Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier: 4LhFj/R5Z7wHpUrL9mK81bBRqsA9iSHOgvA3/JXmd7o=
Subject key identifier: E9:57:99:E4:91:DB:B2:08:62:09:93:C7:CD:D4:78:68:30:41:C4:23
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01A17CCED6F96CEFE82410980998104D8B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number: 1B5A
Signing time: Tue 27 Oct 2026 10:01:32 +0000
Manifest this update: Tue 27 Oct 2026 10:01:32 +0000
Manifest next update: Wed 28 Oct 2026 10:01:32 +0000
Files and hashes: 1: IUI0XObzqlXmJSe9907ojhvvGKY.roa (hash: lh17xK7xmqGsZK8e6QUcQhpWBvUMvRGKUOxPhaUyu88=)
2: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: XmlEx9FThMeGOhznBNtyxTA3oAHZoDrXRT/BDu84YZY=)
3: idX57WLplHepMMWakDsba7errkg.roa (hash: NkQy1xhiDTBZirJF7A0Hy42dcPjqHqJkT8i7GaPQw1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:d6:f9:6c:ef:e8:24:10:98:09:98:10:4d:8b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Oct 27 10:01:32 2026 GMT
Not After : Oct 28 10:01:32 2026 GMT
Subject: CN=e95799e491dbb208620993c7cdd478683041c423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7f:7e:00:49:69:01:de:7d:1c:ff:65:74:2b:
de:7d:bc:d2:8b:bf:2a:f4:88:70:85:25:cc:b8:2c:
39:b3:f8:04:b3:b5:de:5e:af:bc:06:21:61:28:38:
c2:b5:7b:fe:63:8f:2d:ac:30:1f:f2:13:b9:97:e2:
44:6f:62:cd:6a:97:57:9f:3a:02:c2:5e:38:5b:a3:
99:a1:e2:77:b6:13:84:6f:cd:3a:04:bd:b7:00:2f:
e7:e0:a6:5e:45:3c:f1:30:b9:bc:51:7b:6d:a8:d3:
20:41:da:73:09:5c:62:34:ef:1e:d9:d3:f6:d2:8f:
11:0e:25:6f:99:ac:09:e9:a8:24:f0:ee:e8:e7:03:
17:be:27:ec:bf:5e:12:38:ed:a2:ac:6b:02:5d:56:
f5:aa:a0:bd:76:63:80:fd:f3:f5:d5:44:48:eb:72:
7b:8e:40:d9:5b:50:c8:a3:e1:fc:0f:97:2b:e4:06:
23:26:38:aa:45:41:2b:1d:6e:5c:3c:d3:5b:5e:8f:
e5:84:f9:d2:be:61:c7:30:81:75:20:57:96:cd:37:
f2:16:2d:cc:a0:e5:67:64:e2:fd:bf:f0:eb:88:ea:
8a:8f:b2:09:44:b5:57:25:d1:81:7b:fc:d2:38:a7:
bd:09:be:5b:23:93:61:cf:b3:ff:64:f1:46:8f:67:
a7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:57:99:E4:91:DB:B2:08:62:09:93:C7:CD:D4:78:68:30:41:C4:23
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:94:a2:90:3d:16:af:67:6d:39:ae:d5:ab:d2:91:8d:53:0f:
a0:5e:f2:33:7e:2f:3c:c3:aa:d9:69:a1:e5:00:f3:a7:f5:00:
05:10:9e:e0:24:ab:9e:a7:6e:a5:61:f0:37:bb:9e:63:6c:ca:
fc:92:f8:18:2f:6c:db:ef:18:45:c8:98:a5:df:7b:fe:b6:b1:
d5:a6:4d:9e:b7:1a:78:32:0c:c4:c6:9e:c0:1c:e4:cf:2f:9b:
75:c3:72:61:b7:98:c8:ea:4c:88:ed:11:9b:4d:e9:e0:ab:0d:
25:71:a3:7b:65:0c:62:c2:d7:58:42:80:64:5a:48:e9:d4:b7:
a4:9e:cd:3b:89:c5:84:83:b3:25:4e:61:22:b8:43:60:62:ae:
fb:5d:75:46:16:ed:f8:f6:f4:99:28:86:97:53:e3:56:86:73:
9f:40:77:f0:62:ad:a0:bb:b8:bf:4a:41:be:65:78:09:1b:ac:
8c:1a:88:84:65:8e:13:7c:ae:60:c2:78:6b:08:ce:52:fc:0e:
e8:25:35:4d:49:16:5d:49:e3:0a:6c:dc:a2:76:bb:7c:85:68:
30:ce:67:d4:0a:93:e8:bd:a0:4b:0d:79:76:81:59:3b:5d:50:
b5:2c:fb:71:2c:69:57:d4:a8:d6:b7:7d:5a:54:b6:06:9b:d9:
4e:e9:d1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:41:29 2026 by rpki-client