
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
File: gySHKx3b4yZPpmambx9OS7Uv2FQ.mft (raw, json)
Hash identifier: 8bIA2n7/MXZV6SePmsJvKZ0W1JAlRdwT4u2pfQS+Fuk=
Subject key identifier: 8C:60:39:4A:E6:53:25:39:2E:64:68:01:1E:82:43:41:A0:63:BE:9A
Authority key identifier: 83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54
Certificate issuer: /CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854
Certificate serial: 019FF8DA9B05E3FBEB5825D400B778D3139D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
Manifest number: 1197
Signing time: Thu 13 Aug 2026 02:01:43 +0000
Manifest this update: Thu 13 Aug 2026 02:01:43 +0000
Manifest next update: Fri 14 Aug 2026 02:01:43 +0000
Files and hashes: 1: P_eGv8Ts4S81-hoIfGkINiGVVGQ.roa (hash: GLTssa41ICMBtipCA+V62cyNywz11Q3QOpboQaIrZ9o=)
2: fzzkXydSJcu8jxv7wlIrYLHaMaY.asa (hash: L5BSLPOIT1Jf6EjOfGHOiew0ovdh5GD4tkDmFzci4tI=)
3: gySHKx3b4yZPpmambx9OS7Uv2FQ.crl (hash: tJbh7VMeB0yhPaO8TEQEoL5ma1Blq90lM2MCek9I5AU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:da:9b:05:e3:fb:eb:58:25:d4:00:b7:78:d3:13:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854
Validity
Not Before: Aug 13 02:01:43 2026 GMT
Not After : Aug 14 02:01:43 2026 GMT
Subject: CN=8c60394ae65325392e6468011e824341a063be9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:78:f2:d2:4b:ef:d9:f5:9e:d5:28:89:52:84:
dc:f1:cd:50:d4:d6:78:30:54:44:1a:3c:16:1a:3b:
31:48:f8:8f:29:0f:07:04:a5:a1:0f:89:0b:4a:64:
f9:57:87:ba:6a:2e:09:f2:21:05:26:8c:f8:83:51:
6c:84:48:06:94:68:2b:eb:80:a2:90:f4:8b:ae:dc:
d3:63:14:66:05:f8:fb:4c:7b:b0:99:1c:00:97:1a:
ab:a8:03:9f:e7:a5:fa:33:3b:21:14:31:51:b6:c5:
cd:5b:58:a0:cc:b9:ac:32:3a:da:32:08:ad:8b:08:
01:68:6b:03:77:a7:eb:55:3f:68:fc:ea:95:9f:f6:
10:5a:f9:f1:59:97:87:b8:a3:70:4d:b2:8e:37:2a:
84:08:1a:f0:10:d4:08:a3:b3:84:9b:e6:70:6b:61:
ab:57:44:59:28:fd:c9:d7:f6:66:f4:a9:7d:0e:f2:
81:b8:30:f7:70:de:32:f2:d7:a7:78:e5:07:b4:40:
0b:31:bc:e8:44:2d:31:f6:6a:2e:6f:95:9e:51:0e:
27:d8:b0:54:2e:95:1a:2d:0d:49:b7:c4:f1:78:52:
50:c7:d5:48:1a:aa:e5:8d:a8:88:73:d1:5e:47:37:
ab:aa:d4:13:68:93:66:d8:9a:05:31:94:1b:bb:32:
5f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:60:39:4A:E6:53:25:39:2E:64:68:01:1E:82:43:41:A0:63:BE:9A
X509v3 Authority Key Identifier:
keyid:83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:58:fd:18:a7:44:58:1d:03:25:e7:96:ac:bf:87:d5:b6:44:
ff:0c:97:d9:2a:a7:e8:ef:20:3f:e8:a7:7b:79:89:60:3d:7d:
e4:39:f1:57:1e:86:cb:e4:d4:98:e5:b1:d3:1c:b8:71:10:9c:
af:b3:2d:ef:b8:79:c6:2a:39:5a:d6:68:76:7a:86:1a:8f:bc:
38:fa:39:82:7f:96:c7:8b:63:cf:ff:7c:e4:87:f4:47:63:6b:
90:2e:6a:dc:3c:e0:84:d3:95:20:54:08:9a:5a:0e:cc:22:31:
05:cf:92:07:23:7a:35:e0:f6:e9:c1:d8:d2:60:42:7a:9e:93:
e0:8d:3a:91:5d:b6:0d:8a:eb:89:89:87:e7:fc:92:1f:b6:1f:
db:f6:ac:87:d2:58:ba:20:08:9d:d1:87:ee:90:05:a6:e7:92:
78:78:55:09:97:ab:8b:95:20:7d:1f:f7:e4:ba:3a:1b:18:51:
f1:60:87:40:8b:96:f3:9f:cd:43:10:6b:dd:fe:07:f2:a5:13:
e0:d7:08:b5:c7:60:e1:4d:5d:d2:23:82:1f:97:95:d5:fc:50:
d4:7a:4c:d9:7e:61:6c:e6:da:8f:2c:62:a7:e8:34:1f:30:24:
6e:f3:d4:a3:a5:34:a6:e6:2a:6f:4d:6a:da:57:11:67:0f:2a:
4a:2a:6a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:59:12 2026 by rpki-client