
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json)
Hash identifier: GjnghrX9HcyYI+zAGlo/45klKsp6QgGUPtX/+XUhbdY=
Subject key identifier: D4:F5:EC:DB:44:FF:84:75:CE:B7:B8:8E:74:01:1A:87:83:E5:E7:C6
Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Certificate serial: 019FF56C4AAF977BCB19FFF7B282BF3EF79B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
Manifest number: 1812
Signing time: Wed 12 Aug 2026 10:02:22 +0000
Manifest this update: Wed 12 Aug 2026 10:02:22 +0000
Manifest next update: Thu 13 Aug 2026 10:02:22 +0000
Files and hashes: 1: 3fcVrImGg7jj5KwrtAd-bYf7aAM.roa (hash: S1b9AmYLLzxAfeSxaH7YVQhFBj8TwadZxNGNH30/GyI=)
2: CVSRElmsqlgWcEdghVOc7WPdDdc.roa (hash: Hn/0sT1HWFlLcY0Ekg5urzbmDq/zA7lmExICAldUfLE=)
3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: oURWRvA5tgisR5S8ZvKIS867XF1Odg5SkJk5xeJTcTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:6c:4a:af:97:7b:cb:19:ff:f7:b2:82:bf:3e:f7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Validity
Not Before: Aug 12 10:02:22 2026 GMT
Not After : Aug 13 10:02:22 2026 GMT
Subject: CN=d4f5ecdb44ff8475ceb7b88e74011a8783e5e7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:5c:d4:b9:80:67:3d:6b:e5:be:09:bd:b9:
7a:44:d4:01:74:f5:7e:0f:c6:fe:e1:15:6b:f5:70:
af:37:3d:a5:07:a3:0c:f5:b4:d1:ed:c7:73:8e:27:
b7:03:71:55:22:24:74:f5:aa:0b:9f:ab:27:35:73:
90:b7:a0:f2:73:f7:5d:0b:02:2a:42:7f:c1:b4:c5:
50:6e:38:5f:3f:ba:10:23:fa:49:93:62:58:12:6a:
6b:0e:95:b2:02:da:c3:ed:01:a2:62:ba:fe:1a:8e:
44:26:b7:6b:b1:7f:2b:3c:0a:d8:11:43:c0:6b:ab:
ef:14:e3:8c:20:6a:c8:34:1c:55:5e:33:66:f2:9b:
ad:29:4d:9d:a7:44:f7:a3:b9:48:29:82:5e:b7:ac:
d7:c2:03:2d:05:be:a9:89:de:97:57:6e:7d:e3:1e:
13:a2:77:88:f0:8e:d6:ee:73:cd:61:1c:44:e7:c1:
4d:72:8a:c3:d5:ab:57:33:1d:e8:b8:d8:ad:97:08:
45:9a:ad:f0:81:12:6f:b6:71:33:e6:6d:72:0a:e7:
2b:51:5f:41:c8:03:5e:34:e4:d6:5a:7f:7c:48:3f:
59:79:a1:7d:f3:94:00:3e:16:f1:d6:e4:68:1b:aa:
0f:fa:f1:64:b2:db:b6:db:4c:69:bf:bc:f3:33:94:
37:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F5:EC:DB:44:FF:84:75:CE:B7:B8:8E:74:01:1A:87:83:E5:E7:C6
X509v3 Authority Key Identifier:
keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:88:be:55:cb:5b:f2:f6:8f:2a:be:bb:c6:91:f9:50:11:05:
c2:48:be:82:d7:14:c7:c4:48:7b:30:15:61:78:24:3a:31:9b:
85:0d:71:2e:66:51:c3:8f:33:d7:fb:7e:65:de:eb:06:6d:30:
2c:88:a4:83:2f:df:e5:1a:4d:bd:0f:9a:2d:08:ff:5b:c5:e6:
ef:ec:37:f6:14:9a:ce:84:57:e2:a6:37:bd:e7:58:a6:88:71:
cc:0e:6f:68:ff:f1:c6:ae:59:8e:85:95:81:6c:85:cd:12:68:
a5:d5:e4:26:87:e7:e7:69:17:87:1d:ee:d1:cc:b2:5c:c9:93:
dd:02:b0:a5:fd:1d:ce:26:0b:5e:96:06:78:25:29:c1:49:f6:
24:bd:0c:e0:0f:66:51:0e:d5:ee:3a:d1:c3:b1:64:20:5c:cd:
59:3f:e1:c9:11:0f:57:74:2e:c0:41:9e:9b:32:9b:2a:71:75:
3e:d8:d9:e8:2f:f5:c1:eb:71:75:6e:db:81:8e:e6:9c:f5:89:
fa:d0:12:70:09:a2:98:cc:6a:b0:85:bc:d8:50:ca:c3:a2:37:
c2:54:0d:3e:e7:50:10:12:51:c3:06:28:76:d0:4d:3a:83:b1:
3c:49:ab:dc:12:75:40:06:82:7c:33:63:4a:c0:4d:fe:a7:53:
28:4a:e8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 11:57:47 2026 by rpki-client