Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
File: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft (raw, json)
Hash identifier: 0UCgpL/E2ynMDyLJrmboFtp3gNXvwdAbqO8yH05D8lA=
Subject key identifier: B9:DF:18:C4:8A:8C:93:06:31:E8:7C:12:DA:1E:22:DA:B0:81:57:E1
Authority key identifier: 83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
Certificate issuer: /CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Certificate serial: 019FA1BBEB82DC7E9DE1D7E6AE91EA4BFA63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 04:01:15 +0000
Manifest this update: Mon 27 Jul 2026 04:01:15 +0000
Manifest next update: Tue 28 Jul 2026 04:01:15 +0000
Files and hashes: 1: GFlr8uF2r8cVqmDJ2JXiNxwY91k.roa (hash: gwpmNBpGA7FAOM9cF2rmHJiCr7Axf/GeGVR5kW5sxyc=)
2: eR1kJt3AkvnRh9nnXa_66NaaHYY.roa (hash: vhKP6Uu//ijg9IWe7RT8txZCBV20sw0GmYZPsJN+rXk=)
3: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl (hash: 7uurV+C8CEnZpNeuW7t5yQPg3bPXAjLuNMQeOkOdxKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:eb:82:dc:7e:9d:e1:d7:e6:ae:91:ea:4b:fa:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Validity
Not Before: Jul 27 04:01:15 2026 GMT
Not After : Jul 28 04:01:15 2026 GMT
Subject: CN=b9df18c48a8c930631e87c12da1e22dab08157e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:f8:ce:1c:c7:23:12:37:13:a7:a4:1f:5e:
37:35:41:f2:2f:b0:10:84:f6:b0:a7:66:5c:84:81:
11:91:7b:c7:5d:1b:39:89:44:68:75:dc:f0:92:f8:
78:da:5f:fd:b0:6e:3b:02:e7:1b:4d:9e:58:55:78:
2b:31:28:55:00:c6:c9:b7:41:5b:a0:01:0b:26:ab:
8c:52:a5:12:23:7e:90:d3:9e:83:f6:5e:6e:21:a9:
97:d3:9d:a8:14:c2:12:e3:44:c0:d9:29:cf:ac:57:
6a:83:7a:55:eb:ad:d1:ea:d0:f4:58:7b:0a:39:de:
07:22:36:55:49:86:5a:8d:32:fc:3d:da:93:67:8e:
bc:e3:55:80:d9:f7:02:45:75:18:df:ee:19:76:ad:
32:6a:39:13:67:ea:73:c4:91:05:2b:c6:d0:c4:dc:
a9:e8:a5:ee:f9:eb:90:0d:52:a2:40:9c:40:51:bb:
bb:81:ff:98:2c:bb:b4:08:d4:ca:ef:d0:17:6a:ab:
93:a5:7f:5c:78:b7:8c:a4:dc:69:4a:c8:ad:e3:c4:
a8:56:c1:ba:62:8f:94:05:0e:0d:13:51:54:a2:42:
d4:a4:4a:9a:53:b0:b4:6a:f0:79:07:5d:c9:39:49:
f7:9a:b3:e5:8c:88:b1:c9:3a:f2:18:a1:67:ae:cc:
4d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DF:18:C4:8A:8C:93:06:31:E8:7C:12:DA:1E:22:DA:B0:81:57:E1
X509v3 Authority Key Identifier:
keyid:83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:62:b5:2c:45:31:f5:5c:2f:c6:84:a9:20:b4:25:15:ae:d9:
f2:c4:98:dc:11:d1:ed:12:54:bb:9b:2c:5d:8e:d4:a0:09:33:
df:4c:b1:e3:0b:51:33:3d:65:6b:dc:31:83:c0:86:04:c5:17:
17:0d:c9:57:bb:c4:6c:11:ff:e2:7d:17:8c:47:e3:78:73:a7:
0a:27:7b:58:cf:15:83:1c:bc:df:20:6f:47:17:3a:18:1d:c4:
f9:1d:b6:cf:4b:ef:66:e9:49:35:49:d9:e5:d0:72:76:bd:95:
a4:d5:4c:e7:8e:e7:3b:3f:1b:7b:1f:38:86:f2:24:36:f0:da:
c7:1a:7f:51:63:f1:46:d1:3a:a0:b3:91:37:1a:65:bd:83:57:
8c:13:b1:38:dc:37:e4:e1:11:e4:31:42:a1:df:54:15:01:74:
c1:2d:b2:cc:18:a1:95:ae:00:80:d1:8e:66:5a:ab:80:40:6c:
b6:39:72:77:34:f1:78:b3:86:17:98:b9:38:db:dc:3b:61:55:
75:49:3d:c4:74:40:d8:23:6c:1d:df:27:a2:df:d7:fd:e2:a5:
33:f6:f6:d2:66:f2:91:b7:b3:7a:8e:c6:e2:e4:66:95:37:e1:
a4:df:be:c9:59:61:e7:c8:38:28:a5:1d:69:d2:d3:b5:6e:dd:
47:77:92:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:43:27 2026 by rpki-client