Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
File: GyHb_7GS4UkZz-J4a69EhAw6yjw.mft (raw, json)
Hash identifier: f9t0bHo+OYFCNpxR0B/XAJ+x06j+7j9/AKTv9l9Hmng=
Subject key identifier: DC:BA:D4:16:B9:CA:15:A9:61:59:2D:62:63:2A:BE:70:3F:15:0D:49
Authority key identifier: 1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
Certificate issuer: /CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Certificate serial: 01A181BD93D0C92FA065097005C86A699192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
Manifest number: 1ACB
Signing time: Wed 28 Oct 2026 09:00:47 +0000
Manifest this update: Wed 28 Oct 2026 09:00:47 +0000
Manifest next update: Thu 29 Oct 2026 09:00:47 +0000
Files and hashes: 1: GyHb_7GS4UkZz-J4a69EhAw6yjw.crl (hash: wxD3IPeCGba5QJQdIOG+tIEz2/YionxjMkE6wnQGYsE=)
2: OjQ0zzKUV1mIuissX7R6oiwC7R4.roa (hash: RqtRopS3nAAsoOtWVCcZpZzIHlMNh6J6RVxWQzfONms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:93:d0:c9:2f:a0:65:09:70:05:c8:6a:69:91:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Validity
Not Before: Oct 28 09:00:47 2026 GMT
Not After : Oct 29 09:00:47 2026 GMT
Subject: CN=dcbad416b9ca15a961592d62632abe703f150d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:6e:09:c0:db:13:23:b2:a0:4c:ca:ef:a0:
b3:a4:29:36:88:7e:ad:b8:ab:65:7d:9c:e2:f3:98:
e3:16:cd:6a:ca:5c:2d:cf:cf:d6:1b:b1:b3:86:4c:
a3:f9:73:3d:75:24:a2:cb:bb:8c:4e:7b:53:3e:42:
5e:a7:e7:70:87:36:16:72:6e:d9:3e:3b:12:4c:3a:
6b:44:be:3f:d1:31:85:f4:ae:17:81:e0:8f:0c:7d:
74:11:5d:64:02:86:55:7b:46:bf:87:06:90:94:3e:
7f:f9:6d:f6:17:b2:41:75:cf:d5:fd:52:26:0f:75:
44:d2:ef:e0:a6:7f:3a:20:3d:2f:2d:27:4a:a6:db:
18:03:14:39:ce:bb:fc:51:c2:72:26:b1:e0:b8:21:
43:09:ef:55:30:2a:eb:14:13:3f:f9:11:9f:4c:d0:
1b:33:d1:d5:c2:70:1f:98:c2:b1:37:a3:40:18:75:
a0:66:db:a9:8d:34:eb:0d:9a:6e:72:c3:ad:58:36:
a8:6a:95:c8:ad:f9:e2:f8:ae:66:22:c7:d8:c1:11:
fc:45:89:9a:1b:01:e8:dd:1d:33:2f:5a:81:c9:e4:
38:3d:12:2a:63:57:ab:0e:20:b7:a2:72:01:80:d4:
dd:df:15:8b:14:3b:12:d9:b9:f1:5e:19:5c:8b:ca:
d8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BA:D4:16:B9:CA:15:A9:61:59:2D:62:63:2A:BE:70:3F:15:0D:49
X509v3 Authority Key Identifier:
keyid:1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:96:7e:c1:10:ca:80:7f:9c:ed:5f:75:72:7a:a0:e6:e8:bb:
2e:32:e0:1f:34:14:b0:5e:c3:f3:51:c8:55:cd:41:c4:96:0a:
2b:4b:c8:b4:17:9a:51:ec:42:74:9c:69:13:bc:02:a5:13:6c:
2f:dc:bc:a1:8a:38:5c:84:ea:16:6f:81:c4:21:08:bd:d5:6c:
28:0c:d4:c5:f9:11:d4:f4:a4:0e:c9:d6:88:3a:5c:6e:77:ab:
60:02:ea:7c:30:d0:49:b7:4b:37:61:49:9d:d7:11:64:2f:8b:
4a:62:bf:91:28:a2:07:15:be:86:e9:c1:7c:15:5a:17:71:68:
4d:ce:a1:8c:11:15:6a:75:0e:57:93:3a:60:f1:86:68:1d:2f:
ae:ab:05:14:27:2b:2a:fe:08:3f:24:26:97:8c:d1:bd:7d:c7:
df:ee:93:3d:b8:7f:f9:c9:09:f6:f5:49:86:ea:7c:f8:9e:a4:
be:e1:f2:91:d9:dd:b9:e2:22:5f:e4:c7:93:86:2f:f9:1a:ff:
1a:26:7e:89:9c:8b:97:a8:ce:9d:55:fb:22:42:68:12:7b:a2:
61:2a:8b:64:90:22:ca:5b:4e:18:1c:18:1d:f1:01:cf:08:2f:
5e:c5:d6:df:df:47:42:29:cc:0c:df:65:39:1d:d0:4e:b4:e9:
ac:5a:97:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:45:14 2026 by rpki-client