Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier: yCuPtJ9Z2tSZ0b8rzQxDoRhbxxUgBZgD7qGdEENCLew=
Subject key identifier: BA:F8:3A:55:B2:5D:07:BD:46:35:CA:97:33:94:80:D8:E1:FC:6F:A1
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 019FA1BB56087429CED41DFCDD10285BF80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number: 1A62
Signing time: Mon 27 Jul 2026 04:00:36 +0000
Manifest this update: Mon 27 Jul 2026 04:00:36 +0000
Manifest next update: Tue 28 Jul 2026 04:00:36 +0000
Files and hashes: 1: IUI0XObzqlXmJSe9907ojhvvGKY.roa (hash: lh17xK7xmqGsZK8e6QUcQhpWBvUMvRGKUOxPhaUyu88=)
2: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: G2lZDBnFOLcL7OVO0OdiEKNFj1S2iWn8eg8mS9CfHDA=)
3: yxM7J-fncjH39qOsj_6YqBGJVWU.roa (hash: AjHV8rOTeMWNj3biUMbUNtv+kWtvN/aGZ8u6KDIN/SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:56:08:74:29:ce:d4:1d:fc:dd:10:28:5b:f8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jul 27 04:00:36 2026 GMT
Not After : Jul 28 04:00:36 2026 GMT
Subject: CN=baf83a55b25d07bd4635ca97339480d8e1fc6fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:c5:aa:2f:b9:fc:2b:49:0a:4d:a7:30:a7:
00:53:87:28:9b:d3:d9:3a:e4:29:dd:02:d3:30:d0:
bc:98:74:07:2b:8f:78:53:de:21:f8:cd:e7:4b:71:
f5:f1:1a:c1:ac:c0:3f:3b:54:97:4c:4a:28:ce:21:
92:7a:e1:c1:b6:16:e4:93:6d:70:b1:c5:53:9e:b4:
c0:c8:bd:fa:55:a2:00:81:69:b6:8b:23:b6:1f:12:
48:22:cf:bb:a2:79:85:90:85:92:d8:3d:0c:7a:55:
f9:03:22:2d:8e:84:7e:a0:ed:0f:a9:80:0a:48:de:
4d:aa:39:8a:95:43:6c:92:40:2c:c1:55:06:6f:7b:
04:72:89:37:bc:c1:b4:33:29:d0:14:a6:9d:72:c2:
19:c7:19:f4:f8:d2:b1:98:76:47:51:53:71:53:76:
55:b2:7b:ae:7b:57:68:d4:6e:49:54:27:15:84:62:
8b:51:7b:7f:ea:59:57:97:f4:77:07:32:79:b8:8e:
48:44:e7:79:c1:75:33:1d:0f:be:52:d6:08:74:40:
ee:5d:70:06:70:e0:cc:5b:d0:da:48:48:df:54:67:
79:91:7d:d4:c7:3d:88:73:04:9e:8f:dc:6a:df:a4:
23:36:6c:5e:f3:12:98:bb:0c:04:6c:05:19:c6:c2:
95:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F8:3A:55:B2:5D:07:BD:46:35:CA:97:33:94:80:D8:E1:FC:6F:A1
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:67:b4:5a:1a:13:dd:e5:cb:32:b8:e2:4d:b4:4f:80:51:2d:
63:c8:f5:05:c0:a0:58:4b:e2:5a:6f:bf:16:85:1c:04:74:15:
c3:1d:37:ea:c8:45:38:00:36:61:8e:0c:8d:fc:eb:f0:ef:e0:
35:b1:43:f2:7d:60:01:7b:9c:7a:0c:ff:1f:6f:6a:95:32:3a:
88:7c:c6:52:1f:1a:86:50:54:08:8f:b0:68:e6:e4:81:c7:2e:
43:e8:04:52:4f:94:e1:91:29:81:61:0a:94:20:85:44:7e:51:
81:b3:b5:d1:5a:37:a8:cd:ad:d8:23:8f:04:b2:d6:cf:b6:a2:
37:af:6f:47:ca:5f:df:c7:b3:ed:3c:d9:8b:85:0b:84:cf:8e:
68:9c:a3:f2:16:78:8a:60:70:49:40:44:ad:76:54:6b:c3:58:
20:f3:d9:05:ff:ac:4f:6f:f4:f1:e2:56:06:ef:f6:1f:20:e0:
25:2d:3b:58:a1:96:8d:7c:f0:c8:b9:55:a4:51:b6:80:19:27:
44:29:1b:e1:70:01:93:7d:9b:8d:50:ab:de:e4:34:54:da:d8:
bf:45:aa:a6:b3:5d:41:45:79:73:5e:17:51:48:75:a6:a0:32:
21:87:09:40:7f:14:63:8d:f4:4f:32:b5:76:75:8a:a4:f5:48:
d8:a0:75:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hu1YIdCnO1B383RAoW/gLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi
NmMzMDMwHhcNMjYwNzI3MDQwMDM2WhcNMjYwNzI4MDQwMDM2WjAzMTEwLwYDVQQD
EyhiYWY4M2E1NWIyNWQwN2JkNDYzNWNhOTczMzk0ODBkOGUxZmM2ZmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ3Fqi+5/CtJCk2nMKcAU4com9PZ
OuQp3QLTMNC8mHQHK494U94h+M3nS3H18RrBrMA/O1SXTEooziGSeuHBthbkk21w
scVTnrTAyL36VaIAgWm2iyO2HxJIIs+7onmFkIWS2D0MelX5AyItjoR+oO0PqYAK
SN5NqjmKlUNskkAswVUGb3sEcok3vMG0MynQFKadcsIZxxn0+NKxmHZHUVNxU3ZV
snuue1do1G5JVCcVhGKLUXt/6llXl/R3BzJ5uI5IROd5wXUzHQ++UtYIdEDuXXAG
cODMW9DaSEjfVGd5kX3Uxz2IcwSej9xq36QjNmxe8xKYuwwEbAUZxsKVSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLr4OlWyXQe9RjXKlzOUgNjh/G+hMB8GA1UdIwQY
MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt
MjIwNmNjMmU2OTFjLzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj
LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAame0WhoT
3eXLMrjiTbRPgFEtY8j1BcCgWEviWm+/FoUcBHQVwx036shFOAA2YY4Mjfzr8O/g
NbFD8n1gAXucegz/H29qlTI6iHzGUh8ahlBUCI+waObkgccuQ+gEUk+U4ZEpgWEK
lCCFRH5RgbO10Vo3qM2t2COPBLLWz7aiN69vR8pf38ez7TzZi4ULhM+OaJyj8hZ4
imBwSUBErXZUa8NYIPPZBf+sT2/08eJWBu/2HyDgJS07WKGWjXzwyLlVpFG2gBkn
RCkb4XABk32bjVCr3uQ0VNrYv0WqprNdQUV5c14XUUh1pqAyIYcJQH8UY430TzK1
dnWKpPVI2KB1cA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:22:05 2026 by rpki-client