Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
File: gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json)
Hash identifier: rAcbXaz2fzY/0lYX9ij4svXZewAuR1JL2BsbDZLM2Q4=
Subject key identifier: 59:F3:09:6B:F9:02:29:2A:27:50:D0:38:16:D1:99:20:8D:24:77:0A
Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Certificate serial: 01A11A50141062A66D2739A30A1F7056215B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
Manifest number: 0B74
Signing time: Thu 08 Oct 2026 07:00:17 +0000
Manifest this update: Thu 08 Oct 2026 07:00:17 +0000
Manifest next update: Fri 09 Oct 2026 07:00:17 +0000
Files and hashes: 1: P4ilQBuKUlgTootCdOEF0HPO4IM.roa (hash: 3FfJFJ0SwP30eIW/tk79v1+okqhDhDPyY7bK/Y4Nft8=)
2: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: cjMXO+VvJ8bo6BBbludX+ccD9lSRsnMbJ2fhlIWqEzo=)
3: lpMP4q-My42cpOnhveXrZkVMW5o.roa (hash: 7P9/FJUb1Hjo2PDcqJMeYe8PaaEl5qJr4egEyynRQ08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:50:14:10:62:a6:6d:27:39:a3:0a:1f:70:56:21:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Validity
Not Before: Oct 8 07:00:17 2026 GMT
Not After : Oct 9 07:00:17 2026 GMT
Subject: CN=59f3096bf902292a2750d03816d199208d24770a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:34:39:06:a5:cb:14:b3:a5:c9:49:8f:0d:4e:
04:7b:f0:a3:c4:1d:ff:2f:1d:4b:7c:6a:e8:1c:c7:
ef:3d:70:67:97:2c:5a:5d:dc:67:34:92:19:ea:7d:
56:67:6e:8b:6c:df:69:3b:e0:11:67:51:77:93:52:
94:cd:7f:0c:9f:58:3b:09:8c:cd:dc:da:b4:a9:4f:
50:7b:d0:0b:89:3a:1b:6f:a9:bd:2c:50:9d:33:39:
f5:58:18:3a:79:6a:eb:f1:a2:8b:f8:45:6a:8a:12:
00:d0:ad:60:77:42:10:31:0b:08:98:39:dd:74:90:
fb:45:fd:f3:54:df:7f:83:ed:1f:75:b1:50:94:56:
db:62:24:86:fe:a4:2d:31:91:70:b4:2e:ed:48:85:
ce:6c:7c:12:09:e0:f6:cb:4b:c1:e0:f7:a7:68:86:
93:da:6a:84:cd:15:22:3a:04:c5:3b:cf:a6:c5:d2:
26:5a:60:65:86:de:a8:02:4d:96:a8:18:0e:9c:be:
46:0e:8a:73:5a:11:e9:55:3e:f1:42:9c:65:fe:e1:
4e:ed:85:f6:db:ff:8e:e6:d5:9a:19:f8:b5:31:0d:
ad:63:dd:07:a2:a7:60:ca:81:67:14:6c:b6:8d:7b:
aa:58:32:17:a4:3d:62:16:d1:38:58:d3:c7:66:7c:
0e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F3:09:6B:F9:02:29:2A:27:50:D0:38:16:D1:99:20:8D:24:77:0A
X509v3 Authority Key Identifier:
keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:54:c2:b9:61:87:d7:75:7d:94:40:d4:34:11:b9:6b:5a:e2:
37:e0:08:d9:b7:6d:12:83:69:a7:33:24:60:d9:b5:91:48:ae:
d0:07:c8:64:47:be:b3:71:1f:3c:ee:91:29:c1:6a:ec:bd:bf:
06:4e:49:20:76:2c:dd:6d:c9:a5:08:8d:17:a3:4f:c5:7b:ac:
a0:b0:96:6e:88:22:0e:2a:4e:a2:4e:02:03:bf:28:e4:26:fc:
25:aa:11:2c:3a:81:8a:7e:b9:3e:76:e1:a2:f1:db:ce:aa:a5:
3d:25:d3:da:5d:11:30:aa:c6:8d:7a:fb:9c:f4:ba:79:45:22:
82:d9:e4:a2:77:bd:98:66:c0:d9:ed:8f:e8:77:55:51:31:50:
0d:c0:0c:39:eb:86:5b:14:12:95:50:77:45:5c:34:82:ff:57:
08:22:3f:2a:8c:b7:40:57:4c:34:03:7f:d3:b5:9b:d3:5c:ae:
ca:19:86:89:fa:9b:ee:52:5e:af:14:4c:c8:88:5f:fd:ee:3b:
2f:89:b8:bb:bd:f1:6e:45:8c:37:9f:6d:09:6c:63:ed:21:1a:
59:53:26:80:cd:04:18:75:ea:19:27:6b:63:23:52:36:b5:32:
88:17:66:f1:49:fd:d9:4b:2e:ec:3e:e9:a6:df:f5:2e:a3:60:
64:97:e2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:35:17 2026 by rpki-client