Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
File: gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json)
Hash identifier: tOqS6hAGeLhTfX2PjcJXzlcjG8YG0Y45iTxqeKVtYBY=
Subject key identifier: 58:47:A7:07:3B:FB:0A:5F:33:B1:46:58:09:24:8B:58:8E:D5:B3:20
Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Certificate serial: 019D265F1C69634D42D76A66345F239DDCB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
Manifest number: 0964
Signing time: Wed 25 Mar 2026 19:01:00 +0000
Manifest this update: Wed 25 Mar 2026 19:01:00 +0000
Manifest next update: Thu 26 Mar 2026 19:01:00 +0000
Files and hashes: 1: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: +MAORzhOb1lwJfxeSTUnbQ0GWwvwnzGqw+lLdlH0558=)
2: qdUh2hSoqgeqIRg-X_UezX9LadQ.roa (hash: T5mdwLAzJSWrOE2roB/OPAtD4ZvRlYtzJ6Bor5XITOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:1c:69:63:4d:42:d7:6a:66:34:5f:23:9d:dc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Validity
Not Before: Mar 25 19:01:00 2026 GMT
Not After : Mar 26 19:01:00 2026 GMT
Subject: CN=5847a7073bfb0a5f33b1465809248b588ed5b320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:50:05:57:28:10:36:8c:65:06:7b:52:10:a6:
02:74:c9:27:ea:d8:55:34:e6:ac:52:0c:18:ba:16:
03:3f:d7:c5:ca:6f:02:7c:60:0a:14:0e:ba:b1:78:
61:5b:6d:ae:dd:f1:e9:fb:0a:e9:b1:aa:ad:73:2c:
68:35:5e:04:98:83:83:cd:76:ef:5d:5e:48:56:7b:
5a:0c:94:c5:ed:7e:dd:d5:1d:56:83:23:eb:ed:47:
88:45:25:fe:e3:34:b8:0a:e1:20:e6:fd:b9:a4:fc:
8b:89:65:e1:12:84:94:84:33:28:d5:16:2c:f1:90:
d9:28:30:59:fd:97:27:bb:5f:9d:ca:a3:8f:f9:54:
e5:ac:30:17:30:2f:73:e2:8b:f6:b4:82:43:14:02:
28:91:78:10:a9:ec:e3:08:40:98:ff:5c:b0:40:12:
36:c8:a0:a3:ad:77:a4:65:50:a1:39:6c:73:ba:6c:
a7:07:87:62:ca:d9:85:ec:c1:94:df:a4:59:50:dd:
95:4d:90:61:6d:99:6a:23:dc:8d:4d:cc:be:b0:a0:
c6:55:b9:99:66:fb:3b:18:0a:43:19:1c:8a:23:5d:
d6:76:58:d5:38:81:47:17:ce:66:e4:e5:97:8a:8c:
84:9b:d9:ce:f2:f6:e8:f5:bb:6b:86:cd:4d:15:fd:
05:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:47:A7:07:3B:FB:0A:5F:33:B1:46:58:09:24:8B:58:8E:D5:B3:20
X509v3 Authority Key Identifier:
keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:dd:fd:75:5c:35:f6:c3:6c:0c:71:7b:16:1b:41:8e:68:5e:
ac:f2:bd:db:d3:b0:ef:c3:61:da:1a:a3:b1:6c:03:16:a7:c6:
d1:8a:60:52:df:68:8f:d3:22:04:9a:34:9d:d2:22:cb:c0:ff:
75:cf:be:e6:fe:8b:6b:a7:f2:44:77:ff:11:ce:77:62:c8:38:
e1:99:97:fb:e5:4e:fc:b4:db:af:1c:19:7c:30:14:29:07:5f:
ee:ef:23:aa:dc:7f:1c:53:e9:35:3f:87:d2:d1:84:7a:31:ab:
1b:aa:4b:20:74:c9:f8:29:dc:15:40:ec:74:67:6d:26:1c:dd:
58:f4:d1:53:38:35:ad:0e:48:55:9e:34:d5:49:ff:84:d0:61:
34:a9:af:fd:0d:d8:aa:46:32:3a:63:47:bf:c5:02:b0:1c:fb:
e0:7c:a4:40:45:86:93:da:78:8c:ad:61:6c:c0:2f:e5:a8:04:
fe:f7:43:fb:af:81:a6:dd:d0:57:59:03:33:98:d9:24:89:47:
d9:ad:8a:95:c2:e4:d9:fb:5c:45:d8:d5:a0:9f:44:e2:0b:c5:
d5:46:d6:ff:c8:e3:6d:f7:24:33:0a:21:28:4f:be:69:9a:cb:
83:93:35:0e:ef:ab:b4:5c:ba:49:87:bc:da:da:9a:d3:61:1d:
be:58:13:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXxxpY01C12pmNF8jndywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxN2NiMTRjZTQwMTRhYzMyNjlkNzBlZWVhODljODcwNTVi
MTc2ZjEwHhcNMjYwMzI1MTkwMTAwWhcNMjYwMzI2MTkwMTAwWjAzMTEwLwYDVQQD
Eyg1ODQ3YTcwNzNiZmIwYTVmMzNiMTQ2NTgwOTI0OGI1ODhlZDViMzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VAFVygQNoxlBntSEKYCdMkn6thV
NOasUgwYuhYDP9fFym8CfGAKFA66sXhhW22u3fHp+wrpsaqtcyxoNV4EmIODzXbv
XV5IVntaDJTF7X7d1R1WgyPr7UeIRSX+4zS4CuEg5v25pPyLiWXhEoSUhDMo1RYs
8ZDZKDBZ/Zcnu1+dyqOP+VTlrDAXMC9z4ov2tIJDFAIokXgQqezjCECY/1ywQBI2
yKCjrXekZVChOWxzumynB4diytmF7MGU36RZUN2VTZBhbZlqI9yNTcy+sKDGVbmZ
Zvs7GApDGRyKI13WdljVOIFHF85m5OWXioyEm9nO8vbo9btrhs1NFf0F3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhHpwc7+wpfM7FGWAkki1iO1bMgMB8GA1UdIwQY
MBaAFIF8sUzkAUrDJp1w7uqJyHBVsXbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mNmY1MDgtNGIzZS00MjJkLThmYmMt
MWEyYWJkYTFhOWU1LzEvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mNmY1MDgtNGIzZS00MjJkLThmYmMtMWEyYWJkYTFhOWU1
LzEvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPd39dVw1
9sNsDHF7FhtBjmherPK929Ow78Nh2hqjsWwDFqfG0YpgUt9oj9MiBJo0ndIiy8D/
dc++5v6La6fyRHf/Ec53Ysg44ZmX++VO/LTbrxwZfDAUKQdf7u8jqtx/HFPpNT+H
0tGEejGrG6pLIHTJ+CncFUDsdGdtJhzdWPTRUzg1rQ5IVZ401Un/hNBhNKmv/Q3Y
qkYyOmNHv8UCsBz74HykQEWGk9p4jK1hbMAv5agE/vdD+6+Bpt3QV1kDM5jZJIlH
2a2KlcLk2ftcRdjVoJ9E4gvF1UbW/8jjbfckMwohKE++aZrLg5M1Du+rtFy6SYe8
2tqa02EdvlgT8g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:41 2026 by rpki-client