Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
File: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft (raw, json)
Hash identifier: kl5A8X3BR8v3TIy7DOCWS0SjDT2sLAkCQauoYgVfKrQ=
Subject key identifier: F2:82:35:E7:88:86:9A:FE:91:62:BE:22:FB:ED:C3:50:25:3E:6D:F2
Authority key identifier: 83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
Certificate issuer: /CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Certificate serial: 01A08D568DD3E6D2791F7CA0C2ABD030E303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 22:00:54 +0000
Manifest this update: Thu 10 Sep 2026 22:00:54 +0000
Manifest next update: Fri 11 Sep 2026 22:00:54 +0000
Files and hashes: 1: GFlr8uF2r8cVqmDJ2JXiNxwY91k.roa (hash: gwpmNBpGA7FAOM9cF2rmHJiCr7Axf/GeGVR5kW5sxyc=)
2: eR1kJt3AkvnRh9nnXa_66NaaHYY.roa (hash: vhKP6Uu//ijg9IWe7RT8txZCBV20sw0GmYZPsJN+rXk=)
3: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl (hash: WvNw+pUm+EjEUcai1WHkYAICA1y8NFpP6BqfGqz/Pq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:56:8d:d3:e6:d2:79:1f:7c:a0:c2:ab:d0:30:e3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Validity
Not Before: Sep 10 22:00:54 2026 GMT
Not After : Sep 11 22:00:54 2026 GMT
Subject: CN=f28235e788869afe9162be22fbedc350253e6df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a5:ec:91:03:6d:68:72:ec:0d:73:c0:51:f0:
62:9a:a5:5e:83:6d:17:38:6c:62:0c:e6:a5:89:84:
93:44:03:93:3c:1d:45:a4:f0:9d:67:88:f6:48:a5:
53:e5:ab:37:e2:1d:f7:64:df:87:9f:b5:bf:ce:48:
fa:50:f2:ba:cc:f1:9e:96:2c:0d:ca:f9:59:2e:5a:
70:87:e0:5d:9c:e4:47:d3:0b:f2:22:cb:29:61:c2:
90:b6:60:9a:2c:b7:4c:f8:1c:e9:a6:57:c3:1d:d9:
94:c6:d5:a8:6f:bc:44:02:ab:43:e7:24:30:86:d6:
38:c0:db:6e:d9:87:b4:0c:fd:3f:ff:82:cc:22:81:
3a:ee:fe:97:54:59:15:0f:21:80:44:0a:2e:d3:35:
4b:df:2d:5a:f8:25:b6:f9:02:ff:78:fa:8a:76:7c:
de:8e:20:81:92:64:1d:8b:08:17:41:4d:d0:f8:56:
8d:d5:27:1c:45:22:76:79:f3:8d:18:92:63:d7:42:
85:f1:86:5d:78:b9:33:df:86:5d:cb:37:3c:f8:5e:
6e:4c:07:97:2a:5a:7b:b2:f0:ba:95:ff:5b:00:0c:
a9:be:c3:a9:92:a6:b0:ef:7d:1b:9d:4b:bc:23:ec:
20:24:8f:fd:88:13:55:fa:dd:e5:5a:4d:0c:82:b6:
cc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:82:35:E7:88:86:9A:FE:91:62:BE:22:FB:ED:C3:50:25:3E:6D:F2
X509v3 Authority Key Identifier:
keyid:83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f2:da:b5:56:1b:1c:d7:8f:73:80:77:bd:a6:74:52:64:86:
d7:2f:9d:c8:fc:cc:21:b5:8b:20:7a:eb:0f:a8:53:56:d3:84:
97:88:67:22:db:37:b9:29:ff:aa:e2:47:ef:4b:ce:7f:2c:53:
eb:2f:8e:6f:20:a0:00:8d:64:5e:35:c8:2c:39:a4:0f:0c:49:
0d:02:d8:1e:91:aa:11:d7:db:d4:92:ce:b1:16:be:7b:5e:c1:
7d:e3:85:6e:37:9c:82:2f:e6:61:b2:74:9e:15:f1:4b:5c:db:
26:b3:ce:19:23:0f:17:3e:f4:f9:56:be:d2:94:65:1e:0f:81:
f1:0e:72:e0:79:8c:04:03:91:37:32:50:94:56:a7:b4:58:ce:
6d:1e:6a:a1:8f:65:2d:88:fa:b0:c7:b1:52:d5:42:c3:d4:68:
3a:c7:ce:57:8d:66:e6:b0:d5:96:dd:d3:3e:28:6c:3c:47:03:
20:2a:2f:d8:b4:ea:4b:65:3f:d8:ec:c5:c8:9e:89:66:45:d2:
6a:75:52:04:d9:95:be:c2:ca:c8:5c:e1:88:f5:7b:c1:16:6b:
45:a8:fd:81:00:ae:87:2f:ec:42:06:c5:e6:37:e7:fc:c3:79:
26:0b:cb:c7:c0:56:18:c6:3e:51:8f:05:06:a1:da:27:23:e7:
9d:ea:66:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:35:56 2026 by rpki-client