Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
File: gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json)
Hash identifier: BhuEsHNLcQLe7qk9aIXDEz5c9XZLJk3Eb4FLfn6/A2I=
Subject key identifier: 99:48:3E:8B:2D:85:FE:0D:1A:F5:A7:58:B4:E7:87:EB:11:5C:4F:4E
Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Certificate serial: 019D37C0D5C048ABCBBC83B4DFC693BA32A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
Manifest number: 096D
Signing time: Sun 29 Mar 2026 04:01:17 +0000
Manifest this update: Sun 29 Mar 2026 04:01:17 +0000
Manifest next update: Mon 30 Mar 2026 04:01:17 +0000
Files and hashes: 1: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: xvZT7T7Kvtv6G0oAeJGn2pu7bikObTBxyGTzql9kOsw=)
2: qdUh2hSoqgeqIRg-X_UezX9LadQ.roa (hash: T5mdwLAzJSWrOE2roB/OPAtD4ZvRlYtzJ6Bor5XITOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:d5:c0:48:ab:cb:bc:83:b4:df:c6:93:ba:32:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Validity
Not Before: Mar 29 04:01:17 2026 GMT
Not After : Mar 30 04:01:17 2026 GMT
Subject: CN=99483e8b2d85fe0d1af5a758b4e787eb115c4f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:74:d7:23:6f:15:a3:fc:7e:ba:8a:9f:30:
85:cb:74:c4:6a:1d:f4:7b:b1:7b:94:39:3d:50:18:
26:ec:af:a4:16:0c:a7:29:e4:26:e0:fe:4f:8e:9b:
11:5b:d7:da:25:ec:98:ef:b9:50:a5:91:b3:3a:5d:
7e:3b:0a:15:7e:5d:f5:ea:1f:9e:4d:c1:d5:b3:46:
6e:61:31:cb:bb:0e:f9:3b:9e:91:9a:6b:b4:08:42:
b3:b7:07:cc:a9:1f:25:91:3e:7e:d8:8b:79:b5:3c:
18:a1:96:c2:b0:6a:fb:47:a3:89:b3:9f:63:39:02:
f7:96:f9:d7:07:80:d9:36:74:cc:07:19:a4:73:55:
b0:4f:7f:98:1d:1a:01:d6:7a:23:89:bb:e5:bd:d3:
06:cd:07:94:26:c4:b1:6b:53:cd:2e:e2:d7:19:2e:
a0:e2:31:98:77:e6:c6:f9:9b:80:af:17:e0:b8:a2:
c2:1f:c3:a5:1f:97:6b:81:96:a1:3f:d5:0c:01:bf:
f1:06:bf:38:c9:34:e4:3e:ee:21:56:d9:f3:c8:94:
26:93:b4:52:c2:2a:b0:40:e9:64:fb:2a:f4:cf:52:
c7:00:c1:52:4d:f7:5b:2b:40:79:0b:f4:2e:67:4b:
71:a2:48:cd:8b:dd:bc:a0:13:5f:42:06:1f:db:7f:
2b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:48:3E:8B:2D:85:FE:0D:1A:F5:A7:58:B4:E7:87:EB:11:5C:4F:4E
X509v3 Authority Key Identifier:
keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:43:94:4f:af:f8:e2:01:69:9e:6d:47:ab:0e:6f:5e:bc:c5:
f6:5f:e8:3e:09:bf:09:22:0c:b4:46:ef:5f:7e:1c:77:b6:0c:
bf:19:50:ee:e9:bb:3c:ab:ef:dd:7a:23:42:4c:43:ab:93:2c:
d7:44:2a:57:f4:ed:77:ea:2d:33:4d:2b:14:5b:05:f3:a4:78:
f7:85:a1:ff:93:57:66:24:2a:96:03:4f:f9:e7:d4:95:d8:93:
e9:0a:8c:ae:06:91:54:d6:64:33:aa:67:00:8e:30:fa:ed:65:
0a:d9:9b:e8:bb:41:4a:9c:d7:08:75:7a:54:ad:f2:93:66:73:
b9:17:79:8a:29:5c:88:83:80:62:47:e2:ca:10:cd:a5:e5:7e:
85:81:99:4a:26:b1:4c:62:65:40:82:89:d5:aa:3c:c7:b3:79:
24:47:1b:ba:c7:32:da:30:b3:51:95:15:06:5f:02:dd:7a:15:
04:c3:2d:13:f7:a1:6c:68:b0:30:04:22:6f:5b:d1:4e:04:a4:
1e:19:4f:b4:67:65:74:2a:01:16:49:07:1d:37:24:2c:0c:61:
e9:37:ac:48:eb:84:46:ff:23:9d:47:a7:d1:ef:32:7e:e9:8d:
c5:c2:0e:9e:25:1a:0a:62:18:a6:2a:13:12:a6:74:a7:47:64:
81:2f:29:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:54:42 2026 by rpki-client