Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
File: gYFECjZ6NNMGvA9oWunNhpUvf5U.mft (raw, json)
Hash identifier: qPEfBx8whG46SqLhykapupkg0ThXjza1Q5m+gGKOb8w=
Subject key identifier: D7:59:95:F2:64:A4:EF:51:58:7D:8F:CE:A3:89:ED:05:88:FC:A1:F9
Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
Certificate issuer: /CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Certificate serial: 019FAAF543FCFF60CDFA7B496363D0A0BF5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
Manifest number: 0578
Signing time: Tue 28 Jul 2026 23:00:28 +0000
Manifest this update: Tue 28 Jul 2026 23:00:28 +0000
Manifest next update: Wed 29 Jul 2026 23:00:28 +0000
Files and hashes: 1: AEyZjBDd8JRa3C8Qu8Ed1pPfWTA.roa (hash: t/3GieMGxWoGjj/AjR+XfDv+Hv6o+nbcwMgeFZJBMF0=)
2: gYFECjZ6NNMGvA9oWunNhpUvf5U.crl (hash: B7Nj78kVGh1jnWMz1ipSEmL2hzzXxccjiH1ZZ+Zm9XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:43:fc:ff:60:cd:fa:7b:49:63:63:d0:a0:bf:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Validity
Not Before: Jul 28 23:00:28 2026 GMT
Not After : Jul 29 23:00:28 2026 GMT
Subject: CN=d75995f264a4ef51587d8fcea389ed0588fca1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:77:cf:fc:6b:23:7a:b3:27:55:92:3d:26:
7c:4b:ef:ae:05:2f:30:48:5b:5d:87:c7:ff:54:ef:
9e:71:c4:6a:33:5f:04:40:51:c7:1f:1e:37:e1:04:
df:aa:9e:2f:74:d5:a7:35:09:c6:6d:c5:03:e5:18:
1d:dc:ee:f6:59:45:bc:d9:2b:77:bc:20:d7:b9:5b:
14:f6:f2:b1:b7:9c:e1:80:95:46:43:7d:02:7c:33:
d1:9b:1d:39:a5:84:15:b7:29:82:04:59:61:01:6f:
10:9a:b6:90:92:d6:b3:66:92:fe:1c:fa:84:22:2e:
89:db:d2:ce:b4:69:49:e3:19:50:7f:e1:62:9e:25:
4c:67:8c:93:75:05:7e:7b:d6:77:f5:f7:25:7d:9d:
57:16:c7:51:0b:fc:43:72:c4:46:4c:dd:bf:66:d3:
03:d0:17:93:b2:dc:13:69:62:56:83:15:9f:93:f9:
fc:d4:f2:13:08:63:2e:c2:c0:dc:72:c0:e0:88:21:
d3:bb:ad:ba:81:56:ee:5c:20:a1:68:05:16:f7:4d:
d5:0f:e4:9a:3e:cf:1a:5a:78:d4:6b:a8:e0:a6:9e:
df:42:cf:2e:e7:b4:f3:d0:e8:76:52:97:42:11:6b:
8b:af:5a:1a:b5:16:27:30:45:b6:25:d4:1d:43:c0:
a3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:59:95:F2:64:A4:EF:51:58:7D:8F:CE:A3:89:ED:05:88:FC:A1:F9
X509v3 Authority Key Identifier:
keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:49:fd:38:5b:6e:2d:3a:40:f9:1c:8c:04:cd:fe:ea:8a:00:
ec:ab:5d:72:55:8f:69:4f:b4:47:65:de:bb:a3:1d:af:68:43:
5e:aa:be:cf:89:4c:ba:5e:ab:f3:cb:ff:d2:ea:11:37:cd:2d:
47:c9:34:b5:fd:78:5b:a3:17:32:d5:b2:f2:7f:7b:af:15:ec:
34:17:ab:49:ab:a3:e1:c6:3f:4d:6b:3f:b6:9d:55:06:9c:e8:
54:2b:4c:1c:c8:58:ff:83:80:06:b1:69:0a:a8:ed:20:c3:ff:
11:87:2b:5b:be:9c:36:bc:e4:49:89:25:c2:74:7c:fe:55:53:
0b:5c:12:cb:94:bb:b6:ee:96:4f:40:02:d3:c2:b2:0e:4e:03:
f0:50:e0:fe:fd:c2:d1:ec:9a:fa:6f:4c:18:69:ea:ea:20:f2:
f1:21:e2:65:6a:88:9b:77:90:d2:44:4c:18:0f:a7:91:87:e1:
91:be:1e:ee:40:a7:e9:e2:07:04:b4:b3:6c:bf:75:9d:74:5e:
f0:3b:09:13:a7:1c:ce:3d:b6:20:03:ae:b0:01:b7:5d:7b:51:
2c:e7:79:4f:55:4a:b2:06:8f:3e:49:c2:67:20:cd:9b:24:1d:
89:fb:97:59:01:86:b3:c4:35:9e:0a:61:b6:da:fd:34:81:6d:
93:b0:21:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:33:56 2026 by rpki-client