Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json)
Hash identifier: kCpgh0P2B2Y8kgXFZgxI0R9Ld5pE6crOoiLNmHfm2Y4=
Subject key identifier: 48:C2:33:56:D9:2D:69:EB:18:66:AF:64:CD:CD:B6:A6:0D:84:6E:4D
Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Certificate serial: 019FF37CFA63F9406A1228E0081C8C194665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
Manifest number: 1811
Signing time: Wed 12 Aug 2026 01:01:21 +0000
Manifest this update: Wed 12 Aug 2026 01:01:21 +0000
Manifest next update: Thu 13 Aug 2026 01:01:21 +0000
Files and hashes: 1: 3fcVrImGg7jj5KwrtAd-bYf7aAM.roa (hash: S1b9AmYLLzxAfeSxaH7YVQhFBj8TwadZxNGNH30/GyI=)
2: CVSRElmsqlgWcEdghVOc7WPdDdc.roa (hash: Hn/0sT1HWFlLcY0Ekg5urzbmDq/zA7lmExICAldUfLE=)
3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: U0bMGQ/eWnX4O+APhnYH4pgqvZ9NiqYyJah6t1+eed4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f3:7c:fa:63:f9:40:6a:12:28:e0:08:1c:8c:19:46:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Validity
Not Before: Aug 12 01:01:21 2026 GMT
Not After : Aug 13 01:01:21 2026 GMT
Subject: CN=48c23356d92d69eb1866af64cdcdb6a60d846e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b0:eb:b6:f3:1f:c2:8e:0c:03:e8:1e:d4:91:
87:97:ff:62:a3:0f:0d:34:b6:91:0b:c1:6e:ac:58:
0b:66:41:f9:60:05:12:0b:c0:85:a9:10:38:d2:c8:
e7:bb:96:a4:13:20:63:cf:0f:73:98:ce:70:b0:db:
f9:45:60:fa:11:dc:79:c5:67:9e:68:b1:33:81:4f:
86:43:80:f6:fb:95:99:a3:a1:ef:d6:ce:7c:7b:ee:
d9:35:23:03:ce:ec:a0:6e:59:4d:f2:bc:32:7a:61:
73:66:5e:29:8f:4d:b7:bf:af:16:84:0a:c9:06:18:
fe:59:89:85:39:d6:c9:03:1b:88:88:f8:98:f8:4f:
f0:cb:a1:08:f3:53:ad:6a:b4:3d:ec:7d:1f:7b:ec:
b5:80:46:c2:72:1c:9f:0b:5b:87:5a:72:6c:c1:1c:
3c:62:a0:b8:51:ba:b0:a3:9b:fd:ee:41:ac:4d:83:
6c:27:ac:d2:a0:d1:eb:c1:d0:e8:37:37:b5:32:69:
c5:75:b6:45:c5:33:17:ed:8f:62:b8:10:ad:6f:1e:
5d:87:8c:dd:00:20:b9:5e:02:be:b8:b5:c1:38:a2:
ef:0c:c0:f2:5e:8b:56:ea:45:c2:4f:fe:03:98:80:
82:ca:53:52:67:10:b7:ab:2a:98:81:cf:3e:7d:12:
bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C2:33:56:D9:2D:69:EB:18:66:AF:64:CD:CD:B6:A6:0D:84:6E:4D
X509v3 Authority Key Identifier:
keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b5:e0:e5:46:9b:40:30:6d:ea:16:16:ba:92:2d:c5:40:0f:
e0:f5:83:1b:ca:dd:18:65:09:d5:c2:8f:74:aa:f2:fc:1b:56:
6c:c8:25:7f:6c:04:ec:27:5d:8b:54:2f:61:44:dd:02:b4:ea:
07:ab:c2:15:c4:3a:d0:dc:e0:04:1d:f7:f8:db:ef:74:9a:8f:
81:1f:b2:b9:90:53:25:27:83:8e:44:69:6a:0a:fc:d6:a2:1f:
9e:70:f5:6e:ba:00:96:af:3c:af:2c:f2:0d:3b:89:dc:39:79:
92:1d:ed:3a:f1:32:01:c6:58:50:9e:19:48:64:f2:7e:61:12:
08:71:43:93:57:26:92:d4:41:d7:66:e1:aa:e7:ab:63:e6:12:
c4:09:a6:17:e7:b5:97:bc:5c:67:6e:c1:d8:ab:ef:89:70:98:
56:53:14:c2:8b:54:61:59:d5:1b:40:e8:2f:72:a9:dc:58:59:
61:b8:c5:1c:10:3a:60:37:a6:32:4a:50:87:1c:d2:4d:f3:e5:
77:c0:f1:8d:68:05:46:1e:35:24:b1:53:fd:6b:cc:7c:f1:c2:
be:f2:b4:77:8a:a7:f3:85:d9:79:1b:d0:e5:92:d0:3a:00:7b:
2f:65:c7:35:e6:99:14:3e:04:dd:7e:9d:a1:c2:22:38:04:8f:
02:ee:ac:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 10:35:16 2026 by rpki-client