Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
File: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft (raw, json)
Hash identifier: jpJ4bPLJTSweIVREHyfZVDAQgGM5KiXU7jzpNgBKcf0=
Subject key identifier: B6:22:5B:35:86:02:A6:EC:0E:9B:4F:92:65:1A:DB:F1:66:CA:40:69
Authority key identifier: 83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
Certificate issuer: /CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Certificate serial: 019CACB53F0F2A6E250F60E31FF539B45160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 04:01:25 +0000
Manifest this update: Mon 02 Mar 2026 04:01:25 +0000
Manifest next update: Tue 03 Mar 2026 04:01:25 +0000
Files and hashes: 1: GFlr8uF2r8cVqmDJ2JXiNxwY91k.roa (hash: gwpmNBpGA7FAOM9cF2rmHJiCr7Axf/GeGVR5kW5sxyc=)
2: eR1kJt3AkvnRh9nnXa_66NaaHYY.roa (hash: vhKP6Uu//ijg9IWe7RT8txZCBV20sw0GmYZPsJN+rXk=)
3: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl (hash: jFM505x1eQ2P/TJrrKBtkylN4oe251pDvahBFjWIKFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:3f:0f:2a:6e:25:0f:60:e3:1f:f5:39:b4:51:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Validity
Not Before: Mar 2 04:01:25 2026 GMT
Not After : Mar 3 04:01:25 2026 GMT
Subject: CN=b6225b358602a6ec0e9b4f92651adbf166ca4069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:1e:30:ad:ee:30:65:38:a8:1b:ef:c7:f6:
7d:e1:43:e9:95:6e:e5:f9:1b:99:c6:41:90:78:54:
d5:ce:5e:ae:8d:e1:7c:99:d5:81:15:cc:ad:c8:e7:
ed:37:09:b5:d9:dd:1f:70:b5:80:5b:46:7f:85:18:
4d:74:88:13:3c:67:4b:5a:d7:c7:bb:1b:a5:f9:e8:
04:19:8d:55:66:63:17:bf:7e:7d:9b:91:53:81:98:
8c:41:e4:e3:38:06:62:d5:c8:f7:02:0e:41:b2:1d:
62:00:0f:d6:27:dd:85:8f:13:a5:54:19:03:8c:e3:
90:d9:8b:42:ac:75:c2:97:2e:24:e5:0d:51:bb:b3:
cb:a9:b0:af:a5:f1:91:ca:7c:ac:aa:95:ec:02:f8:
64:6f:42:13:06:49:1d:3c:38:6e:04:c2:4e:ce:d6:
ed:c5:d9:08:f8:c0:18:5a:36:aa:bc:cc:64:df:6f:
67:c2:a6:02:13:78:78:e2:61:aa:d5:ab:ed:18:c7:
19:a0:a5:1c:a1:49:d5:3a:84:d5:9a:6d:2d:5e:d1:
a1:40:6e:43:58:d4:a7:2d:2d:90:29:b1:2a:e1:32:
6a:0c:e2:b1:b4:49:f8:d4:57:a5:bb:71:5d:31:74:
be:a1:4c:f3:34:b2:07:42:b6:0e:29:e9:78:c8:7d:
19:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:22:5B:35:86:02:A6:EC:0E:9B:4F:92:65:1A:DB:F1:66:CA:40:69
X509v3 Authority Key Identifier:
keyid:83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e2:7a:67:18:72:8b:76:fb:3f:5b:37:84:6d:22:a0:ae:cc:
c6:f8:37:27:44:15:9c:e6:e6:d3:67:a8:27:08:d9:66:fb:52:
da:97:18:47:b1:ed:00:d7:27:77:99:85:20:f6:35:08:6c:77:
ac:7f:26:f5:d7:6c:75:80:a9:60:20:54:d9:c3:2b:70:49:fe:
91:7b:82:7b:e9:86:06:5f:3f:19:a1:40:ca:83:13:a2:80:14:
3f:3f:c0:25:d5:25:3a:78:a4:ee:70:a3:77:dc:f6:4b:ef:9c:
08:12:ba:91:89:a3:3c:1e:bb:a1:53:4b:14:b7:6f:06:0b:0a:
1b:36:46:0c:88:e2:92:1e:fe:54:85:fe:a3:55:0d:9c:34:ad:
a1:1b:f0:59:67:5d:97:f7:9d:8d:64:f9:0b:bf:64:ef:14:71:
92:b2:71:2b:35:3d:c8:ee:3a:62:59:7a:03:5b:93:0e:48:c5:
70:0b:ae:d8:25:5d:83:6c:6f:53:43:2f:0b:69:5e:2f:a4:09:
47:f6:b0:49:10:52:97:b7:c1:dd:77:c2:31:e9:a2:58:bc:3a:
ff:fb:f7:14:53:43:1d:3e:ae:8c:95:78:63:66:5e:bb:29:d4:
6a:08:cf:3c:a7:38:e1:a9:ef:9d:46:2d:f3:c9:c4:f0:b8:ab:
9e:db:ce:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:48 2026 by rpki-client