
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
File: gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json)
Hash identifier: seS81BneuRYfj6yKxQ6vSsDPV9xbMHaYl0rPKX3mqUI=
Subject key identifier: 45:4C:2A:12:CA:74:CE:C9:D0:28:80:84:2F:E6:A9:80:7C:8A:0F:2A
Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Certificate serial: 019F905A99D0FDB28BAA1F94BC0CBB3BFD44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
Manifest number: 0AA4
Signing time: Thu 23 Jul 2026 19:01:24 +0000
Manifest this update: Thu 23 Jul 2026 19:01:24 +0000
Manifest next update: Fri 24 Jul 2026 19:01:24 +0000
Files and hashes: 1: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: tGkjIXb2HYiOoJp3VSamMXOpZC493eUNgjCQuJ6zBO0=)
2: qdUh2hSoqgeqIRg-X_UezX9LadQ.roa (hash: T5mdwLAzJSWrOE2roB/OPAtD4ZvRlYtzJ6Bor5XITOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:99:d0:fd:b2:8b:aa:1f:94:bc:0c:bb:3b:fd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Validity
Not Before: Jul 23 19:01:24 2026 GMT
Not After : Jul 24 19:01:24 2026 GMT
Subject: CN=454c2a12ca74cec9d02880842fe6a9807c8a0f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:fb:42:26:dd:12:1e:3b:40:ef:12:aa:73:
64:07:3f:50:9e:5d:04:2a:7e:96:f8:c3:2b:16:ba:
f4:05:d9:88:ee:52:e0:f6:e2:7c:9a:6e:e6:35:1d:
7f:ea:ea:05:41:5d:c4:ae:73:b8:85:58:f4:14:8a:
09:a8:2a:d2:e3:e8:2a:36:3f:7b:de:72:0d:bd:5f:
20:a3:e2:06:ce:93:55:28:cd:ca:e1:cc:38:5a:2d:
60:76:0b:7d:0f:4b:93:0b:00:e3:b4:b3:d4:a2:d3:
dc:78:ea:29:8b:2c:b9:7d:56:a9:da:63:6e:4e:2a:
8e:01:4a:80:5f:2c:9b:39:65:81:29:47:4e:63:f5:
92:81:04:fd:24:11:f7:eb:e0:7c:98:8c:10:98:77:
05:10:ae:9c:38:6f:69:db:36:69:d8:26:37:4d:d8:
f3:8e:59:f1:f7:f7:9c:95:9e:04:9e:55:31:e1:f0:
4b:c9:d1:ef:4a:f6:99:4d:22:86:0e:86:20:a4:da:
e1:0a:f6:ef:99:37:f1:48:bf:83:a0:19:84:ed:39:
ef:41:7d:62:5c:8a:2c:23:96:65:26:f9:fa:87:31:
7b:51:f7:38:73:7f:7b:86:e2:fd:e4:74:ab:1b:ad:
fb:02:e0:60:a1:c8:81:ea:30:73:c7:71:92:1e:d9:
46:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4C:2A:12:CA:74:CE:C9:D0:28:80:84:2F:E6:A9:80:7C:8A:0F:2A
X509v3 Authority Key Identifier:
keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4c:53:a2:07:1f:6f:fe:7f:64:cc:06:b4:2e:91:fe:60:8b:
40:35:3e:e8:f0:46:91:f6:2b:0f:d8:bc:12:a5:48:ad:90:f6:
c6:f7:94:1b:9f:d8:10:52:55:fd:63:d9:d5:53:7a:b4:70:4e:
4c:d8:34:7b:72:88:6e:4d:70:4f:f5:de:e4:cc:66:fe:73:3a:
9e:11:a9:1e:a9:b7:2c:32:3e:d8:83:5d:19:ed:7b:98:46:6a:
89:c4:7c:0f:81:d1:e6:cb:04:ce:9a:cf:e1:11:11:ae:8d:15:
3d:6e:55:c2:b2:d3:24:06:49:0c:09:c3:3e:94:e8:50:fe:0f:
b6:2d:48:0b:fd:ef:b5:4d:c0:1b:b5:94:92:dc:06:f2:f3:5d:
52:38:60:c7:f2:0c:c2:2c:dd:89:c8:60:bf:67:f7:7c:29:e7:
bb:a5:bf:2e:db:72:4f:28:a3:fa:f0:d5:36:5e:ec:39:19:61:
16:59:d4:31:5a:cc:55:8f:c0:b8:89:ed:5e:db:13:8e:aa:b1:
f6:b8:48:0c:52:f0:27:1d:c2:01:8b:f3:18:66:29:e4:99:cf:
74:8b:29:4e:1b:66:fc:bd:07:21:84:f1:14:87:e9:ae:f0:81:
48:7d:01:bc:76:71:19:2d:ab:91:6b:7a:ae:09:b1:6c:9e:c7:
11:80:d5:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWpnQ/bKLqh+UvAy7O/1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxN2NiMTRjZTQwMTRhYzMyNjlkNzBlZWVhODljODcwNTVi
MTc2ZjEwHhcNMjYwNzIzMTkwMTI0WhcNMjYwNzI0MTkwMTI0WjAzMTEwLwYDVQQD
Eyg0NTRjMmExMmNhNzRjZWM5ZDAyODgwODQyZmU2YTk4MDdjOGEwZjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHv7QibdEh47QO8SqnNkBz9Qnl0E
Kn6W+MMrFrr0BdmI7lLg9uJ8mm7mNR1/6uoFQV3ErnO4hVj0FIoJqCrS4+gqNj97
3nINvV8go+IGzpNVKM3K4cw4Wi1gdgt9D0uTCwDjtLPUotPceOopiyy5fVap2mNu
TiqOAUqAXyybOWWBKUdOY/WSgQT9JBH36+B8mIwQmHcFEK6cOG9p2zZp2CY3Tdjz
jlnx9/eclZ4EnlUx4fBLydHvSvaZTSKGDoYgpNrhCvbvmTfxSL+DoBmE7TnvQX1i
XIosI5ZlJvn6hzF7Ufc4c397huL95HSrG637AuBgociB6jBzx3GSHtlG9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVMKhLKdM7J0CiAhC/mqYB8ig8qMB8GA1UdIwQY
MBaAFIF8sUzkAUrDJp1w7uqJyHBVsXbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mNmY1MDgtNGIzZS00MjJkLThmYmMt
MWEyYWJkYTFhOWU1LzEvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mNmY1MDgtNGIzZS00MjJkLThmYmMtMWEyYWJkYTFhOWU1
LzEvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkxTogcf
b/5/ZMwGtC6R/mCLQDU+6PBGkfYrD9i8EqVIrZD2xveUG5/YEFJV/WPZ1VN6tHBO
TNg0e3KIbk1wT/Xe5Mxm/nM6nhGpHqm3LDI+2INdGe17mEZqicR8D4HR5ssEzprP
4RERro0VPW5VwrLTJAZJDAnDPpToUP4Pti1IC/3vtU3AG7WUktwG8vNdUjhgx/IM
wizdichgv2f3fCnnu6W/LttyTyij+vDVNl7sORlhFlnUMVrMVY/AuIntXtsTjqqx
9rhIDFLwJx3CAYvzGGYp5JnPdIspThtm/L0HIYTxFIfprvCBSH0BvHZxGS2rkWt6
rgmxbJ7HEYDVvw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:10 2026 by rpki-client