Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
File: gySHKx3b4yZPpmambx9OS7Uv2FQ.mft (raw, json)
Hash identifier: 9NmW+63I9aZWLEMm+/5RjIfALpvtUtAqCwGHD5xVkcM=
Subject key identifier: DA:D0:1C:B1:61:0B:7B:88:B3:52:F5:30:62:BC:AF:FE:AB:4D:42:30
Authority key identifier: 83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54
Certificate issuer: /CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854
Certificate serial: 019EF94ABEFEC72088BBDAC02380671F402E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
Manifest number: 1112
Signing time: Wed 24 Jun 2026 11:01:25 +0000
Manifest this update: Wed 24 Jun 2026 11:01:25 +0000
Manifest next update: Thu 25 Jun 2026 11:01:25 +0000
Files and hashes: 1: P_eGv8Ts4S81-hoIfGkINiGVVGQ.roa (hash: GLTssa41ICMBtipCA+V62cyNywz11Q3QOpboQaIrZ9o=)
2: gySHKx3b4yZPpmambx9OS7Uv2FQ.crl (hash: QQXfAlxky+NjA66q/S71CysjFtK9ledIb8RzedtpyRY=)
3: veGRJyfVlGMUeDlXsMIWMrUCUkY.asa (hash: iDuke+wunsJJ6I+kgnxyUVmEGdAcBoO8S3XojBOWblY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:4a:be:fe:c7:20:88:bb:da:c0:23:80:67:1f:40:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854
Validity
Not Before: Jun 24 11:01:25 2026 GMT
Not After : Jun 25 11:01:25 2026 GMT
Subject: CN=dad01cb1610b7b88b352f53062bcaffeab4d4230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:2b:93:65:93:d4:3c:80:c5:87:63:34:d3:
e4:c4:25:8d:11:f0:30:dc:99:1e:60:a7:c7:90:d9:
2b:c7:51:01:dd:70:f7:22:0e:9e:f5:8e:fa:24:ac:
fe:cd:07:ca:3b:30:ac:14:00:90:c9:29:ef:9a:66:
cf:60:fe:53:6d:12:e2:5b:5a:5a:7f:d1:68:b0:18:
94:15:5c:5c:4e:51:f2:e3:37:ca:1b:95:99:94:e7:
c0:47:8d:ab:33:33:03:f9:29:9e:86:4d:f4:44:2e:
a0:cb:c7:be:a7:fe:2e:ff:c8:11:f3:5d:33:6b:52:
4f:ce:e2:40:2b:3f:03:6e:19:6f:22:57:fb:b5:0e:
7a:d8:ef:f9:35:ec:d5:c6:30:44:f4:54:bb:85:1e:
46:64:a3:23:6e:3a:85:ba:72:e7:99:ed:b7:dd:d6:
25:c5:7d:73:6f:a5:5b:2d:93:55:1b:ff:47:12:50:
d0:b6:fe:21:46:a7:16:bb:e2:77:1d:35:40:30:6a:
77:fb:74:e3:30:af:1e:20:b0:17:9a:be:26:73:94:
d1:ef:72:ee:9d:9a:6d:47:73:0a:9e:2c:d6:63:ff:
b7:dc:c2:37:41:ef:d2:eb:85:b0:db:d4:24:d5:a5:
87:d0:4e:7e:41:1d:10:b6:cd:80:96:1c:34:e4:91:
60:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D0:1C:B1:61:0B:7B:88:B3:52:F5:30:62:BC:AF:FE:AB:4D:42:30
X509v3 Authority Key Identifier:
keyid:83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bd:34:f2:c4:e1:3e:89:27:70:f9:56:2f:ca:71:cf:f9:ea:
db:4c:cb:a7:89:16:f3:26:87:60:b5:a8:36:f1:b3:4e:f6:cf:
7d:9c:0c:6d:e7:cc:3a:77:b3:38:3c:33:91:90:18:ff:1f:33:
20:3a:a3:b8:93:2e:e8:7a:9c:91:2b:bb:50:70:4a:f0:d1:80:
87:d8:3f:b7:bd:ae:44:88:43:ae:4f:f5:79:e8:b5:9f:2f:31:
2d:02:4b:89:54:82:70:f3:63:1e:b1:15:7b:b1:27:89:ff:5f:
a7:76:3a:8d:67:75:12:eb:43:4e:c3:4e:5e:c8:3c:23:84:9f:
dc:ba:a3:f8:42:04:d4:8e:08:29:ca:79:7c:4b:d5:b5:54:af:
45:b7:0b:24:60:62:ec:47:e9:d2:1a:16:08:21:d2:a4:13:26:
aa:1a:c0:1b:f7:12:b2:c5:f2:fd:c8:9e:6f:41:c7:76:43:93:
64:6a:07:30:e7:c9:f6:0a:a5:63:ef:42:91:04:4d:07:0e:3d:
70:31:35:40:09:4a:87:de:e5:9b:ca:d9:68:88:fd:8b:90:9c:
62:cd:7e:82:8a:c7:6c:be:c9:da:5e:2a:77:bf:66:7a:3c:c7:
1e:80:b0:ef:2d:c8:3d:11:0f:0c:99:29:aa:dd:9a:99:74:ee:
ad:4d:63:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ75Sr7+xyCIu9rAI4BnH0AuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMjQ4NzJiMWRkYmUzMjY0ZmE2NjZhNjZmMWY0ZTRiYjUy
ZmQ4NTQwHhcNMjYwNjI0MTEwMTI1WhcNMjYwNjI1MTEwMTI1WjAzMTEwLwYDVQQD
EyhkYWQwMWNiMTYxMGI3Yjg4YjM1MmY1MzA2MmJjYWZmZWFiNGQ0MjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT4rk2WT1DyAxYdjNNPkxCWNEfAw
3JkeYKfHkNkrx1EB3XD3Ig6e9Y76JKz+zQfKOzCsFACQySnvmmbPYP5TbRLiW1pa
f9FosBiUFVxcTlHy4zfKG5WZlOfAR42rMzMD+Smehk30RC6gy8e+p/4u/8gR810z
a1JPzuJAKz8DbhlvIlf7tQ562O/5NezVxjBE9FS7hR5GZKMjbjqFunLnme233dYl
xX1zb6VbLZNVG/9HElDQtv4hRqcWu+J3HTVAMGp3+3TjMK8eILAXmr4mc5TR73Lu
nZptR3MKnizWY/+33MI3Qe/S64Ww29Qk1aWH0E5+QR0Qts2Alhw05JFgcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrQHLFhC3uIs1L1MGK8r/6rTUIwMB8GA1UdIwQY
MBaAFIMkhysd2+MmT6Zmpm8fTku1L9hUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3lTSEt4M2I0eVpQcG1hbWJ4OU9TN1V2MkZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS83NzhjNjYtOWE1MS00M2M2LTkyYTct
Zjg3YjYyZmI2MWZmLzEvZ3lTSEt4M2I0eVpQcG1hbWJ4OU9TN1V2MkZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS83NzhjNjYtOWE1MS00M2M2LTkyYTctZjg3YjYyZmI2MWZm
LzEvZ3lTSEt4M2I0eVpQcG1hbWJ4OU9TN1V2MkZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATL008sTh
PokncPlWL8pxz/nq20zLp4kW8yaHYLWoNvGzTvbPfZwMbefMOnezODwzkZAY/x8z
IDqjuJMu6HqckSu7UHBK8NGAh9g/t72uRIhDrk/1eei1ny8xLQJLiVSCcPNjHrEV
e7Enif9fp3Y6jWd1EutDTsNOXsg8I4Sf3Lqj+EIE1I4IKcp5fEvVtVSvRbcLJGBi
7Efp0hoWCCHSpBMmqhrAG/cSssXy/cieb0HHdkOTZGoHMOfJ9gqlY+9CkQRNBw49
cDE1QAlKh97lm8rZaIj9i5CcYs1+gorHbL7J2l4qd79mejzHHoCw7y3IPREPDJkp
qt2amXTurU1jBg==
-----END CERTIFICATE-----
Generated at Wed Jun 24 21:18:25 2026 by rpki-client