GFlr8uF2r8cVqmDJ2JXiNxwY91k.roa (hash: gwpmNBpGA7FAOM9cF2rmHJiCr7Axf/GeGVR5kW5sxyc=)
2: eR1kJt3AkvnRh9nnXa_66NaaHYY.roa (hash: vhKP6Uu//ijg9IWe7RT8txZCBV20sw0GmYZPsJN+rXk=)
3: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl (hash: iEuZmJXgZtvrHtY6ubyxJ14nRBJEeODgoDcxMyaw1cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:5b:f8:f3:5a:bf:4e:3b:59:df:a5:f0:44:8c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Validity
Not Before: Apr 17 16:01:51 2026 GMT
Not After : Apr 18 16:01:51 2026 GMT
Subject: CN=68b40808f9a7f4bbce386cfd134585dd89bdfa19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:3c:40:55:4a:86:98:81:41:a8:5e:7a:05:
9d:a0:18:66:8f:23:08:0f:ff:b7:c1:55:14:ef:1f:
24:18:49:d8:86:8a:88:74:bf:8d:29:a0:bb:62:84:
90:6a:f8:71:09:ec:48:89:97:4a:fb:0e:f7:d1:51:
90:00:ef:2e:45:b0:4e:8a:d3:d7:49:cc:db:05:de:
2c:f3:98:0c:e3:03:5d:30:5f:57:5b:be:52:24:e4:
fb:77:a3:af:13:3a:ad:8d:53:dc:cc:09:70:1c:9a:
e8:a4:bd:39:e8:88:17:af:29:60:39:77:37:20:2d:
64:a6:4c:79:38:82:27:e4:af:4d:23:3c:90:cb:ed:
80:9f:ec:ff:26:7c:f9:2b:db:58:e7:0c:1e:a3:b1:
4a:07:e9:ac:99:3b:c4:13:97:9a:8c:22:4e:55:e9:
4a:5d:85:bc:fb:7d:44:48:d8:ef:2b:f7:d6:a3:c2:
59:7c:fe:b3:51:32:43:04:c2:37:6b:69:97:d9:e5:
23:71:4a:b2:4b:7e:9d:30:a1:45:a5:55:14:e2:33:
b3:0c:f7:10:6d:aa:9b:29:d3:91:a4:a0:a9:ac:6c:
dd:82:c2:6d:64:82:13:5f:e1:85:88:cd:22:1a:e5:
97:13:de:a7:e7:5a:c4:fb:c2:2d:e4:88:95:46:31:
50:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B4:08:08:F9:A7:F4:BB:CE:38:6C:FD:13:45:85:DD:89:BD:FA:19
X509v3 Authority Key Identifier:
keyid:83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c5:b2:42:7d:51:6c:14:7e:40:9e:8f:58:72:8f:d1:17:45:
5a:19:3c:1f:ef:a9:60:68:da:06:4c:e3:90:1c:41:31:74:7c:
97:d5:77:fb:ac:f6:b0:88:c7:90:ab:7f:57:16:d9:75:b2:3c:
82:64:cb:9e:08:42:a4:cd:8b:2f:a3:c9:d8:83:9d:4a:c2:4d:
36:ba:ae:8d:97:84:2d:8f:19:a0:db:6d:3f:73:c7:0f:c9:f5:
d1:fd:ee:b4:2b:d8:66:05:04:3f:2b:94:d1:ed:7c:a1:27:b0:
5a:4d:a8:9b:be:74:ca:4a:de:04:a9:5c:d7:8f:f2:d0:7a:f7:
de:ba:6e:84:1b:26:fe:c8:5a:79:80:37:34:3b:33:41:ba:ff:
f3:06:24:a3:64:82:c6:ed:c8:6e:bd:9e:5f:a0:5b:97:9f:5d:
63:44:f7:ad:46:af:4c:60:dd:2d:3f:42:f8:f4:c8:f0:6a:97:
2e:e4:6f:3f:37:ec:55:5b:2f:0d:aa:fe:be:bd:82:07:ce:c7:
4b:ca:e5:76:9d:39:54:7d:49:a7:aa:82:a5:ef:bb:d6:94:a6:
c1:27:54:d2:16:83:bf:cd:5a:e6:f3:21:9c:2b:95:f3:3d:fd:
71:11:3c:5b:dc:3a:34:1d:b6:5f:99:ef:70:4a:67:b5:90:17:
4b:92:84:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:37:18 2026 by rpki-client