Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
File: GyHb_7GS4UkZz-J4a69EhAw6yjw.mft (raw, json)
Hash identifier: FjTGJGg3HjJ+aQXDu4Qr8QFVfdUCcDCOkEM9z8TXpgQ=
Subject key identifier: 32:C2:5C:23:17:19:7F:63:5E:6D:48:36:16:F7:14:58:AA:0F:A5:7D
Authority key identifier: 1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
Certificate issuer: /CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Certificate serial: 019F11F82E7338A2B37EF6A0A2FC8F21282E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
Manifest number: 1988
Signing time: Mon 29 Jun 2026 06:01:45 +0000
Manifest this update: Mon 29 Jun 2026 06:01:45 +0000
Manifest next update: Tue 30 Jun 2026 06:01:45 +0000
Files and hashes: 1: GyHb_7GS4UkZz-J4a69EhAw6yjw.crl (hash: 9mPv+o/TxAAUnSJfYPzFuQ2GNHOJi+g/tr6eg+BKm8Q=)
2: OjQ0zzKUV1mIuissX7R6oiwC7R4.roa (hash: RqtRopS3nAAsoOtWVCcZpZzIHlMNh6J6RVxWQzfONms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 06:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:2e:73:38:a2:b3:7e:f6:a0:a2:fc:8f:21:28:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Validity
Not Before: Jun 29 06:01:45 2026 GMT
Not After : Jun 30 06:01:45 2026 GMT
Subject: CN=32c25c2317197f635e6d483616f71458aa0fa57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:04:61:bf:f9:a6:f1:13:6d:b0:95:d8:bf:d3:
5d:28:2a:d7:7c:4b:cc:3e:3a:ca:bc:26:5f:3e:8d:
3e:a6:2f:09:31:48:b5:ca:dc:86:e1:ac:6c:13:48:
92:a5:d5:86:fc:63:80:d5:79:7b:6b:59:20:33:89:
70:b4:30:f3:d6:47:dd:1b:05:b5:a2:28:17:e5:61:
72:14:c0:21:46:95:05:1a:eb:3b:ba:63:40:52:3c:
99:6d:f9:03:b5:71:4a:e9:83:25:66:51:65:b5:62:
8b:69:97:53:41:ff:d1:4f:9b:29:fa:c3:80:7a:50:
b0:1a:73:73:48:d8:49:1f:80:fd:4d:8b:fe:97:1c:
ce:53:ee:0b:37:87:53:90:de:80:3b:4b:54:08:25:
0d:e5:b9:a2:a0:95:8d:62:12:55:2f:66:31:8e:1a:
8a:74:4f:57:0b:08:4b:3a:e8:ba:22:15:8d:40:cd:
66:eb:78:b9:38:ba:4e:a6:24:0b:3a:eb:67:4d:f5:
77:53:21:a6:e6:14:3f:78:9e:11:9e:57:69:75:d4:
57:09:5a:3b:12:00:28:35:96:d5:4a:51:28:9a:2e:
cc:2e:82:e7:c6:c8:13:27:94:ea:a9:2a:99:89:1a:
f6:5c:39:47:48:9c:e4:14:12:ba:a1:a8:74:86:51:
22:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C2:5C:23:17:19:7F:63:5E:6D:48:36:16:F7:14:58:AA:0F:A5:7D
X509v3 Authority Key Identifier:
keyid:1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:67:52:fc:ba:e1:76:20:96:ea:80:f6:e8:43:c9:06:a4:70:
e2:54:7e:30:82:93:7d:6b:86:d3:ea:23:91:e1:af:d1:23:a4:
14:fe:5d:a9:46:c4:d3:bc:c6:3b:3a:47:22:4e:a1:fc:6a:d8:
00:d7:c0:75:d3:59:53:12:ca:dc:47:5b:4d:d3:8e:a7:a5:d3:
22:98:c5:cb:f9:1e:55:b8:dc:26:8b:67:2d:ca:4f:b3:c7:dd:
81:b6:65:93:19:e4:1b:15:6e:b7:4d:1d:9b:04:0f:03:72:a0:
a9:47:a1:77:5c:33:e7:96:90:6f:6d:e3:77:e0:74:63:c0:27:
d7:e5:b9:da:e0:5a:a2:3b:b6:aa:21:9f:32:28:f1:dc:96:75:
aa:a1:ca:81:70:c1:4e:44:b7:59:0c:53:08:08:64:1f:86:54:
c1:db:cd:2a:fe:87:e8:df:fe:c0:9f:32:6b:09:5f:46:63:40:
d8:f9:00:8a:19:5d:ae:44:03:53:ba:be:8e:e6:03:c9:cd:f0:
ca:f8:5e:4f:da:2f:03:ca:c2:47:ac:64:83:b8:bd:7c:9d:d5:
6c:55:35:0f:1e:19:f1:f2:4a:91:ec:69:b9:72:eb:c6:d9:47:
be:67:62:07:45:fc:45:4a:60:67:a8:79:13:46:87:d3:eb:02:
39:7d:a3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:52:40 2026 by rpki-client