Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json)
Hash identifier: FccH8vsht1PvCp8Iul2YzXTXCUUWF0eisTx62o6uFsw=
Subject key identifier: 60:E6:F1:25:CE:F6:A0:02:80:12:40:27:3E:5C:D1:D3:24:7F:D3:79
Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Certificate serial: 019DEDEE724F28DBBA0143593341F3F055B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
Manifest number: 1705
Signing time: Sun 03 May 2026 13:02:00 +0000
Manifest this update: Sun 03 May 2026 13:02:00 +0000
Manifest next update: Mon 04 May 2026 13:02:00 +0000
Files and hashes: 1: 3fcVrImGg7jj5KwrtAd-bYf7aAM.roa (hash: S1b9AmYLLzxAfeSxaH7YVQhFBj8TwadZxNGNH30/GyI=)
2: CVSRElmsqlgWcEdghVOc7WPdDdc.roa (hash: Hn/0sT1HWFlLcY0Ekg5urzbmDq/zA7lmExICAldUfLE=)
3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: XguOnv9ik4o4wkX4HCba4WZ6b1EvPSt1dDETPDT6JnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:ee:72:4f:28:db:ba:01:43:59:33:41:f3:f0:55:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Validity
Not Before: May 3 13:02:00 2026 GMT
Not After : May 4 13:02:00 2026 GMT
Subject: CN=60e6f125cef6a002801240273e5cd1d3247fd379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4c:89:95:32:f4:f7:c1:72:0b:99:e8:70:88:
78:5a:1b:79:91:40:9f:bd:3d:42:86:5d:11:c7:db:
e4:fa:43:af:e1:c9:de:f8:15:b1:9a:40:df:58:ce:
6e:cc:d2:56:74:b5:ff:04:7f:a0:f3:90:31:bc:70:
89:bb:39:15:c9:f4:00:28:9d:c8:44:a1:50:94:c4:
d2:2a:c9:22:87:66:23:84:e1:03:1d:0d:47:e0:6c:
d4:d0:38:25:f6:98:73:78:84:2b:71:01:51:83:b9:
a6:e9:37:3b:65:39:ac:60:5a:60:d1:68:20:4f:16:
cb:88:5e:2e:58:52:d0:99:14:17:02:13:87:cf:03:
f7:6e:8f:93:db:ae:b9:85:8d:73:1a:e1:f0:4b:ee:
e6:e5:52:83:ac:81:6e:18:ff:45:b4:6e:d7:56:83:
04:4a:af:51:23:9e:bf:d4:59:5d:c1:76:ad:bd:ac:
19:fd:60:8d:47:64:73:71:76:f4:a8:b9:70:31:0d:
b5:d5:ce:64:26:41:4c:1a:39:c8:11:25:c4:50:dc:
f3:50:3c:94:9c:74:80:32:19:d4:6e:0c:55:7d:b0:
71:b4:de:2e:7f:fe:c0:32:87:a7:91:7a:63:45:54:
af:ad:fd:d6:35:e4:d0:9f:21:57:cc:43:54:5f:df:
98:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E6:F1:25:CE:F6:A0:02:80:12:40:27:3E:5C:D1:D3:24:7F:D3:79
X509v3 Authority Key Identifier:
keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:bf:02:5b:39:f1:bf:64:79:0f:e0:e9:cb:f6:17:5d:d7:99:
ed:dd:1a:75:3c:62:0d:bf:0c:86:2d:68:af:72:9e:c2:6c:63:
ff:b7:57:5c:bb:24:0b:a0:db:1f:fa:71:98:1a:4f:75:02:d4:
62:fd:2d:a5:db:44:89:bf:5d:14:9d:14:64:24:38:89:11:06:
e2:48:b2:0c:d7:d0:6f:9f:38:a5:3f:a5:9b:04:3c:26:6e:f1:
5e:c9:fc:0b:75:b0:23:6c:e9:fc:d3:36:2f:df:5c:69:87:ea:
15:37:1d:5c:73:67:1a:b9:d6:94:89:e4:25:54:9c:cb:9b:63:
a3:35:61:b6:cc:cc:75:2f:45:6b:26:bf:f8:a2:52:66:89:5d:
ab:d3:18:15:63:6b:ef:06:d1:ac:d2:43:23:a6:f5:f7:51:49:
93:24:70:7d:a8:7a:ce:76:3d:77:ce:1e:27:31:7d:e4:6d:96:
19:54:b4:8e:6a:cc:3d:fd:6b:a3:98:3e:b7:33:63:9d:a2:f1:
e4:17:7e:e3:3c:cb:4c:c7:35:8f:0e:10:a0:6e:db:f4:ef:05:
de:ce:2a:26:04:d2:81:f3:59:21:79:ff:3a:88:69:c1:e3:fa:
22:94:62:c4:61:d7:24:c3:73:b0:b9:11:e6:d5:e8:c8:26:8e:
1f:25:aa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 21:27:46 2026 by rpki-client