Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
File: GyHb_7GS4UkZz-J4a69EhAw6yjw.mft (raw, json)
Hash identifier: M/JX9SMFz15ElgTuNLS4ruV0BQ+UTqNvKcicBR6jdlo=
Subject key identifier: 9B:4C:89:F7:AD:93:CF:12:45:BE:45:C1:21:DC:E6:C7:D3:05:86:DC
Authority key identifier: 1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
Certificate issuer: /CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Certificate serial: 01A0035D2A7210FFCDE89112FB140CED1D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
Manifest number: 1A05
Signing time: Sat 15 Aug 2026 03:00:32 +0000
Manifest this update: Sat 15 Aug 2026 03:00:32 +0000
Manifest next update: Sun 16 Aug 2026 03:00:32 +0000
Files and hashes: 1: GyHb_7GS4UkZz-J4a69EhAw6yjw.crl (hash: NB8kUXTmYSZYwfLNQiBGR8Sy2Ljvgop1nyMWv3t945Q=)
2: OjQ0zzKUV1mIuissX7R6oiwC7R4.roa (hash: RqtRopS3nAAsoOtWVCcZpZzIHlMNh6J6RVxWQzfONms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5d:2a:72:10:ff:cd:e8:91:12:fb:14:0c:ed:1d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Validity
Not Before: Aug 15 03:00:32 2026 GMT
Not After : Aug 16 03:00:32 2026 GMT
Subject: CN=9b4c89f7ad93cf1245be45c121dce6c7d30586dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:4e:11:bb:3c:cd:7c:f7:b5:2b:4a:09:51:
ab:36:c4:8a:92:32:3b:a4:d5:6a:bb:e5:8f:4c:6a:
65:fc:9d:bf:bc:ec:5e:ad:58:29:65:64:e0:8b:9b:
6a:46:11:d6:54:4e:16:55:75:f7:a9:d3:71:7f:38:
2b:88:b2:e2:da:35:be:21:78:f3:17:79:0b:fb:3e:
fa:f4:77:86:73:c3:cb:2c:11:d8:b2:17:4f:3e:88:
c2:d9:9f:81:32:ad:54:2b:4a:ae:fe:d7:a6:93:03:
b5:98:bc:f6:23:87:1c:77:bc:6c:ab:48:e0:e0:bf:
78:18:d6:3e:aa:ea:0e:82:49:a5:83:15:b8:56:6a:
32:e4:49:4d:94:62:1f:87:88:7a:26:45:5f:c7:35:
36:71:72:fd:9b:d0:c4:d3:13:ec:5b:a5:82:c1:49:
00:6e:2a:66:1c:47:54:c3:54:29:43:5e:50:c5:a3:
72:87:c8:f7:e4:68:5a:9d:e0:34:4f:3f:9b:bb:70:
db:20:e1:a2:92:c2:1e:8c:43:92:dd:da:c1:e2:32:
2f:82:82:70:10:26:72:73:f1:0f:2e:f3:af:85:0f:
8d:15:bd:50:aa:ac:55:dd:c7:59:61:c6:7f:ba:7c:
a6:4d:42:93:29:a0:a5:d4:92:42:7e:ea:12:2d:83:
b3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4C:89:F7:AD:93:CF:12:45:BE:45:C1:21:DC:E6:C7:D3:05:86:DC
X509v3 Authority Key Identifier:
keyid:1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b9:2f:40:9b:88:e0:fc:92:b3:ea:f7:ac:98:4f:94:ec:fe:
f4:9e:f7:f9:c8:a6:5c:43:50:60:f8:bb:e9:28:00:f9:e4:6e:
29:bf:d2:12:5a:5e:dd:0b:d5:36:ff:0d:e1:33:97:b9:85:8f:
74:a7:f1:30:63:d9:54:46:0a:03:3c:22:9d:a5:a2:71:ee:c7:
a8:b9:74:1e:bd:64:72:cb:7f:a3:9a:c8:ab:48:26:c8:51:f5:
d7:90:49:e1:76:c0:be:12:48:ed:29:3e:0b:e0:c6:8a:84:7f:
6b:bb:6c:7b:6d:4b:72:6f:e1:8a:6a:66:fc:bc:8a:7f:fa:fc:
67:12:f0:3f:05:96:60:02:25:0e:d8:c4:2d:ae:ff:ec:19:85:
62:80:38:1f:78:eb:98:8b:04:e0:95:28:79:e2:35:22:8d:58:
42:2c:b1:58:38:b3:91:f7:cf:3e:d4:48:e9:25:36:6a:c7:a7:
63:2f:6e:9d:47:a7:b2:fa:b0:a0:fa:ab:40:ff:2b:df:a0:e3:
84:f7:89:f2:90:2b:5f:45:49:6f:16:cb:3b:f7:d9:47:a8:d7:
47:3b:dc:dd:61:97:57:6b:5b:82:20:67:43:05:44:2f:b8:13:
80:f7:39:f2:f4:63:5d:6e:a2:4a:da:69:c0:2a:72:1a:8f:d1:
fa:ce:74:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:27:21 2026 by rpki-client