Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
File: gYFECjZ6NNMGvA9oWunNhpUvf5U.mft (raw, json)
Hash identifier: Dogj3pGjCDuiXOyYkJ6Kk37gCZRltiIIfGd9L4fYO0M=
Subject key identifier: 17:12:AA:04:65:C7:06:9F:1B:22:85:83:46:D5:08:97:CB:AC:5E:BA
Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
Certificate issuer: /CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Certificate serial: 019F27A4C50D9C4DC6AE394589F67B735C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
Manifest number: 0534
Signing time: Fri 03 Jul 2026 11:02:17 +0000
Manifest this update: Fri 03 Jul 2026 11:02:17 +0000
Manifest next update: Sat 04 Jul 2026 11:02:17 +0000
Files and hashes: 1: AEyZjBDd8JRa3C8Qu8Ed1pPfWTA.roa (hash: t/3GieMGxWoGjj/AjR+XfDv+Hv6o+nbcwMgeFZJBMF0=)
2: gYFECjZ6NNMGvA9oWunNhpUvf5U.crl (hash: l3IipY8JAtk1BXFMzRFc6kPtPbWyoZwUMWpnO1VoKgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:a4:c5:0d:9c:4d:c6:ae:39:45:89:f6:7b:73:5c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Validity
Not Before: Jul 3 11:02:17 2026 GMT
Not After : Jul 4 11:02:17 2026 GMT
Subject: CN=1712aa0465c7069f1b22858346d50897cbac5eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:0b:1c:dd:92:02:2a:b4:d8:79:d1:42:08:
5d:c6:75:4c:3e:13:44:53:f9:d6:bc:20:11:0f:20:
19:2b:57:69:2a:50:5c:0f:f4:2e:f7:54:f2:55:3b:
ce:45:5b:97:24:aa:56:bc:64:15:78:e6:89:fa:52:
1c:0b:72:d5:b4:0f:06:23:28:6a:57:29:df:7b:92:
ea:73:5c:dc:1d:f0:ba:83:30:7a:0c:bf:3f:49:31:
fc:c3:08:c6:92:79:7d:8b:ee:3e:6f:e6:59:ab:88:
5b:3d:b8:e0:d4:84:72:5a:e9:4f:b7:f0:d7:e5:e2:
70:24:1e:47:65:fb:56:a8:d2:e4:80:1b:fa:f9:6d:
4e:17:1c:26:2f:83:8d:9a:5c:70:78:7e:2d:21:18:
b1:4f:32:93:ec:67:2a:10:aa:72:25:4f:33:d4:ce:
31:a6:87:5d:2c:e2:cb:0c:8a:76:14:e8:de:45:9d:
5b:c2:bd:cc:34:02:8d:45:4c:32:e6:2b:45:89:03:
9e:cf:12:ba:be:95:bb:f7:05:26:a7:6f:ff:74:57:
1a:b8:81:2f:e4:a3:2b:38:64:80:b5:d1:f7:87:42:
dc:7e:f9:22:48:a2:63:88:ee:91:f2:f8:bf:47:c7:
c6:92:3d:ef:cd:3b:b2:c6:3c:2f:f7:0e:83:0b:f5:
c6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:12:AA:04:65:C7:06:9F:1B:22:85:83:46:D5:08:97:CB:AC:5E:BA
X509v3 Authority Key Identifier:
keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:d9:37:0f:53:d6:ed:9b:3d:81:8f:d0:9b:da:55:b5:f6:6a:
66:6d:89:4e:f8:1f:5d:ba:14:a0:7e:c5:d6:2c:b5:ba:a1:5c:
53:ce:51:42:34:ad:80:3e:20:56:8f:44:a2:19:58:74:f0:dc:
04:83:01:6a:fe:94:ce:85:cb:93:e6:24:fe:a7:bb:70:80:5e:
c2:11:02:89:08:13:47:61:a2:45:78:5b:1b:b4:20:8e:ee:2e:
f7:31:7f:11:01:99:c5:16:4a:c8:ee:1c:f7:d6:1a:79:2a:ff:
62:49:2c:40:30:6b:42:4d:bb:1e:39:67:af:6e:06:99:95:fb:
0a:f7:cc:ca:30:30:e9:9a:84:66:46:5f:2e:cd:09:29:65:f1:
26:f9:82:5d:fb:23:c9:5d:ee:9e:3c:36:2c:6e:1d:9c:12:b2:
5c:f3:8e:2e:62:7b:db:68:4f:5b:2d:3c:55:74:cc:f2:5f:5a:
93:d2:27:90:91:f7:34:e1:87:6d:ff:f0:fd:8c:df:b9:97:c6:
26:b9:f1:bb:48:2b:5a:2e:6b:9e:dd:e9:b8:8b:af:cd:82:e3:
08:27:48:d1:de:24:0e:42:38:ed:18:45:00:45:14:27:ba:7a:
19:39:01:c8:79:0c:1b:59:2a:39:c9:22:cc:62:b9:31:60:31:
a0:44:52:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 17:38:43 2026 by rpki-client