Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
File: GyHb_7GS4UkZz-J4a69EhAw6yjw.mft (raw, json)
Hash identifier: 9scP2JqaZWOIyyY7IzuvdBWTtO9bhheEDJG947Ju7G8=
Subject key identifier: ED:55:17:BA:3A:E0:19:74:D0:58:98:6C:F1:45:EA:94:6E:E6:18:83
Authority key identifier: 1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
Certificate issuer: /CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Certificate serial: 01A143F1986982F8B53B70A1B9DB3AA38718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
Manifest number: 1AAB
Signing time: Fri 16 Oct 2026 09:01:08 +0000
Manifest this update: Fri 16 Oct 2026 09:01:08 +0000
Manifest next update: Sat 17 Oct 2026 09:01:08 +0000
Files and hashes: 1: GyHb_7GS4UkZz-J4a69EhAw6yjw.crl (hash: 12fFDQMcCXIyit099muvkMiIBJxOifSBVGkbTzNWuUQ=)
2: OjQ0zzKUV1mIuissX7R6oiwC7R4.roa (hash: RqtRopS3nAAsoOtWVCcZpZzIHlMNh6J6RVxWQzfONms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:f1:98:69:82:f8:b5:3b:70:a1:b9:db:3a:a3:87:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Validity
Not Before: Oct 16 09:01:08 2026 GMT
Not After : Oct 17 09:01:08 2026 GMT
Subject: CN=ed5517ba3ae01974d058986cf145ea946ee61883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:25:fb:cc:9c:ee:b6:f1:d3:16:59:27:bb:
08:60:51:d4:54:f0:65:b9:fa:1f:9f:62:ab:78:77:
dc:c6:70:3a:a1:bf:57:2c:76:99:fb:bf:e0:b4:53:
37:60:dd:aa:55:a2:a8:89:ed:b9:59:4f:16:de:d3:
0a:44:e3:1a:5e:f7:fe:64:9f:29:a4:3d:a9:2c:b1:
c3:11:fd:80:ca:ca:00:e6:a1:ba:bc:a8:c7:bc:62:
fe:5f:00:89:39:39:fc:c4:85:88:e0:53:75:0f:73:
da:0b:81:3b:ed:ea:87:56:73:cc:cc:26:cf:d7:fb:
cb:09:5b:49:0f:86:ec:bb:15:44:6a:ae:a8:7b:bc:
a7:a4:1a:4f:e0:11:31:42:0d:95:b4:01:63:f6:7e:
e6:fd:82:d5:80:90:c5:e7:44:18:ee:b6:3c:6a:0d:
3d:e0:64:12:16:dd:b3:9e:eb:7d:4d:e3:19:21:61:
f8:aa:32:88:39:6b:59:51:b3:52:1f:47:32:3e:5f:
cc:b9:36:43:f2:b2:0c:85:5f:a4:38:73:ad:b7:e7:
86:8a:6e:4e:6b:96:27:64:4f:8a:9d:fd:b5:a7:3d:
d7:a2:88:95:81:78:9a:c3:96:3f:50:21:57:3b:7d:
32:46:86:eb:01:24:7f:62:45:64:1e:a6:d8:49:b5:
38:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:55:17:BA:3A:E0:19:74:D0:58:98:6C:F1:45:EA:94:6E:E6:18:83
X509v3 Authority Key Identifier:
keyid:1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:99:85:08:2c:38:8d:8a:76:93:62:a7:3a:88:52:47:10:bf:
ff:e5:ff:74:c5:4a:a3:0f:a2:bd:65:4e:50:4b:41:f6:7c:8b:
b1:f6:c0:38:92:5c:03:c1:92:74:36:1b:5f:2a:50:d3:7d:43:
b8:85:2b:7a:7f:61:55:03:61:16:8a:9c:54:25:59:06:bc:0b:
6b:fa:e4:08:09:6c:63:a1:e3:a8:a9:18:1a:97:eb:3c:50:06:
a4:1e:9e:68:ef:7a:db:59:9b:0b:66:d8:10:24:91:f7:06:df:
9e:0c:4f:2a:ea:ce:76:af:ab:a2:5d:cb:45:53:44:33:40:13:
c4:aa:75:19:f4:27:79:c9:a1:7b:48:8a:f0:f3:52:55:fd:e2:
d7:cc:c5:d3:7d:03:55:8f:6a:fd:39:fe:71:60:a2:72:e7:5f:
40:69:7d:94:cf:1a:bf:bb:8b:e8:ed:42:98:14:95:e8:9a:04:
58:dc:27:11:f7:d3:96:d2:42:58:d8:cc:55:4c:7e:0e:32:02:
d3:07:d1:de:ea:e7:fa:0b:f4:17:f5:be:a7:4b:2f:db:e3:ed:
c4:8f:d7:e2:2d:d3:46:3c:a4:ed:36:c9:fa:dd:cf:3f:f3:cc:
f9:55:b1:00:b6:11:51:ed:14:f5:f5:56:e2:85:d7:0e:52:f7:
d9:9b:71:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFD8Zhpgvi1O3Chuds6o4cYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMjFkYmZmYjE5MmUxNDkxOWNmZTI3ODZiYWY0NDg0MGMz
YWNhM2MwHhcNMjYxMDE2MDkwMTA4WhcNMjYxMDE3MDkwMTA4WjAzMTEwLwYDVQQD
EyhlZDU1MTdiYTNhZTAxOTc0ZDA1ODk4NmNmMTQ1ZWE5NDZlZTYxODgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsogl+8yc7rbx0xZZJ7sIYFHUVPBl
ufofn2KreHfcxnA6ob9XLHaZ+7/gtFM3YN2qVaKoie25WU8W3tMKROMaXvf+ZJ8p
pD2pLLHDEf2AysoA5qG6vKjHvGL+XwCJOTn8xIWI4FN1D3PaC4E77eqHVnPMzCbP
1/vLCVtJD4bsuxVEaq6oe7ynpBpP4BExQg2VtAFj9n7m/YLVgJDF50QY7rY8ag09
4GQSFt2znut9TeMZIWH4qjKIOWtZUbNSH0cyPl/MuTZD8rIMhV+kOHOtt+eGim5O
a5YnZE+Knf21pz3XooiVgXiaw5Y/UCFXO30yRobrASR/YkVkHqbYSbU4yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1VF7o64Bl00FiYbPFF6pRu5hiDMB8GA1UdIwQY
MBaAFBsh2/+xkuFJGc/ieGuvRIQMOso8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3lIYl83R1M0VWtaei1KNGE2OUVoQXc2eWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8wNjYyMjEtMGVlYi00MmQ5LTljMDct
ZmM2OWUwYmNhNjIyLzEvR3lIYl83R1M0VWtaei1KNGE2OUVoQXc2eWp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8wNjYyMjEtMGVlYi00MmQ5LTljMDctZmM2OWUwYmNhNjIy
LzEvR3lIYl83R1M0VWtaei1KNGE2OUVoQXc2eWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZmFCCw4
jYp2k2KnOohSRxC//+X/dMVKow+ivWVOUEtB9nyLsfbAOJJcA8GSdDYbXypQ031D
uIUren9hVQNhFoqcVCVZBrwLa/rkCAlsY6HjqKkYGpfrPFAGpB6eaO9621mbC2bY
ECSR9wbfngxPKurOdq+rol3LRVNEM0ATxKp1GfQnecmhe0iK8PNSVf3i18zF030D
VY9q/Tn+cWCicudfQGl9lM8av7uL6O1CmBSV6JoEWNwnEffTltJCWNjMVUx+DjIC
0wfR3urn+gv0F/W+p0sv2+PtxI/X4i3TRjyk7TbJ+t3PP/PM+VWxALYRUe0U9fVW
4oXXDlL32ZtxfA==
-----END CERTIFICATE-----
Generated at Fri Oct 16 16:47:40 2026 by rpki-client