Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
File: gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json)
Hash identifier: QFFHa1kPlnDhakv25rCd1naKlFjPLLfchVclb/iEZsQ=
Subject key identifier: 87:84:13:3C:04:32:A3:BC:7E:4B:A2:31:CF:41:D5:74:0F:0B:3A:73
Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Certificate serial: 019D984F8A5DE2BC2D5741351DFD33E02137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
Manifest number: 099F
Signing time: Thu 16 Apr 2026 22:00:42 +0000
Manifest this update: Thu 16 Apr 2026 22:00:42 +0000
Manifest next update: Fri 17 Apr 2026 22:00:42 +0000
Files and hashes: 1: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: Yadaa4WGXEeMpIBqLxIVCJXdScaKz/GRAvK6OrMtaNs=)
2: qdUh2hSoqgeqIRg-X_UezX9LadQ.roa (hash: T5mdwLAzJSWrOE2roB/OPAtD4ZvRlYtzJ6Bor5XITOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:8a:5d:e2:bc:2d:57:41:35:1d:fd:33:e0:21:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Validity
Not Before: Apr 16 22:00:42 2026 GMT
Not After : Apr 17 22:00:42 2026 GMT
Subject: CN=8784133c0432a3bc7e4ba231cf41d5740f0b3a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:0f:d5:33:22:f9:f6:51:13:bb:11:37:92:
fc:11:e8:44:c4:9f:b7:d5:d6:fa:d3:6e:4c:59:a3:
95:48:3d:e2:9c:92:46:0f:54:a8:8f:39:f7:2d:31:
a1:d0:cb:d5:81:79:7b:a8:8a:1c:d2:6a:23:2a:f5:
00:94:bc:18:2d:10:7e:71:5d:d8:4d:8c:1e:8e:3a:
48:e2:fc:ec:1f:ab:56:b6:6a:ca:8d:71:a1:c8:78:
b8:c7:96:a8:3f:93:48:b1:c6:fc:bc:4f:ee:13:19:
65:5d:04:b3:3e:3b:4f:c4:23:95:60:35:20:db:26:
ea:a0:e4:79:bc:8e:a6:2f:38:b0:5a:19:e8:e6:74:
a9:e7:2e:d0:31:c7:3e:71:76:91:ce:4b:f0:20:29:
cf:b4:b1:28:f6:fe:3a:74:4a:5e:cf:bf:22:af:0e:
46:9e:cc:86:1f:b4:04:2d:22:ac:2d:8c:3d:de:bb:
d8:c5:ff:4e:de:dd:55:47:8e:91:a1:83:a7:24:35:
7d:9d:98:19:d4:e7:0a:a2:06:97:6b:68:a5:60:1d:
f8:b5:18:54:fb:92:23:6f:a5:94:91:d2:09:f6:4e:
3f:03:f8:df:23:ab:00:7b:90:0b:9f:52:ce:c1:f5:
1a:90:f1:28:67:d8:a6:18:a6:ee:89:d7:af:18:a1:
cd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:84:13:3C:04:32:A3:BC:7E:4B:A2:31:CF:41:D5:74:0F:0B:3A:73
X509v3 Authority Key Identifier:
keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:75:31:40:33:03:ae:8e:47:28:29:c1:ca:f8:69:68:dd:e9:
4b:22:6a:33:7c:3f:20:d9:07:fe:0b:94:9f:17:63:84:78:f8:
fd:bb:aa:fd:79:32:04:da:ae:ab:6f:80:ee:db:7d:f1:7c:59:
28:e9:f4:ea:8a:96:08:be:df:29:d3:e5:31:04:16:43:9a:51:
e3:e3:e0:c8:1e:57:aa:bc:c9:ee:26:3a:1d:26:60:d5:e3:89:
bb:30:68:ef:ae:f5:98:70:d8:27:14:3c:28:81:0d:29:80:f7:
31:47:75:6c:4a:68:b2:bc:3f:fa:07:88:4f:22:c7:4d:74:e5:
59:1f:4b:b9:6d:be:98:4a:bd:92:df:af:9e:2d:5b:30:b9:11:
4c:33:96:f1:b4:90:80:57:8e:21:2d:0d:b8:48:ae:c9:80:2f:
07:d9:9f:7b:cc:32:55:51:2e:8c:62:2b:96:7c:6c:7a:10:64:
e2:3a:06:79:df:a7:1c:32:fd:94:15:d1:f3:2d:bb:85:75:ed:
c8:3f:1f:ef:62:2b:8a:6e:3c:17:99:17:5f:31:e4:10:a2:3c:
e7:12:81:8c:9f:49:0e:77:81:ad:00:ba:61:82:35:c7:7d:d6:
8c:b6:50:d8:0e:61:c4:3f:01:c8:9f:64:43:df:d6:d6:ba:e9:
8a:6f:2f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:35 2026 by rpki-client