Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
File: gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json)
Hash identifier: DwMT17UjiBL+EIdnHwubIpnzk68Tqws0/RlOaVpQ6tE=
Subject key identifier: EC:77:CC:4C:C8:7D:62:7D:12:B3:8D:2A:C9:69:1E:7A:C6:10:21:44
Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Certificate serial: 019F12D30947CCD9533F0F4920847CA498AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
Manifest number: 0A63
Signing time: Mon 29 Jun 2026 10:00:48 +0000
Manifest this update: Mon 29 Jun 2026 10:00:48 +0000
Manifest next update: Tue 30 Jun 2026 10:00:48 +0000
Files and hashes: 1: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: 9GSFidXEqLVbXeXzXcHbKji7CKPZwHcz2esNKLnuTD0=)
2: qdUh2hSoqgeqIRg-X_UezX9LadQ.roa (hash: T5mdwLAzJSWrOE2roB/OPAtD4ZvRlYtzJ6Bor5XITOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:09:47:cc:d9:53:3f:0f:49:20:84:7c:a4:98:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Validity
Not Before: Jun 29 10:00:48 2026 GMT
Not After : Jun 30 10:00:48 2026 GMT
Subject: CN=ec77cc4cc87d627d12b38d2ac9691e7ac6102144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0e:44:8e:9a:8e:ab:10:90:1c:e6:30:f7:a7:
67:02:d5:19:55:81:fa:d6:30:4b:61:ff:3b:e1:2b:
28:7a:8e:e9:15:5d:6b:43:8f:ff:89:27:88:f9:87:
05:58:4e:6f:88:d6:d3:f5:a8:cd:b7:ff:d0:11:dd:
06:06:96:2d:d0:82:92:77:56:8c:c1:dc:3e:6e:60:
cd:75:d6:b1:71:7a:72:28:a2:29:b8:a8:de:a9:02:
9c:2f:b3:5e:03:22:2d:5b:2b:d9:bb:43:38:be:ff:
a5:f8:b5:af:20:5e:ef:b6:b1:51:ef:14:1f:4f:db:
96:68:a7:50:2d:65:16:a3:6a:f0:78:3d:47:cd:2e:
46:c1:a2:6b:e5:ab:9f:16:6a:26:6f:cb:ef:27:6a:
83:9e:47:1d:f1:4b:dc:c1:77:30:ca:62:8d:85:88:
2d:7c:b1:d8:c1:fa:5d:da:2f:63:1e:4b:42:81:da:
23:37:b0:b7:4e:5a:d5:75:cf:8d:d5:f6:79:8d:ea:
d6:e6:0d:d0:94:a5:ae:7c:bc:8f:7f:df:f2:b5:97:
51:44:a4:48:17:ee:31:1f:2b:2f:7b:44:a9:74:d8:
3e:8b:18:aa:4f:92:03:1a:bc:8c:20:f3:24:79:f3:
c8:0e:8e:ed:91:97:02:0f:23:09:8e:07:17:53:d0:
fc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:77:CC:4C:C8:7D:62:7D:12:B3:8D:2A:C9:69:1E:7A:C6:10:21:44
X509v3 Authority Key Identifier:
keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:00:87:08:7a:33:a0:ba:49:65:18:e7:9c:b1:23:8d:d1:9c:
15:14:97:11:79:35:a1:bc:d0:71:a0:92:13:10:d2:72:27:96:
5a:4a:1a:38:f1:79:05:89:30:59:aa:f2:0a:5d:6a:66:4a:58:
51:73:6b:a3:db:57:2f:9e:17:e3:9d:02:82:c6:ee:c9:eb:a4:
ad:c6:a7:30:0c:8a:62:e6:a3:6b:09:94:92:b0:55:19:db:a8:
5c:f2:aa:9f:96:e1:7f:98:ea:00:c0:f2:ff:fd:56:7b:eb:0d:
98:83:f3:44:ff:f4:b6:09:6f:92:ed:fb:4b:ae:53:a9:29:fe:
05:b4:9a:54:6f:d4:6a:96:e1:82:a7:14:4d:a1:9e:e6:aa:9b:
f4:c3:b4:7b:ad:38:7c:d0:35:4e:5f:95:7a:73:3d:5f:1e:85:
24:14:f0:e2:54:ee:7f:42:dd:35:08:f7:32:c4:ce:4c:36:c0:
65:97:3e:02:d6:d7:3c:60:9c:64:51:98:0e:ab:9b:b4:68:d5:
0f:d6:5f:8d:24:2f:1c:4e:28:89:b5:ad:f3:0d:21:f2:7b:8c:
49:04:d2:4a:56:f9:a8:45:93:ae:46:49:a7:fa:e3:8e:17:6f:
1a:35:de:4b:c1:e4:2c:a5:1a:c0:ee:eb:c3:92:cf:b3:95:9a:
5f:67:c7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:37:49 2026 by rpki-client