Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File: gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier: 40k4N1TDn4XcNhX3GCbHKRu+OBItyvAmYCWRuVciqWg=
Subject key identifier: AC:58:93:D3:36:33:06:FA:58:16:20:61:39:B1:23:7F:2D:9C:CD:67
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer: /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial: 01A133D9FA909A6C0879B9E000D8B189D512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number: 1AA1
Signing time: Tue 13 Oct 2026 06:01:25 +0000
Manifest this update: Tue 13 Oct 2026 06:01:25 +0000
Manifest next update: Wed 14 Oct 2026 06:01:25 +0000
Files and hashes: 1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: Zzlbo4pBt2VFljnWozxzkHzgzkokX309nxPqM31fPxg=)
2: zXFwqAAnYrIjiWd8TXgaxxMmw0s.roa (hash: Ovzx2APxYoxGQIUTR5wFv0olnXJaY9uRnLcnYqntG64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:d9:fa:90:9a:6c:08:79:b9:e0:00:d8:b1:89:d5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Validity
Not Before: Oct 13 06:01:25 2026 GMT
Not After : Oct 14 06:01:25 2026 GMT
Subject: CN=ac5893d3363306fa5816206139b1237f2d9ccd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:fe:16:a8:3b:cd:52:1a:bd:d5:13:f0:4e:
46:7f:b1:c6:02:64:15:23:aa:15:ea:0b:5d:39:a3:
31:79:e8:23:0d:86:8a:b7:3d:8f:3d:8c:9c:34:de:
cb:ee:6e:ce:6f:eb:2b:b8:2f:f1:a1:4e:98:bb:87:
53:69:26:11:a2:bb:2d:1c:55:9d:d4:30:2f:24:86:
c8:6a:3b:7a:b4:09:74:ef:a3:b3:7b:13:0a:cc:42:
4a:ed:63:84:29:2d:44:b4:7b:45:74:0c:0b:5d:2f:
f3:6d:83:e2:a4:e1:0e:6f:7c:b5:6d:73:26:ea:b9:
32:e0:b4:65:ae:0e:12:ee:94:c9:0d:1a:b1:4f:cc:
9a:01:77:80:b6:7e:38:ff:0f:f3:ea:34:38:f6:51:
c1:49:00:70:8c:1c:ab:e5:36:66:8c:a3:7b:23:50:
87:1b:15:56:be:51:40:12:3c:bd:84:03:19:7c:55:
9f:58:b8:eb:68:74:f6:ca:d9:06:c5:4f:04:4b:1f:
24:fe:6a:18:86:8d:71:c7:72:9a:c6:bd:cb:f9:6a:
ac:80:ce:f2:da:44:e1:6a:54:08:e2:84:91:66:0b:
b3:19:4a:e2:a1:c1:1a:92:7c:80:ad:93:c9:a4:a8:
51:97:7d:81:b6:30:fa:d3:47:00:fb:b5:1e:19:fd:
a1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:58:93:D3:36:33:06:FA:58:16:20:61:39:B1:23:7F:2D:9C:CD:67
X509v3 Authority Key Identifier:
keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:03:5e:9a:b2:82:62:c9:3e:69:8d:d2:db:c8:d6:01:ba:5c:
98:7b:e6:26:a8:d9:a8:f1:e5:07:9d:ec:fe:a6:a6:47:71:bf:
bb:c9:74:4a:60:68:45:09:f6:7c:9b:a1:76:21:cb:68:7e:47:
84:6d:b2:45:b1:a4:59:b3:a4:97:8d:8c:6c:a1:80:d8:92:2c:
7f:a3:b7:17:9a:c8:ee:f4:8c:c2:2a:23:54:83:05:69:ca:92:
e0:b7:0e:2d:9a:9c:77:7e:c3:1a:d9:b9:3e:9c:21:b4:a0:bb:
71:49:2f:8e:05:d6:63:f6:39:b4:7b:0d:70:f9:e0:3c:4f:9e:
a7:61:17:2a:aa:6d:a5:1f:b9:85:8f:6a:3f:a5:7a:13:63:9c:
16:da:06:e1:33:29:f2:8a:53:68:80:d5:78:a8:fb:1c:ef:75:
1c:d8:ba:29:dc:b2:d9:59:36:fb:ab:ee:8d:eb:6c:1b:e6:b7:
61:f6:cc:01:24:af:28:88:92:d0:9e:b9:ad:47:d5:88:8e:99:
c8:b1:b5:21:2d:7e:52:75:c3:4c:d5:80:59:45:5a:f3:ab:2f:
08:62:53:26:3b:c4:cf:63:4c:06:e4:50:47:fd:f8:14:60:a2:
39:8a:d3:2a:53:dc:7d:3c:af:96:f9:26:55:11:92:93:3e:d5:
10:39:31:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:03:27 2026 by rpki-client