Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
File: GyHb_7GS4UkZz-J4a69EhAw6yjw.mft (raw, json)
Hash identifier: qprlHTTaAA4OxEzBHzi/L/om2BG0xXd2rynUNprpjqA=
Subject key identifier: 78:6C:F9:BD:C1:D3:A6:F2:9F:EE:CA:AE:77:01:AC:67:23:D2:F6:67
Authority key identifier: 1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
Certificate issuer: /CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Certificate serial: 019D38D29F04D5971400899CBE0049F17206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 09:00:20 +0000
Manifest this update: Sun 29 Mar 2026 09:00:20 +0000
Manifest next update: Mon 30 Mar 2026 09:00:20 +0000
Files and hashes: 1: GyHb_7GS4UkZz-J4a69EhAw6yjw.crl (hash: CfvOaZqp/o5C4It/8M1HEKw4t+y6dPw2NhCoryDO+uw=)
2: OjQ0zzKUV1mIuissX7R6oiwC7R4.roa (hash: RqtRopS3nAAsoOtWVCcZpZzIHlMNh6J6RVxWQzfONms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:9f:04:d5:97:14:00:89:9c:be:00:49:f1:72:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Validity
Not Before: Mar 29 09:00:20 2026 GMT
Not After : Mar 30 09:00:20 2026 GMT
Subject: CN=786cf9bdc1d3a6f29feecaae7701ac6723d2f667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d7:f8:88:1d:56:42:e5:8f:0f:38:4e:2b:cb:
0e:41:d7:17:25:fd:9c:c5:66:be:4f:20:7d:7a:b5:
c5:54:ab:d6:ba:81:98:19:8e:1d:7c:73:11:4d:78:
c9:4e:fc:e4:60:a5:f9:39:74:fd:06:f3:e7:70:1f:
24:9f:e9:9b:b5:1e:67:d9:e7:90:87:44:6f:8b:eb:
d8:0c:bb:24:39:61:ea:62:a7:12:58:83:e7:7f:43:
b9:05:96:54:ae:99:22:05:54:97:91:da:22:38:21:
2e:a1:1b:17:17:48:24:cd:cf:1d:c4:01:e4:c6:ae:
1c:ed:28:d5:5a:e9:44:5e:a9:63:14:22:65:8c:2b:
8f:f3:58:8c:a3:07:02:64:b2:5f:5a:04:a7:7b:5d:
61:32:4d:2c:2a:3b:21:ce:04:94:11:6c:eb:14:2e:
bb:a3:6b:f3:59:3a:18:c7:81:ef:d1:5d:ec:da:b2:
09:54:e7:3c:28:04:49:75:2a:12:32:c7:d2:91:4f:
f6:1a:c7:fc:55:c3:d7:cb:5a:fb:03:a2:f4:b0:12:
45:49:b0:38:95:90:32:12:e5:3f:da:24:9a:95:95:
b1:72:d2:22:1f:f1:ee:a4:4b:b7:a3:0b:29:47:a3:
df:94:4c:ce:36:f3:4c:2d:08:f6:b8:aa:f6:b9:10:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6C:F9:BD:C1:D3:A6:F2:9F:EE:CA:AE:77:01:AC:67:23:D2:F6:67
X509v3 Authority Key Identifier:
keyid:1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c6:1e:b4:b6:d1:75:ff:08:bc:25:d4:0c:8e:83:c0:c2:26:
e9:3d:b9:1a:66:ba:47:84:cb:e9:d6:4d:45:30:24:49:5f:38:
8b:d7:ab:0a:ff:8e:5a:9c:b2:19:f9:d7:bd:d5:61:e8:95:bb:
5a:2e:18:e2:2c:49:01:1e:34:74:5d:91:5f:e6:cd:c8:3c:db:
a1:06:e5:d1:a9:ab:44:a1:85:61:a5:70:f9:43:a5:65:d8:b6:
bd:d1:f0:a9:22:4e:f0:d6:07:82:06:53:c3:33:d7:d1:05:04:
a1:14:99:a2:a8:05:d6:4c:f0:d3:28:4d:18:81:7a:1f:c4:56:
aa:bd:4d:8c:84:51:2e:c9:4c:24:8e:cc:ec:47:a3:54:a8:aa:
c4:ef:ca:5f:e6:e1:40:c3:fd:53:90:2f:13:ab:76:2c:f0:16:
e9:d3:1c:9b:03:d1:85:25:f9:e1:c3:02:0e:07:67:65:2f:42:
c3:60:8c:88:76:72:a5:7a:fd:39:c7:f4:4d:75:88:89:0a:ac:
e8:e2:b6:2e:af:d7:03:46:8d:7b:80:4f:98:05:6b:df:4b:df:
82:73:ef:cc:e7:70:06:29:4b:4d:35:47:99:7f:36:21:31:65:
27:8d:ea:d1:32:f0:0c:56:ac:7d:09:94:cd:03:ee:1d:d6:9d:
f6:71:c4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:22 2026 by rpki-client