Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File: gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier: JYssg8CrQpztRERns3n8PhCEax1egoiBv/Y2kaZ8ywk=
Subject key identifier: E6:C7:8B:1D:50:3A:DA:96:BF:48:BA:74:65:2F:6C:94:54:97:44:BC
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer: /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial: 01A0E88938DBE053238F0956D45C2C393B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number: 1A7A
Signing time: Mon 28 Sep 2026 15:01:42 +0000
Manifest this update: Mon 28 Sep 2026 15:01:42 +0000
Manifest next update: Tue 29 Sep 2026 15:01:42 +0000
Files and hashes: 1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: EOCDYF5OzGWrwhmTShbrogORd1uZHCRaaQb1hVf84uY=)
2: zXFwqAAnYrIjiWd8TXgaxxMmw0s.roa (hash: Ovzx2APxYoxGQIUTR5wFv0olnXJaY9uRnLcnYqntG64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:89:38:db:e0:53:23:8f:09:56:d4:5c:2c:39:3b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Validity
Not Before: Sep 28 15:01:42 2026 GMT
Not After : Sep 29 15:01:42 2026 GMT
Subject: CN=e6c78b1d503ada96bf48ba74652f6c94549744bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f4:6b:c6:5e:a1:0f:4e:fc:a8:d4:0e:c6:a1:
63:0b:8b:54:b0:27:2b:79:77:44:fb:a0:8c:c6:33:
2f:a1:f7:ab:c4:a6:6e:1b:86:98:82:51:d0:8d:ac:
d6:03:57:55:15:17:f8:51:c9:61:f0:4f:66:f8:6d:
c4:a9:3e:cb:64:94:21:fe:eb:b7:50:5c:20:3e:91:
63:ac:b7:29:c9:78:36:2b:c7:a4:42:ca:f7:aa:a8:
40:9b:9f:ff:79:1a:3c:8c:8c:c4:20:14:6d:52:ff:
a6:d3:7e:ae:d2:33:47:de:1f:ae:7f:3d:1b:6f:e0:
7b:a6:54:c2:0a:fe:7a:7e:4e:b7:ae:d1:41:6c:91:
d3:3b:07:98:c1:f2:9f:52:48:70:c2:74:4d:0e:8f:
58:28:a0:b4:f1:09:d0:94:64:73:fc:7b:9a:81:05:
88:b2:f5:a0:e1:95:5c:d2:60:44:7a:b7:1f:af:aa:
90:8f:93:de:07:52:3d:d2:2f:1b:b9:79:50:4b:9c:
7d:fb:8b:03:6a:64:04:3a:e0:73:3e:82:c7:d8:a1:
91:7a:1d:5c:c9:ee:11:67:14:f5:45:02:db:0f:ee:
19:63:2c:42:50:2d:01:a8:27:6e:69:6e:59:d2:71:
47:1c:c7:64:d2:3c:08:f1:9a:16:70:ae:91:9c:8f:
3f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C7:8B:1D:50:3A:DA:96:BF:48:BA:74:65:2F:6C:94:54:97:44:BC
X509v3 Authority Key Identifier:
keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:37:5c:44:1c:c9:81:a6:0f:d6:8d:b5:0f:bb:fc:ce:d3:16:
46:7a:a0:18:b0:3d:a0:a2:07:d4:f8:e3:aa:eb:44:9d:4f:2d:
8e:dc:98:84:b0:9b:0a:05:bf:34:89:4e:8b:2e:cc:6b:d1:f1:
fe:e8:93:b7:d9:24:35:22:ee:d3:8b:9f:de:eb:ea:20:26:59:
2a:9b:15:7c:a9:91:54:f9:e9:36:4a:f0:2a:6b:fc:a1:f6:30:
05:2c:65:70:d9:03:28:72:23:d8:0e:ba:5b:ab:d0:08:6e:06:
ef:b9:3b:a6:69:6b:de:d5:08:1c:b1:67:0b:f3:47:e4:50:c6:
25:27:bc:c2:df:7c:f7:10:de:34:48:0e:e7:0b:2b:76:91:e1:
e8:63:01:5b:5c:be:6e:62:cd:64:2f:06:cc:62:fe:13:fa:0a:
96:d9:10:a3:1b:c7:82:25:28:12:56:20:e1:d1:fa:9e:28:4b:
f0:a1:17:69:8e:70:eb:45:3e:61:91:72:f1:19:f0:2b:ee:9b:
ab:9e:e0:a3:ae:94:d7:b4:d1:3e:c1:ba:66:0d:25:1d:6b:f8:
da:4e:d1:03:0a:7f:52:f0:95:93:4b:53:84:66:70:bb:b9:e4:
3c:21:9a:cf:79:a3:6c:51:93:64:01:40:66:06:7b:62:3e:af:
e7:c0:b3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:21:21 2026 by rpki-client