Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
File: gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json)
Hash identifier: LBnObw9LgFIWdsQlHWOPahECXi+MpYnIyWEJj4XEq4U=
Subject key identifier: B5:0E:E8:E6:09:C5:3B:F0:96:82:A6:5A:00:DC:AE:16:2C:A9:E3:BF
Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Certificate serial: 01A1DD5DA01374B3F86F0329E6FC3138BB66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
Manifest number: 0BD9
Signing time: Sun 15 Nov 2026 04:01:02 +0000
Manifest this update: Sun 15 Nov 2026 04:01:02 +0000
Manifest next update: Mon 16 Nov 2026 04:01:02 +0000
Files and hashes: 1: P4ilQBuKUlgTootCdOEF0HPO4IM.roa (hash: 3FfJFJ0SwP30eIW/tk79v1+okqhDhDPyY7bK/Y4Nft8=)
2: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: rgf41V09V208CRBfPGWscEzEFXRuDWUjsHw8nSvu+v4=)
3: lpMP4q-My42cpOnhveXrZkVMW5o.roa (hash: 7P9/FJUb1Hjo2PDcqJMeYe8PaaEl5qJr4egEyynRQ08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5d:a0:13:74:b3:f8:6f:03:29:e6:fc:31:38:bb:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Validity
Not Before: Nov 15 04:01:02 2026 GMT
Not After : Nov 16 04:01:02 2026 GMT
Subject: CN=b50ee8e609c53bf09682a65a00dcae162ca9e3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:69:19:e0:aa:e8:dd:e0:2f:4b:04:69:bc:
4d:91:93:69:ed:37:a0:ee:19:49:95:7c:a5:6e:da:
88:96:e1:8f:d7:c6:29:68:c4:15:57:a5:c7:1d:e7:
33:af:38:36:bb:e1:94:54:0d:b9:21:ee:10:d7:a1:
96:7a:d9:29:5b:ec:10:a4:1d:f3:b7:d7:66:4b:bf:
13:b0:f9:e8:02:57:78:4a:ff:4c:af:1d:22:0a:f4:
86:f9:a4:e7:73:26:b0:e3:54:65:f1:56:ce:12:b1:
49:b6:dd:89:6a:0e:6f:36:69:39:5c:bc:64:0d:d9:
7a:3e:07:8d:a3:56:63:23:c9:6a:b9:36:c5:93:02:
65:22:63:e8:37:37:13:a7:b7:ee:b1:bd:de:19:be:
20:7d:b6:a5:d2:32:a3:38:a5:d1:bd:3d:7b:4f:37:
93:e8:0a:f5:39:0d:95:9c:9d:9f:b6:b3:c4:1f:65:
47:1e:64:c2:6b:50:fc:67:82:fa:11:fd:f3:dc:f6:
d9:62:b1:51:e6:a0:b0:f2:2d:b9:4a:e4:fd:30:f2:
bf:9e:77:8f:65:31:8e:7f:42:ca:52:b6:d7:b6:31:
5f:01:b4:26:c5:f3:90:48:17:2d:8d:43:bd:56:d7:
d2:ac:06:a3:f7:9f:81:00:66:b8:88:3a:f9:a1:9e:
c0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0E:E8:E6:09:C5:3B:F0:96:82:A6:5A:00:DC:AE:16:2C:A9:E3:BF
X509v3 Authority Key Identifier:
keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f3:81:d0:6b:e8:9c:b0:8f:b4:2e:2e:e0:b0:e7:f5:1d:ef:
be:59:17:48:17:5b:bf:be:6d:e8:83:23:2b:d1:ae:05:fe:19:
78:4b:3a:53:69:3d:32:7d:78:c3:95:97:bc:c4:8f:14:ef:81:
5c:47:2a:39:5a:ad:ab:fb:3b:9f:29:89:65:99:b9:15:4f:1e:
a3:59:4f:6b:d2:9a:5b:49:49:02:bf:c5:80:30:7d:2c:53:9b:
e2:bb:e8:53:bc:10:20:bc:90:49:81:6f:bf:58:85:23:92:22:
e6:79:b0:8c:42:54:7b:16:2c:87:0d:8a:0c:dd:a0:ae:55:a8:
1f:83:9b:2b:99:55:6b:5d:fa:4d:43:7f:a5:fb:71:a4:a4:d3:
13:90:07:67:20:36:f7:1f:62:f9:f6:08:b7:01:c8:95:8e:77:
06:99:05:24:d3:12:7f:1c:84:59:3e:b8:13:97:ab:35:3f:d8:
ed:26:93:a0:4f:3d:8e:c2:fb:01:4e:99:db:99:1e:8f:33:bf:
63:c6:0d:44:1b:93:20:02:8c:43:60:b2:4a:17:74:fb:16:31:
38:6e:78:33:08:55:f8:84:28:9b:bd:2e:cb:ed:8e:85:bf:68:
2e:ae:eb:65:c0:67:f7:b4:8c:44:33:bb:4c:e3:15:48:63:91:
98:6c:3b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:32:06 2026 by rpki-client