Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File: gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier: pynRYUkq7tFFTiavROb2n0xRYhEJa2gCFro0J6yX6Hw=
Subject key identifier: E6:58:7A:97:6D:F6:C8:CC:6C:7E:B6:18:34:B1:7B:55:D9:2D:59:D3
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer: /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial: 019D1D250EDA2B3BE8FB5A45E73472262E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number: 1883
Signing time: Tue 24 Mar 2026 00:01:00 +0000
Manifest this update: Tue 24 Mar 2026 00:01:00 +0000
Manifest next update: Wed 25 Mar 2026 00:01:00 +0000
Files and hashes: 1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: 3f7zv/vtd7fhbL07+Il5OM9DzsVoDLby5ukYeDT5rws=)
2: zXFwqAAnYrIjiWd8TXgaxxMmw0s.roa (hash: Ovzx2APxYoxGQIUTR5wFv0olnXJaY9uRnLcnYqntG64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1d:25:0e:da:2b:3b:e8:fb:5a:45:e7:34:72:26:2e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Validity
Not Before: Mar 24 00:01:00 2026 GMT
Not After : Mar 25 00:01:00 2026 GMT
Subject: CN=e6587a976df6c8cc6c7eb61834b17b55d92d59d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:da:7b:b0:bc:95:20:b4:78:06:18:b6:17:
88:68:cc:ec:82:6d:4d:fb:a0:a5:33:3f:99:2c:14:
f9:90:13:5d:41:0e:90:c6:4f:da:40:5b:a1:93:0a:
14:c6:96:d8:2e:98:9b:7e:2e:33:e6:65:cf:65:6a:
25:23:f2:ed:c7:7f:51:31:1a:0c:36:87:54:47:46:
22:04:26:fd:36:fb:72:35:a8:e0:98:ee:53:0e:b9:
50:98:32:d5:11:08:57:92:10:86:72:ea:a1:a1:88:
ac:5c:7b:31:c2:49:53:11:5a:63:64:b6:4a:96:ea:
9e:aa:93:f9:e2:22:09:9f:66:30:12:ab:49:59:13:
c7:c8:58:d3:42:5c:4c:bb:a1:4f:46:6b:7a:da:6a:
0e:b9:65:5d:6e:fa:89:da:74:f3:80:1a:09:ce:8c:
55:95:db:9c:34:cd:d0:ef:8b:4d:4d:3a:73:71:e5:
fe:6c:b6:e8:d1:1f:17:9d:84:be:d1:b3:9f:a6:c9:
07:09:21:52:c5:11:bc:8f:93:a2:90:2d:8b:e4:80:
73:87:7f:53:45:1b:72:f4:61:54:a5:65:35:ec:51:
eb:0f:ae:b0:25:7f:1a:3b:58:89:9a:76:ac:48:54:
d8:6e:d0:92:d3:2b:f9:ce:ab:a7:ce:73:de:6c:34:
a9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:58:7A:97:6D:F6:C8:CC:6C:7E:B6:18:34:B1:7B:55:D9:2D:59:D3
X509v3 Authority Key Identifier:
keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:cf:cd:a6:1f:2d:e8:36:4d:b7:5b:52:a0:fd:18:2d:f1:a7:
19:4f:79:cc:7f:f7:aa:42:6a:5c:e7:dc:75:ef:c5:c1:de:3c:
e8:fa:2d:d8:67:e1:a3:b8:56:7c:55:1a:5c:68:12:95:1f:b7:
cf:4c:9c:e9:56:78:0a:05:a9:a2:cd:d0:62:2d:d3:10:5b:2d:
d2:e3:11:3c:4c:ca:d6:8d:08:85:91:8c:6a:e4:20:22:90:ed:
bd:04:6c:23:9c:45:1a:1f:5b:ed:5d:8f:7d:7f:75:e3:82:f1:
12:20:eb:d9:65:b9:30:80:f3:62:cb:3a:ba:5c:4f:61:ab:49:
a7:7b:7d:f8:8b:4d:92:94:91:f4:43:b8:99:43:9b:2f:f9:77:
e8:3e:d0:ce:42:2c:48:95:c4:cd:1f:02:1f:b0:bd:8a:f7:65:
97:50:19:27:67:44:29:6b:cb:5a:eb:95:67:7a:5a:99:4e:66:
aa:87:9d:35:6f:c2:57:e3:68:c0:35:15:dc:c8:19:6e:ce:3b:
b6:a7:30:2c:71:da:77:f0:2a:0f:70:45:b2:10:c2:1f:e2:20:
8a:22:f8:ec:1e:f9:10:db:fc:28:e8:d6:b7:69:1c:b4:5a:82:
5a:eb:c1:ad:04:cc:fb:ad:a4:a3:ea:b0:e5:87:02:e6:a6:98:
19:f7:23:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 03:51:50 2026 by rpki-client