Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
File: gyVb16Los8d3SMPFajBDu8ESbEE.mft (raw, json)
Hash identifier: RevH7Md3kee+s0c71pVGL8SaF2a3BDe2mw7X8fY8BnQ=
Subject key identifier: 3D:03:2D:18:D3:E6:5B:E8:57:19:F0:7F:44:41:59:AD:30:E8:BA:8A
Authority key identifier: 83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
Certificate issuer: /CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Certificate serial: 019FCE27486F094494A563394DE0B08CC08A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
Manifest number: 0717
Signing time: Tue 04 Aug 2026 19:01:48 +0000
Manifest this update: Tue 04 Aug 2026 19:01:48 +0000
Manifest next update: Wed 05 Aug 2026 19:01:48 +0000
Files and hashes: 1: gyVb16Los8d3SMPFajBDu8ESbEE.crl (hash: VdR9vqBdc6G5FuCTE7wfPnGVmeIlWT+azf/N72fuXnI=)
2: ip_fTXtrV6Sb-Uz_23d2v2IhtQo.roa (hash: JShw05Zaz3LphiciGtK8MssYWo5XoUpv7n2tqAbN/Ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ce:27:48:6f:09:44:94:a5:63:39:4d:e0:b0:8c:c0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Validity
Not Before: Aug 4 19:01:48 2026 GMT
Not After : Aug 5 19:01:48 2026 GMT
Subject: CN=3d032d18d3e65be85719f07f444159ad30e8ba8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0a:cc:dd:24:7a:4b:bc:18:0c:e7:c1:6c:17:
77:6a:6c:4a:2c:bc:4a:2c:20:3d:39:2e:b7:fb:dc:
30:ca:81:87:fc:af:26:22:ec:2c:6c:67:dc:40:54:
40:00:3c:20:a9:dc:0e:e5:23:b6:a6:2e:ff:eb:d3:
e0:fd:2a:db:2c:97:e0:09:e8:f0:df:59:de:5c:a6:
bf:48:75:ac:bd:3c:45:40:a1:09:a2:d4:91:71:d8:
92:b9:df:b0:3d:74:fb:7b:25:48:5d:8c:c4:8c:f7:
b6:80:82:5e:29:53:49:e2:91:2c:ad:e4:ab:e5:6f:
74:21:26:dd:24:cb:c5:13:be:d4:b0:28:1e:ee:36:
1d:0f:15:db:e7:b0:08:65:72:74:49:7f:dd:7e:67:
a2:0b:ab:37:6d:2d:4b:79:de:7c:d7:f8:50:40:9b:
a1:f1:74:44:e6:40:42:86:11:73:48:04:db:4e:9c:
36:0a:a6:f6:4b:17:2d:c5:ef:d1:bd:7e:13:86:96:
53:db:f4:62:ee:a0:e6:5c:d2:b6:3c:c1:48:86:8a:
8f:5e:e6:2c:36:5b:c4:b3:57:38:38:37:16:cb:c0:
44:89:5e:33:e3:b8:ba:87:66:41:01:6b:22:69:ca:
17:39:cf:52:fd:61:0f:e1:d2:08:33:9d:81:db:d3:
35:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:03:2D:18:D3:E6:5B:E8:57:19:F0:7F:44:41:59:AD:30:E8:BA:8A
X509v3 Authority Key Identifier:
keyid:83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:85:b7:f0:6b:cd:4e:12:b5:10:29:8b:08:2e:49:b4:8b:f6:
6b:e4:8f:b5:7d:97:67:cc:57:07:4e:69:c7:db:bb:c4:66:f7:
9a:fe:15:f8:19:15:6c:58:94:c2:8c:1d:8f:0f:67:83:33:66:
95:6a:6b:d8:84:58:7c:af:88:87:74:a4:2e:af:e8:ec:63:5c:
70:05:94:78:db:87:ec:95:86:a6:7f:77:68:20:f9:a1:0b:59:
98:c2:93:83:71:b0:5e:c5:63:e7:72:4a:52:d2:95:9f:f8:3f:
d3:68:17:51:d4:08:01:f7:f0:5a:de:e6:9f:58:e3:e7:f4:e0:
63:6a:37:ed:e8:83:c5:72:7f:0c:e6:87:77:df:c1:95:30:4e:
58:79:9a:e0:28:ef:c2:ff:64:cd:68:0a:8c:87:c5:56:91:de:
44:88:f3:58:5a:04:5e:ee:66:eb:0d:bf:24:a0:65:40:3c:d0:
f2:5d:64:4a:10:59:1b:03:8a:ee:81:c6:17:fb:4e:d6:d3:85:
85:13:06:8d:8a:f8:1a:8e:97:fb:60:c7:27:2c:41:e2:43:2a:
45:f1:ee:b0:f2:35:0f:66:d2:f8:c6:1a:f1:72:90:66:16:48:
34:c0:72:2d:d1:65:1b:3b:c8:a2:a0:b9:0d:4d:80:19:80:48:
0c:ea:25:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 23:47:44 2026 by rpki-client