Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File: gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier: m8xnTeHl4nUZ4/bxjDrrNNFvNrrqbdjLUBFaYYJpRpc=
Subject key identifier: 94:2A:EE:F7:7E:44:81:B7:C6:85:93:47:5A:67:A2:85:FA:C7:08:22
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer: /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial: 019FABD14E7BC6E39B8DED7AFE5A459F8EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 03:00:48 +0000
Manifest this update: Wed 29 Jul 2026 03:00:48 +0000
Manifest next update: Thu 30 Jul 2026 03:00:48 +0000
Files and hashes: 1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: ZczUjn3KeeMHlQ6HILbbaH45LLPf+HG2nZBHxs9RpIs=)
2: zXFwqAAnYrIjiWd8TXgaxxMmw0s.roa (hash: Ovzx2APxYoxGQIUTR5wFv0olnXJaY9uRnLcnYqntG64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:4e:7b:c6:e3:9b:8d:ed:7a:fe:5a:45:9f:8e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Validity
Not Before: Jul 29 03:00:48 2026 GMT
Not After : Jul 30 03:00:48 2026 GMT
Subject: CN=942aeef77e4481b7c68593475a67a285fac70822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:09:66:90:4d:dc:0f:65:82:a4:9e:d7:5c:cf:
e5:02:cb:b2:82:86:15:b1:38:66:c3:b0:27:b4:13:
18:91:ff:78:60:47:1f:c5:fa:01:fc:a9:09:17:73:
ce:2e:e4:b1:f1:b9:ae:2a:a0:89:1c:b0:d4:83:33:
3d:d1:41:94:fa:ef:64:96:6a:b3:30:3f:f2:44:81:
bf:ba:da:65:af:35:f3:58:7a:ed:1b:5d:20:e9:5c:
67:63:aa:92:31:f8:9d:c5:38:46:4a:09:61:c1:f1:
30:5c:dc:0a:de:0e:98:8c:13:7d:4b:1b:1f:d8:bd:
11:47:62:46:05:7b:19:ae:64:d5:08:4d:28:1f:60:
b4:6c:8f:7a:23:a1:2b:bf:c8:3a:2d:fe:03:d2:1a:
a2:85:19:09:14:36:e1:d3:5b:b8:9c:b8:e4:76:9c:
0b:6f:04:d7:44:88:e5:2a:06:3e:b3:14:4c:29:20:
9e:8c:34:37:b0:ae:90:9b:3c:7a:b7:43:82:85:3b:
26:cf:10:e5:dc:dc:f0:14:00:80:df:8c:0c:59:ad:
17:5b:e6:69:8e:b1:75:9e:c8:57:d8:63:ff:0e:5e:
ae:40:de:6e:3f:0a:a5:b5:68:29:01:fd:f0:a5:3b:
b4:80:98:dc:3b:9c:96:40:06:de:57:2a:8d:7d:33:
00:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2A:EE:F7:7E:44:81:B7:C6:85:93:47:5A:67:A2:85:FA:C7:08:22
X509v3 Authority Key Identifier:
keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:64:4c:26:49:55:a3:bb:9e:41:bb:ce:14:42:b0:61:57:d3:
45:b9:cc:9d:74:71:ec:ca:7f:c9:eb:11:1f:70:d9:12:dc:17:
9a:35:4e:79:af:08:b6:2b:f0:44:7e:7c:69:7a:4e:9b:fd:b9:
c1:81:86:e6:50:31:6f:1e:ce:83:06:ab:93:30:13:24:6e:f7:
0f:ec:f6:dd:6e:be:87:d4:ec:d6:a5:14:54:4b:97:89:61:3c:
a5:64:33:25:46:80:6a:08:8c:d1:f9:bf:e1:b3:74:ff:0e:91:
95:16:80:e7:5a:9e:d8:5a:70:fa:a9:f3:d8:3d:cb:20:a1:39:
bb:91:b9:23:8a:ce:e2:82:6a:3d:f7:f6:b0:6e:f5:59:4d:5c:
df:43:b1:a4:70:ad:32:1c:ae:93:f7:b0:44:47:c6:f4:13:45:
cd:5a:62:11:a2:ba:08:2d:c3:6e:dd:3a:38:66:e3:e2:43:07:
cf:48:13:fe:a4:e7:e2:ec:5c:d7:7e:db:58:8b:e8:3f:44:98:
6b:16:a8:c8:c4:6b:65:df:33:cf:6b:69:a8:3c:3b:9c:47:e4:
d6:04:db:4a:d5:53:c8:05:8c:d6:66:f1:52:e9:2b:b8:8e:09:
cf:5a:be:cc:df:81:1e:5b:48:52:66:43:58:ea:ec:57:8e:80:
20:14:0c:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0U57xuObje16/lpFn460MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMjRjNWRmMTk3ODlkNTI1OTEwNGUwYWUwZGNkNDY3MmE4
ZTJiYWIwHhcNMjYwNzI5MDMwMDQ4WhcNMjYwNzMwMDMwMDQ4WjAzMTEwLwYDVQQD
Eyg5NDJhZWVmNzdlNDQ4MWI3YzY4NTkzNDc1YTY3YTI4NWZhYzcwODIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6glmkE3cD2WCpJ7XXM/lAsuygoYV
sThmw7AntBMYkf94YEcfxfoB/KkJF3POLuSx8bmuKqCJHLDUgzM90UGU+u9klmqz
MD/yRIG/utplrzXzWHrtG10g6VxnY6qSMfidxThGSglhwfEwXNwK3g6YjBN9Sxsf
2L0RR2JGBXsZrmTVCE0oH2C0bI96I6Erv8g6Lf4D0hqihRkJFDbh01u4nLjkdpwL
bwTXRIjlKgY+sxRMKSCejDQ3sK6Qmzx6t0OChTsmzxDl3NzwFACA34wMWa0XW+Zp
jrF1nshX2GP/Dl6uQN5uPwqltWgpAf3wpTu0gJjcO5yWQAbeVyqNfTMA1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQq7vd+RIG3xoWTR1pnooX6xwgiMB8GA1UdIwQY
MBaAFIMkxd8ZeJ1SWRBOCuDc1GcqjiurMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3lURjN4bDRuVkpaRUU0SzROelVaeXFPSzZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80YjJlNDktZjY2Ny00OTRhLWFmZTkt
NmRmM2U0YTRlZWIxLzEvZ3lURjN4bDRuVkpaRUU0SzROelVaeXFPSzZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy80YjJlNDktZjY2Ny00OTRhLWFmZTktNmRmM2U0YTRlZWIx
LzEvZ3lURjN4bDRuVkpaRUU0SzROelVaeXFPSzZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGRMJklV
o7ueQbvOFEKwYVfTRbnMnXRx7Mp/yesRH3DZEtwXmjVOea8ItivwRH58aXpOm/25
wYGG5lAxbx7OgwarkzATJG73D+z23W6+h9Ts1qUUVEuXiWE8pWQzJUaAagiM0fm/
4bN0/w6RlRaA51qe2Fpw+qnz2D3LIKE5u5G5I4rO4oJqPff2sG71WU1c30OxpHCt
Mhyuk/ewREfG9BNFzVpiEaK6CC3Dbt06OGbj4kMHz0gT/qTn4uxc137bWIvoP0SY
axaoyMRrZd8zz2tpqDw7nEfk1gTbStVTyAWM1mbxUukruI4Jz1q+zN+BHltIUmZD
WOrsV46AIBQMhQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:14:23 2026 by rpki-client