Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
File: gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json)
Hash identifier: c1sWB42cxoDog30O7iECMZQyai4PsT62PVHHzFaRy84=
Subject key identifier: 46:AC:A9:62:7A:EE:60:52:CE:31:29:0A:18:8A:96:A5:CE:C7:72:5F
Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Certificate serial: 01A0D45EC20C62BD1CC640DCFDA51FB9CFE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
Manifest number: 0B4E
Signing time: Thu 24 Sep 2026 17:02:54 +0000
Manifest this update: Thu 24 Sep 2026 17:02:54 +0000
Manifest next update: Fri 25 Sep 2026 17:02:54 +0000
Files and hashes: 1: BrZTUyi-tGkVW3frHFqGPTrclg4.roa (hash: u31qYKqfCskmP0+1HNhZCidcMXGPS+++9rNIo0+tEFc=)
2: P4ilQBuKUlgTootCdOEF0HPO4IM.roa (hash: 3FfJFJ0SwP30eIW/tk79v1+okqhDhDPyY7bK/Y4Nft8=)
3: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: 0uj3IzFCSyEuw5INkMtpQyOpl0ikL3NGh4TXCMhnsbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 17:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5e:c2:0c:62:bd:1c:c6:40:dc:fd:a5:1f:b9:cf:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Validity
Not Before: Sep 24 17:02:54 2026 GMT
Not After : Sep 25 17:02:54 2026 GMT
Subject: CN=46aca9627aee6052ce31290a188a96a5cec7725f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:da:3d:5a:ca:81:0b:48:54:68:06:3a:b5:0d:
41:0c:12:d3:6b:3f:08:12:86:ec:6a:91:37:9c:63:
e0:87:cf:52:28:8e:5f:67:6a:a8:54:ff:73:b8:b8:
44:2c:a8:71:c1:4b:55:c0:94:7f:06:88:71:42:9d:
fb:52:6f:22:7f:2f:b1:97:0e:3f:50:c8:9c:43:e7:
2e:37:c6:23:be:7b:aa:0b:79:8a:4b:65:e3:a1:37:
a9:fa:45:d9:97:83:16:e4:72:74:94:da:02:34:8b:
44:da:65:c6:7e:1c:e4:32:bb:50:79:c5:ee:40:35:
1e:f1:1a:fb:8c:52:b2:ae:3e:9c:81:01:f7:75:d2:
cc:5c:62:6d:cf:88:45:16:d2:c9:32:10:22:80:11:
20:89:ac:59:ee:99:30:e6:db:1c:af:36:10:83:b1:
9f:c5:8e:95:2a:68:cc:71:65:0e:97:32:2e:b8:83:
4b:b8:25:ab:d1:16:96:ef:90:3b:84:31:2a:34:63:
ae:42:09:f3:38:82:da:3a:87:14:69:ff:47:d7:ee:
85:a1:f4:c3:a0:40:a9:cf:1d:6b:1e:56:13:1a:90:
4c:ad:b5:e1:58:c7:6e:ba:6a:f3:20:55:69:05:36:
b8:65:66:2c:96:48:b8:1e:f5:94:90:2a:27:12:d3:
75:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AC:A9:62:7A:EE:60:52:CE:31:29:0A:18:8A:96:A5:CE:C7:72:5F
X509v3 Authority Key Identifier:
keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:56:b2:8b:ba:8d:2d:17:bd:a1:7b:25:71:ed:d2:ff:eb:15:
e4:0f:bb:2b:66:df:e4:5d:93:20:8d:ff:2b:3d:d5:3d:bf:90:
96:3f:dd:bf:f0:35:64:c1:a3:40:20:5f:e9:4f:a4:5e:08:b1:
2a:02:25:e1:f7:63:0f:e3:c8:47:b7:83:28:a3:73:10:6b:16:
de:82:de:e7:0a:90:7c:0a:52:4b:e9:f6:ef:17:e3:82:2b:20:
45:4a:1a:f4:8d:bb:2b:0b:7e:17:9d:86:e4:50:0c:45:57:b4:
40:99:5c:f3:32:f3:9b:87:a4:6a:a1:d6:41:de:6e:7a:65:aa:
dc:ca:21:66:ee:d0:93:ad:fd:25:22:97:2d:a8:91:e0:29:74:
5a:88:dd:c9:90:13:19:c9:dd:16:aa:66:6f:3c:49:82:bd:e2:
50:1c:a4:45:4d:55:7e:df:f1:3e:18:85:6a:c8:78:45:0b:60:
c5:e2:69:67:ac:11:c5:7b:19:6a:5e:d1:60:84:83:98:52:0a:
32:d4:0f:3e:dd:12:54:00:30:51:a8:d7:8d:98:5d:8f:0e:97:
78:ae:64:a0:4e:94:c8:85:96:bd:f9:30:f1:b0:7d:45:95:b7:
35:6a:ad:93:85:93:86:57:b0:2b:47:5c:64:11:b2:f7:6f:4c:
76:14:22:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:53:40 2026 by rpki-client