Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
File: gySHKx3b4yZPpmambx9OS7Uv2FQ.mft (raw, json)
Hash identifier: Lswb9a1flKC7Cxi7tVwrJ/UNB7bH70QFaJqNj+ITuPA=
Subject key identifier: 46:FB:8E:AE:31:A8:F8:1E:97:72:24:C7:E5:9D:2E:B7:F7:52:DE:1F
Authority key identifier: 83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54
Certificate issuer: /CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854
Certificate serial: 01A0EC2EAA81A626A064A1169652876368D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
Manifest number: 1215
Signing time: Tue 29 Sep 2026 08:01:16 +0000
Manifest this update: Tue 29 Sep 2026 08:01:16 +0000
Manifest next update: Wed 30 Sep 2026 08:01:16 +0000
Files and hashes: 1: P_eGv8Ts4S81-hoIfGkINiGVVGQ.roa (hash: GLTssa41ICMBtipCA+V62cyNywz11Q3QOpboQaIrZ9o=)
2: fzzkXydSJcu8jxv7wlIrYLHaMaY.asa (hash: L5BSLPOIT1Jf6EjOfGHOiew0ovdh5GD4tkDmFzci4tI=)
3: gySHKx3b4yZPpmambx9OS7Uv2FQ.crl (hash: VMV1EfgtBpjyX0kTec3XdDJrFG8khTHfOPeUXv3HYQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:aa:81:a6:26:a0:64:a1:16:96:52:87:63:68:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854
Validity
Not Before: Sep 29 08:01:16 2026 GMT
Not After : Sep 30 08:01:16 2026 GMT
Subject: CN=46fb8eae31a8f81e977224c7e59d2eb7f752de1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:93:b2:ae:a9:59:5e:42:01:34:18:30:33:ec:
12:82:5b:e3:71:03:c8:c6:e4:44:bf:b5:2f:81:05:
01:b4:5e:cd:7c:e1:5f:26:d8:f0:ee:67:f3:60:49:
46:2a:24:cf:98:07:f0:98:75:03:49:56:ae:6e:e8:
2a:37:0f:45:17:cd:49:fd:59:d3:f3:6d:a9:43:a0:
ca:f5:06:d0:bd:04:8a:36:84:f9:34:35:9e:d4:bc:
9b:a8:3a:08:7e:8f:15:0a:0b:56:c0:6b:da:15:77:
f4:de:b5:33:68:3f:e0:64:74:86:75:9f:63:0d:1f:
c9:f5:84:a4:6b:9d:19:70:63:c0:b0:cf:34:98:cd:
a3:5c:11:c3:22:7d:dc:bd:3f:ee:80:21:57:e9:7a:
c7:d1:7a:75:a8:be:c7:cd:75:22:27:58:3d:02:12:
ec:65:94:ed:79:bb:b3:47:83:04:50:4f:f1:6e:e6:
c0:cd:77:5c:8d:ef:fc:d9:d1:69:8f:52:77:3a:59:
41:1d:67:34:05:58:41:21:78:0d:e1:d4:08:7b:5d:
12:53:4d:aa:e1:74:41:4c:79:b1:5e:ff:88:19:67:
42:f5:9f:22:7b:cd:a8:f3:20:d5:58:23:f4:64:17:
2a:78:1a:34:da:37:41:bc:d4:19:90:87:9d:0c:f2:
3f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FB:8E:AE:31:A8:F8:1E:97:72:24:C7:E5:9D:2E:B7:F7:52:DE:1F
X509v3 Authority Key Identifier:
keyid:83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ba:4e:91:24:a8:ae:64:0e:93:9b:c5:bb:fd:9f:19:87:89:
ab:10:b3:1c:32:d0:00:a6:b0:7b:b1:4b:b1:bb:5c:02:b9:94:
c7:c9:9f:b3:e3:5a:8e:79:3e:0c:40:6e:51:29:40:76:ce:57:
d6:25:09:f2:8e:22:a4:b9:c3:99:34:4b:8e:8e:40:7e:25:52:
26:e4:b6:d7:cb:92:8b:b3:e3:3c:a9:91:79:ef:10:22:44:c6:
75:6a:89:17:e2:fe:c6:78:6a:f0:ea:38:0c:83:30:09:c6:a6:
04:6f:93:38:78:bd:f3:45:db:af:0a:f0:c5:b5:27:88:d5:c8:
50:48:23:6c:6c:6a:53:08:7a:b4:9a:aa:19:67:fe:f2:7f:a2:
14:59:46:c5:de:85:0a:83:f7:cb:9b:82:f7:bf:cf:82:ab:96:
49:47:2c:c3:bc:c1:61:5a:89:d5:75:90:3d:79:a4:19:b4:25:
0f:50:3a:90:fa:ff:ec:aa:c9:96:2c:4d:62:2e:95:71:3e:46:
02:98:20:02:1f:9b:82:d1:9d:7c:b1:25:7b:dc:cf:53:a8:ae:
86:82:5e:63:32:6b:e7:56:9f:79:98:72:be:b7:05:02:20:8f:
59:bb:af:0d:93:85:8c:da:f3:5c:2b:40:8f:7f:b6:67:0b:29:
13:92:a0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:45:17 2026 by rpki-client