Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json)
Hash identifier: X5nxs7PWn0wyoYHJsBzb88hMZPwdjhFEknSKpjGseN8=
Subject key identifier: 4A:18:56:37:84:AB:8A:3F:56:F5:BF:66:E1:31:13:14:C2:5A:65:29
Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Certificate serial: 019CEF0326087DDB550C3CEF21A60AB1684D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
Manifest number: 1681
Signing time: Sun 15 Mar 2026 01:01:26 +0000
Manifest this update: Sun 15 Mar 2026 01:01:26 +0000
Manifest next update: Mon 16 Mar 2026 01:01:26 +0000
Files and hashes: 1: 3fcVrImGg7jj5KwrtAd-bYf7aAM.roa (hash: S1b9AmYLLzxAfeSxaH7YVQhFBj8TwadZxNGNH30/GyI=)
2: CVSRElmsqlgWcEdghVOc7WPdDdc.roa (hash: Hn/0sT1HWFlLcY0Ekg5urzbmDq/zA7lmExICAldUfLE=)
3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: iwmagcyHQStHxL1R4IkBdBIfDV5O0xpmGwwq2JorKAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ef:03:26:08:7d:db:55:0c:3c:ef:21:a6:0a:b1:68:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Validity
Not Before: Mar 15 01:01:26 2026 GMT
Not After : Mar 16 01:01:26 2026 GMT
Subject: CN=4a18563784ab8a3f56f5bf66e1311314c25a6529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:df:a4:3c:d2:b0:5f:d5:d2:01:2c:0e:e6:
04:e8:a4:a3:7a:7e:25:16:f6:38:bb:2a:d3:fa:5d:
49:e9:9a:88:5f:a2:38:8c:ea:db:ca:f7:92:91:7f:
58:0c:eb:68:3e:e2:93:19:73:9b:86:4a:a9:41:be:
1b:44:c6:ae:34:da:3d:7e:17:d6:4a:d5:4a:b3:55:
a9:bc:dd:31:7f:3c:2f:31:30:50:93:77:b6:ae:38:
ef:e1:59:46:03:8c:a0:85:fd:ab:77:95:c5:d9:48:
57:40:33:f0:ec:6c:db:fa:a8:45:11:b1:f5:d1:40:
2f:81:2e:3e:2e:82:d3:1c:d6:30:fd:01:e0:54:04:
d6:db:9d:83:40:69:30:79:50:c0:17:11:e5:1c:82:
1a:66:a4:99:37:33:4b:6d:5f:37:2f:89:1d:31:cb:
d3:a7:9e:7c:c1:48:e7:2a:f9:3f:53:b6:2b:63:a4:
08:53:9e:02:f6:e4:ff:bd:8d:74:97:46:87:14:bb:
80:55:0e:91:e5:bc:5c:f0:c2:1c:ad:f2:0c:65:90:
15:f2:21:64:f6:31:15:c0:88:f2:1b:70:40:92:40:
76:cc:b6:f2:d7:79:c7:c8:5d:f0:58:eb:80:a0:65:
c3:36:2f:ff:c8:e7:b2:8e:5f:0a:6c:b8:2a:21:58:
d0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:18:56:37:84:AB:8A:3F:56:F5:BF:66:E1:31:13:14:C2:5A:65:29
X509v3 Authority Key Identifier:
keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ef:cb:2e:e9:9b:7b:d4:35:4e:4e:bf:88:bc:67:3f:4a:19:
1e:f5:90:f9:bc:1e:d9:1e:b0:69:58:58:54:a0:53:b2:bc:13:
04:fd:5b:43:a3:cf:96:79:94:fa:e6:fb:04:e1:27:b9:48:c7:
2f:01:ba:35:8d:9e:39:a2:2a:42:b0:fa:0f:a1:ef:7c:bd:65:
80:f7:b9:46:00:76:af:1a:05:e2:45:5d:b4:9f:d7:12:14:4c:
84:92:5f:3f:95:88:73:dc:e8:26:e2:4a:0c:62:e5:94:2b:01:
80:c0:a7:62:6d:21:97:da:af:61:62:f0:fe:b7:8f:ad:b3:76:
41:7e:72:db:7c:52:fd:a7:cc:09:82:a6:a3:4c:9e:56:ac:0e:
f5:be:41:ca:46:6e:33:4d:1e:90:2a:9b:26:81:4b:10:0e:97:
13:54:08:6a:3e:f7:e5:1b:fb:bc:9c:b5:31:30:df:a8:0e:2a:
70:07:49:07:e1:9f:03:ab:20:9b:7b:12:12:03:f3:56:1e:2c:
a9:45:d6:56:b3:87:e5:35:ad:84:04:a2:33:9f:76:08:d0:09:
05:58:6d:c3:af:cc:db:44:61:13:4b:c0:0a:27:a1:32:eb:73:
9d:14:72:61:63:60:a2:54:67:e3:f9:be:71:77:02:57:83:8b:
c8:aa:10:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 04:38:35 2026 by rpki-client