Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
File: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft (raw, json)
Hash identifier: DUSh0RIWpDyQTVu1YhflCgfpg7KWOi0Yl1c5Y2ajR7A=
Subject key identifier: F2:09:6F:C6:2D:50:AD:37:16:AD:ED:92:27:4C:C8:FD:37:50:EC:A4
Authority key identifier: 83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
Certificate issuer: /CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Certificate serial: 01A17CCEA6515C7F81AE00C83BA09E210E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 10:01:20 +0000
Manifest this update: Tue 27 Oct 2026 10:01:20 +0000
Manifest next update: Wed 28 Oct 2026 10:01:20 +0000
Files and hashes: 1: GFlr8uF2r8cVqmDJ2JXiNxwY91k.roa (hash: gwpmNBpGA7FAOM9cF2rmHJiCr7Axf/GeGVR5kW5sxyc=)
2: eR1kJt3AkvnRh9nnXa_66NaaHYY.roa (hash: vhKP6Uu//ijg9IWe7RT8txZCBV20sw0GmYZPsJN+rXk=)
3: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl (hash: dkC6Hv52HH60qU6oAJrTyCpEtQILWEsxYNNeDAF1roI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:a6:51:5c:7f:81:ae:00:c8:3b:a0:9e:21:0e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Validity
Not Before: Oct 27 10:01:20 2026 GMT
Not After : Oct 28 10:01:20 2026 GMT
Subject: CN=f2096fc62d50ad3716aded92274cc8fd3750eca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:19:85:39:26:af:8b:83:57:0a:00:54:b7:ba:
a3:d8:5d:0c:be:66:8a:18:e3:23:62:f9:48:21:83:
6d:c0:92:46:c2:f8:86:e9:82:81:e1:c6:48:ba:76:
fd:21:c4:96:5d:80:41:5d:47:1b:88:a9:c3:46:ca:
c1:4c:3f:41:a9:11:93:06:e5:ba:99:7a:3c:da:69:
13:13:a4:92:bc:a6:4f:50:5d:84:a9:54:53:b1:80:
e4:ce:0f:a0:1a:45:0c:35:65:35:df:40:88:ba:f6:
90:52:6a:40:d1:de:d4:a6:ae:b4:f5:e1:ff:85:ae:
5c:81:cb:31:e8:02:c9:ff:39:fe:ae:e1:2d:69:26:
09:6c:dc:24:7b:e5:fc:83:ee:5b:03:d1:f8:23:b7:
f3:37:43:1d:fa:d8:5a:56:a2:8e:2e:48:1f:7c:38:
e8:36:3e:02:7e:b6:e4:ee:5f:f3:c9:f0:74:f6:32:
3f:50:f8:f3:7c:81:9b:4f:f5:3c:3c:ab:af:bc:5c:
bc:b5:20:5c:a3:34:95:8c:9e:a3:17:ac:8f:e6:59:
40:5d:c7:a1:46:a0:6c:06:33:a0:f3:02:fd:7d:8b:
ae:4f:a4:b1:a3:5c:f8:f0:38:8a:b0:20:d9:ef:ca:
39:45:c2:cc:26:4d:3e:71:7f:ab:16:cd:06:70:df:
ea:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:09:6F:C6:2D:50:AD:37:16:AD:ED:92:27:4C:C8:FD:37:50:EC:A4
X509v3 Authority Key Identifier:
keyid:83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ef:cc:ab:62:27:64:f9:34:97:f8:7b:b2:c3:10:17:69:0f:
26:2b:32:e1:4f:6c:6d:8e:8f:24:43:2e:25:d2:a0:2c:2a:b3:
46:3d:ab:f8:b8:71:3e:50:32:68:d6:53:e7:b0:43:3a:af:ab:
f1:d5:55:a7:a4:f9:7d:aa:28:fa:30:fb:0b:d2:6e:f5:48:ee:
ee:2b:43:fc:b2:f4:65:2d:14:bc:15:dc:32:3d:ad:6a:19:e1:
eb:98:67:d6:56:16:24:b2:11:a4:99:d9:e2:20:a1:d1:4a:f1:
53:b3:96:74:28:f1:b8:48:e3:5c:7f:65:f4:65:64:4d:6a:30:
73:41:d1:81:35:20:60:54:70:49:dc:0e:3e:d8:92:ce:07:62:
c6:ca:2e:c9:72:8b:e7:34:18:6d:b8:20:ea:72:7b:80:af:cc:
15:9e:3b:ab:9a:0f:db:07:9f:19:92:3a:78:62:d4:db:69:d7:
01:de:5d:75:cf:01:6e:cc:e1:e2:52:15:8b:d5:5c:79:7f:e1:
38:eb:29:f0:de:eb:9b:cb:50:ad:09:90:fc:10:0b:36:f3:70:
a0:d9:97:27:0a:a8:95:a2:bd:d5:f0:b2:a8:3b:31:9e:bf:64:
10:fb:54:32:61:b9:e6:bb:4d:f6:16:64:fc:e2:da:78:7d:81:
fb:d8:08:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:18:25 2026 by rpki-client