Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier: wp01wZ0VAsilAdDf7itQClFEZXn16tNGuVuJ28onCvY=
Subject key identifier: BA:A8:A9:DC:ED:86:AD:48:C4:C1:98:EB:83:30:8A:C7:05:EC:79:44
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 019D39AF58F6C199E983F472B234FAEE652C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number: 1923
Signing time: Sun 29 Mar 2026 13:01:26 +0000
Manifest this update: Sun 29 Mar 2026 13:01:26 +0000
Manifest next update: Mon 30 Mar 2026 13:01:26 +0000
Files and hashes: 1: IUI0XObzqlXmJSe9907ojhvvGKY.roa (hash: lh17xK7xmqGsZK8e6QUcQhpWBvUMvRGKUOxPhaUyu88=)
2: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: hJOcySg6Ud+oIXqtJQsHW1EzEp+qUL6Q+1Ugfk5k5i0=)
3: yxM7J-fncjH39qOsj_6YqBGJVWU.roa (hash: AjHV8rOTeMWNj3biUMbUNtv+kWtvN/aGZ8u6KDIN/SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:58:f6:c1:99:e9:83:f4:72:b2:34:fa:ee:65:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Mar 29 13:01:26 2026 GMT
Not After : Mar 30 13:01:26 2026 GMT
Subject: CN=baa8a9dced86ad48c4c198eb83308ac705ec7944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8e:3d:e8:82:f8:42:6d:2e:50:28:57:b0:bf:
50:dc:0e:87:dd:9f:45:3a:72:08:f6:76:6b:0f:0a:
16:e2:7a:37:0d:85:f7:e1:f4:d0:b1:03:49:fb:a8:
84:01:9d:9f:d0:aa:1b:c5:8c:63:96:b0:fd:92:2e:
fa:a3:0c:29:54:4c:1d:a6:c8:e4:d2:a2:45:a7:60:
8a:a4:35:9b:4c:29:4f:52:bb:fa:2a:c1:8a:d7:b6:
88:57:28:1d:3d:87:fc:79:d0:8a:54:92:d7:70:8a:
a0:b3:a4:af:fb:ee:0a:46:e3:c5:1e:1d:60:de:0b:
68:07:7a:e8:ce:47:41:a4:4b:b6:b1:f3:80:68:b0:
b5:40:d7:98:90:3c:a8:45:39:b3:f1:0f:52:af:01:
aa:73:94:82:e4:50:43:a6:08:f5:5d:c1:3b:43:7e:
94:e9:c1:f7:c8:0c:b3:46:76:21:22:57:11:74:be:
bb:0e:bf:e7:56:da:9e:97:3e:fd:d4:aa:d0:b2:eb:
65:f2:e8:f3:79:eb:4b:63:16:2a:80:7f:d5:e0:12:
92:d9:c4:36:dd:f8:cc:48:8e:76:6a:c5:0f:91:91:
4b:11:43:29:b8:97:00:a4:4b:70:94:13:31:66:c9:
2f:4c:c3:6a:e3:83:fd:a1:04:58:a7:28:62:45:e2:
3f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A8:A9:DC:ED:86:AD:48:C4:C1:98:EB:83:30:8A:C7:05:EC:79:44
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ea:1f:ce:68:66:81:8c:76:5b:dc:36:2e:f3:99:9d:49:c9:
9b:dd:09:8b:57:4a:03:22:03:bc:8b:c5:ec:b5:42:03:69:38:
00:2a:83:d5:5d:63:94:3f:90:6e:11:53:68:e3:18:5d:dc:4b:
de:82:52:bc:54:4d:76:4c:2b:9a:65:55:08:74:c0:fc:ed:92:
a8:dd:aa:80:19:69:78:cb:d8:3e:71:5e:cb:f6:d1:54:0e:db:
84:3f:6e:00:71:fb:c5:a1:18:8d:16:12:ce:3a:5b:f8:9d:05:
91:51:6a:f6:b6:8f:fa:13:c5:2c:b8:71:b1:52:7e:f8:16:41:
22:8a:92:65:80:f2:86:a4:d9:04:dd:5d:1c:b3:88:41:73:e7:
cd:67:88:6f:37:db:1d:ff:b1:e7:8a:93:84:98:ee:c8:94:a4:
bc:3e:a3:f8:1c:a6:4f:13:60:62:07:24:29:87:54:1c:3c:dc:
8b:e6:11:4e:73:2e:0d:e6:82:9b:d3:06:f1:88:60:24:be:d9:
d3:06:b3:d8:be:7c:2d:79:65:a6:6c:b0:56:a4:b0:35:f0:62:
3e:32:55:c8:0e:0d:27:db:92:07:61:6b:74:eb:9c:17:64:c5:
ea:ec:95:40:ed:98:09:7c:fc:cb:bd:90:e1:5f:a8:2a:04:2a:
42:77:59:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:52 2026 by rpki-client