Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
File: gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json)
Hash identifier: xGrbULT/8ZqHWIvCdjp0+C7C4iTRTYWeimI6hnIMypc=
Subject key identifier: 07:DD:D3:8A:D2:0F:56:6B:86:CB:95:1E:38:78:3B:4B:C7:92:AC:1C
Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Certificate serial: 019CAAC727D80E5D9F0EAE46B85A9D6F0EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
Manifest number: 0924
Signing time: Sun 01 Mar 2026 19:01:44 +0000
Manifest this update: Sun 01 Mar 2026 19:01:44 +0000
Manifest next update: Mon 02 Mar 2026 19:01:44 +0000
Files and hashes: 1: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: wX/8ysmlhCe0gxUS8EnuDog6esUu40EdoRJZB5cVaEM=)
2: qdUh2hSoqgeqIRg-X_UezX9LadQ.roa (hash: T5mdwLAzJSWrOE2roB/OPAtD4ZvRlYtzJ6Bor5XITOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:27:d8:0e:5d:9f:0e:ae:46:b8:5a:9d:6f:0e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Validity
Not Before: Mar 1 19:01:44 2026 GMT
Not After : Mar 2 19:01:44 2026 GMT
Subject: CN=07ddd38ad20f566b86cb951e38783b4bc792ac1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c3:78:c8:fd:de:95:52:34:98:0e:ee:28:7d:
12:21:02:82:89:84:22:ea:3a:2e:c1:5a:df:3b:f9:
7d:19:6e:2a:1a:0a:76:d8:d1:6a:d7:b9:48:f4:e6:
bd:01:3e:43:37:ef:53:bf:bc:eb:92:a6:53:de:f4:
2c:a9:f1:5e:eb:31:05:8d:bb:cb:ac:a6:e5:f8:9d:
59:55:2f:e1:e2:09:e4:f2:41:67:e2:4e:cc:5f:89:
32:e7:b5:43:f1:c0:bc:43:6c:d3:93:e5:a6:e0:0b:
84:b1:9f:7f:02:03:6b:a8:24:32:38:7f:ab:14:4d:
92:f5:30:a5:33:c8:aa:33:9c:8b:4a:67:38:23:22:
b7:f3:57:d3:bc:ea:63:d1:55:eb:c1:a6:ea:07:57:
0e:16:d0:ca:d4:cc:d9:7a:b5:d6:55:d4:52:32:68:
d4:d2:91:c5:d7:98:ba:1a:19:6e:bf:47:ab:86:84:
6e:75:04:8d:43:75:b7:33:16:0a:8a:00:03:3f:de:
2d:53:ca:66:c9:3b:fc:8d:b1:67:fc:ae:ad:54:31:
f3:d2:69:5e:5c:1d:4c:66:db:55:67:4f:4a:e9:8a:
92:1e:67:4c:59:86:0b:62:03:06:fd:b4:3d:ac:62:
38:28:3a:53:f4:8b:76:94:37:ad:84:4b:81:da:cc:
72:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DD:D3:8A:D2:0F:56:6B:86:CB:95:1E:38:78:3B:4B:C7:92:AC:1C
X509v3 Authority Key Identifier:
keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c2:af:e9:08:0a:e3:02:8f:77:ab:e5:b8:38:9d:36:12:8a:
22:0a:a1:1d:c9:8f:6f:3b:38:27:00:9d:45:5b:fa:29:b3:f3:
7b:0b:79:14:ea:6d:9a:47:8a:68:3c:8d:a8:ab:04:2c:e7:0f:
1e:89:2d:88:83:da:7f:35:cc:1e:8d:4c:50:2a:36:7e:87:9c:
77:e9:2d:cd:9c:5f:65:1f:e0:83:c8:4f:68:87:44:0f:bd:95:
1d:a0:79:aa:84:31:5d:7a:ea:75:84:89:e4:95:99:ba:30:2b:
68:46:65:06:77:55:89:ce:92:10:f8:26:e5:39:5a:41:1c:1b:
c1:de:a3:cf:34:9c:0e:85:40:e8:9c:6d:98:87:04:b8:cd:36:
67:27:1c:e1:b4:ba:16:b4:f2:f4:46:6e:61:f7:08:db:f2:af:
57:5d:59:a0:c1:29:d7:d2:d2:5f:cf:52:00:19:c7:c2:0a:3e:
55:3c:c5:eb:31:04:09:e9:f2:c3:2c:92:d8:53:80:6f:f9:f0:
80:64:44:d0:41:31:0a:0a:52:16:e8:5c:40:7a:42:d6:87:89:
15:a2:2b:ff:ac:b9:05:bc:de:33:73:03:2c:58:85:f3:b5:ba:
c0:5f:b5:29:46:a2:02:a8:6a:32:7b:c2:bf:64:1f:46:fe:33:
69:20:ba:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:47 2026 by rpki-client