Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json)
Hash identifier: XxMyzmge535fK/4VA3yN6nSfdlw26RsPrXXNLm1vTBU=
Subject key identifier: 54:A7:4A:A8:FE:F2:5C:2D:E7:DE:0B:CF:4D:B0:79:C4:14:3E:E9:3C
Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Certificate serial: 019F09D08CB337D08AFD0A4CE070283F1ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
Manifest number: 1798
Signing time: Sat 27 Jun 2026 16:01:30 +0000
Manifest this update: Sat 27 Jun 2026 16:01:30 +0000
Manifest next update: Sun 28 Jun 2026 16:01:30 +0000
Files and hashes: 1: 3fcVrImGg7jj5KwrtAd-bYf7aAM.roa (hash: S1b9AmYLLzxAfeSxaH7YVQhFBj8TwadZxNGNH30/GyI=)
2: CVSRElmsqlgWcEdghVOc7WPdDdc.roa (hash: Hn/0sT1HWFlLcY0Ekg5urzbmDq/zA7lmExICAldUfLE=)
3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: 4wApEvv8QR7tDgAdBZHaF9AKt6ODfT7+4Pw3gVcVSjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 13:58:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:09:d0:8c:b3:37:d0:8a:fd:0a:4c:e0:70:28:3f:1a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Validity
Not Before: Jun 27 16:01:30 2026 GMT
Not After : Jun 28 16:01:30 2026 GMT
Subject: CN=54a74aa8fef25c2de7de0bcf4db079c4143ee93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6b:77:b1:71:4b:b1:22:b0:55:d8:c5:08:1c:
0d:c0:24:91:37:45:ea:76:e0:b4:ac:e5:e8:a8:14:
88:70:31:85:c7:f0:5d:95:17:b7:d3:e4:45:bd:ed:
9a:b6:71:ca:40:1a:68:10:d6:f8:0d:30:40:36:1a:
15:8b:56:6a:94:1d:7e:bb:4d:3b:e1:a4:6a:18:fa:
02:a3:64:77:b1:91:5c:88:00:fa:83:15:ba:2c:40:
0f:5b:a3:fe:d7:57:53:5c:88:09:7a:af:e5:6d:98:
2c:a5:58:8c:47:90:fe:2e:76:f6:82:ea:3f:8c:bc:
a6:2c:98:c5:dd:a7:af:c2:b7:51:81:2d:d7:eb:da:
c4:8a:da:d7:7d:2d:34:eb:6b:77:40:b2:9f:40:1c:
ab:f9:83:ae:19:8d:2f:8b:d6:d7:6c:75:6d:28:8c:
a1:49:04:25:1b:32:3d:45:8f:04:15:38:57:cd:c4:
14:d7:23:20:09:37:b4:9e:58:eb:79:9a:31:da:df:
2f:4d:fc:e8:30:0d:1b:08:3d:e6:b7:03:d1:d1:18:
3c:8c:e3:9d:c4:82:39:d0:d1:5f:4f:f3:ad:b3:1c:
ca:2b:65:6a:54:74:97:25:2c:ed:01:26:0f:ed:83:
cc:c4:d2:a9:9c:c5:a0:16:06:23:56:0d:a8:81:b8:
3b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A7:4A:A8:FE:F2:5C:2D:E7:DE:0B:CF:4D:B0:79:C4:14:3E:E9:3C
X509v3 Authority Key Identifier:
keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:fc:e5:24:98:b9:c2:fd:1a:2a:6e:a2:16:2e:1c:96:59:1e:
8e:ee:c2:cf:33:40:4c:30:0a:ba:73:7e:87:15:8d:17:87:bd:
1a:a3:60:02:b8:ed:54:b1:73:d5:c0:4a:f8:aa:6f:3a:77:d4:
78:60:5a:e6:6a:83:ec:31:d3:a4:30:2d:59:fc:90:78:97:6f:
e4:74:a9:ce:6a:66:7d:72:5b:26:77:23:7a:33:fe:3d:b7:70:
24:f5:0f:5a:05:2a:9f:a4:66:2d:d5:17:df:00:88:55:fb:82:
0c:67:ff:4e:81:de:ea:0c:4d:e6:b4:8a:7c:2e:e5:ca:fb:3d:
18:e4:dd:fb:a0:92:3c:7d:aa:77:57:14:ba:5a:d9:b3:ea:1e:
32:38:54:59:d8:28:10:9c:e4:4f:15:ca:68:4e:be:33:92:18:
65:99:e7:5a:3e:9e:d2:17:71:30:80:47:e5:02:a9:aa:c1:17:
1f:37:71:54:bb:9c:8d:40:21:64:21:7d:bc:6b:b9:f9:e9:1f:
30:93:2a:a9:d0:13:e1:bb:91:61:99:22:7d:9f:43:23:5e:99:
5f:0f:64:70:db:b2:2e:b3:c3:50:90:7e:8d:62:c9:8e:9f:e3:
be:56:36:82:7e:fb:c3:ab:ea:b5:f7:0d:7b:53:0d:6f:7b:13:
52:be:5b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 18:48:46 2026 by rpki-client