Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File: gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier: PhJsD2TrZNaBvmAjOsjRRMB1DJ1rZRxCePyNw1TE4sU=
Subject key identifier: 2F:87:D7:4B:93:7B:0A:04:FC:00:1B:DB:A2:A0:5D:CC:9E:CB:48:40
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer: /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial: 019EEE9011B052291ADE69A18B98C5DD8F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number: 1974
Signing time: Mon 22 Jun 2026 09:01:19 +0000
Manifest this update: Mon 22 Jun 2026 09:01:19 +0000
Manifest next update: Tue 23 Jun 2026 09:01:19 +0000
Files and hashes: 1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: tG7XWjC8R2y5+KXhSKhNPHzkvb2PKJ3eOnxGBjcGpPs=)
2: zXFwqAAnYrIjiWd8TXgaxxMmw0s.roa (hash: Ovzx2APxYoxGQIUTR5wFv0olnXJaY9uRnLcnYqntG64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:90:11:b0:52:29:1a:de:69:a1:8b:98:c5:dd:8f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Validity
Not Before: Jun 22 09:01:19 2026 GMT
Not After : Jun 23 09:01:19 2026 GMT
Subject: CN=2f87d74b937b0a04fc001bdba2a05dcc9ecb4840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:b3:79:16:0b:7c:4e:b0:3e:02:79:09:01:
cd:3d:90:fd:9a:e7:4a:83:14:b4:ee:09:f3:f0:f6:
22:91:6f:99:ef:65:55:d3:1e:96:6b:a1:32:36:4b:
0e:41:5f:cd:83:f9:19:db:c3:56:93:c7:2c:cc:e0:
d2:9f:f9:13:9d:4d:fe:7b:e0:4f:b0:d7:bd:31:11:
61:5e:99:50:2d:84:32:6e:68:8c:14:ec:5b:42:35:
b4:49:69:0d:ef:d6:f5:63:9c:d2:d6:fc:b2:7c:00:
ef:92:ba:26:a1:97:c3:d8:70:fb:5e:f7:b2:be:1d:
9b:e1:7e:68:91:de:2b:c2:96:20:c8:4f:c1:72:1c:
76:d4:30:be:be:1b:34:56:01:36:f3:c1:b3:8f:54:
53:37:c7:4d:04:c5:44:06:91:4b:ad:93:c7:11:b6:
97:74:e2:12:aa:90:05:bf:7d:e1:bc:cf:90:59:15:
a7:4d:cc:a3:0f:f5:ce:a0:4f:ad:7e:f0:72:be:45:
c1:d0:85:5e:70:98:75:1e:c7:fa:a1:f0:67:42:bc:
ac:4a:fa:32:0e:72:cf:37:ad:71:ad:9c:82:93:3c:
33:20:77:d8:65:c4:83:6a:6d:c1:52:96:28:e6:86:
49:cc:0c:09:fa:83:4c:27:b2:a0:b1:5b:c8:44:cc:
47:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:87:D7:4B:93:7B:0A:04:FC:00:1B:DB:A2:A0:5D:CC:9E:CB:48:40
X509v3 Authority Key Identifier:
keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:36:ad:ee:40:32:92:51:a4:b4:91:09:38:be:9c:ae:09:c4:
9e:2a:a8:90:02:e5:4a:c5:90:9a:bd:5d:a8:1d:60:f1:b8:52:
08:0f:69:3c:8c:02:49:f1:6e:79:38:fc:e4:40:f3:fc:1e:eb:
b6:55:8a:74:07:76:8d:44:90:8e:e2:99:09:bc:2e:24:81:69:
49:b0:60:73:5c:ac:38:60:b4:39:e5:41:9a:81:06:6c:88:59:
fe:aa:d7:66:4e:71:69:fd:f2:38:a7:04:0a:c5:e6:b1:67:2c:
ee:2b:f1:e5:be:d4:71:f7:f2:03:a3:b4:28:c5:aa:f8:2a:55:
70:28:1a:82:18:d7:19:69:7f:99:7a:97:18:2a:f2:48:2c:89:
75:9c:77:84:c3:ac:60:37:d6:da:55:cd:a0:ba:c8:05:cb:7d:
71:22:b4:f7:fe:03:f9:1f:df:ab:6d:2b:48:f1:28:a4:9c:bd:
df:48:24:15:2c:5f:2f:b0:41:a0:1f:6c:78:98:2f:63:de:27:
b0:93:00:a4:fd:00:74:76:1e:95:13:88:b3:af:15:00:4d:0b:
48:bc:aa:6e:f3:7f:91:e8:bc:06:b4:6c:07:97:29:21:96:53:
77:3d:e3:eb:59:6e:31:77:89:5f:10:64:58:fc:79:8f:7a:22:
7b:a0:dc:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ukBGwUika3mmhi5jF3Y+eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMjRjNWRmMTk3ODlkNTI1OTEwNGUwYWUwZGNkNDY3MmE4
ZTJiYWIwHhcNMjYwNjIyMDkwMTE5WhcNMjYwNjIzMDkwMTE5WjAzMTEwLwYDVQQD
EygyZjg3ZDc0YjkzN2IwYTA0ZmMwMDFiZGJhMmEwNWRjYzllY2I0ODQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgezeRYLfE6wPgJ5CQHNPZD9mudK
gxS07gnz8PYikW+Z72VV0x6Wa6EyNksOQV/Ng/kZ28NWk8cszODSn/kTnU3+e+BP
sNe9MRFhXplQLYQybmiMFOxbQjW0SWkN79b1Y5zS1vyyfADvkromoZfD2HD7Xvey
vh2b4X5okd4rwpYgyE/Bchx21DC+vhs0VgE288Gzj1RTN8dNBMVEBpFLrZPHEbaX
dOISqpAFv33hvM+QWRWnTcyjD/XOoE+tfvByvkXB0IVecJh1Hsf6ofBnQrysSvoy
DnLPN61xrZyCkzwzIHfYZcSDam3BUpYo5oZJzAwJ+oNMJ7KgsVvIRMxHiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+H10uTewoE/AAb26KgXcyey0hAMB8GA1UdIwQY
MBaAFIMkxd8ZeJ1SWRBOCuDc1GcqjiurMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3lURjN4bDRuVkpaRUU0SzROelVaeXFPSzZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80YjJlNDktZjY2Ny00OTRhLWFmZTkt
NmRmM2U0YTRlZWIxLzEvZ3lURjN4bDRuVkpaRUU0SzROelVaeXFPSzZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy80YjJlNDktZjY2Ny00OTRhLWFmZTktNmRmM2U0YTRlZWIx
LzEvZ3lURjN4bDRuVkpaRUU0SzROelVaeXFPSzZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuDat7kAy
klGktJEJOL6crgnEniqokALlSsWQmr1dqB1g8bhSCA9pPIwCSfFueTj85EDz/B7r
tlWKdAd2jUSQjuKZCbwuJIFpSbBgc1ysOGC0OeVBmoEGbIhZ/qrXZk5xaf3yOKcE
CsXmsWcs7ivx5b7UcffyA6O0KMWq+CpVcCgaghjXGWl/mXqXGCrySCyJdZx3hMOs
YDfW2lXNoLrIBct9cSK09/4D+R/fq20rSPEopJy930gkFSxfL7BBoB9seJgvY94n
sJMApP0AdHYelROIs68VAE0LSLyqbvN/kei8BrRsB5cpIZZTdz3j61luMXeJXxBk
WPx5j3oie6DckA==
-----END CERTIFICATE-----
Generated at Mon Jun 22 13:12:21 2026 by rpki-client