Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
File: g_rANRxoqaHdZA2oY9hnrYX3ipE.mft (raw, json)
Hash identifier: OD0ngMnug8NcBdXa4f/UikzqqQ0j9qiqH7pvzOrd3hc=
Subject key identifier: D5:75:08:77:03:D2:C9:AF:CA:FB:E3:17:91:E9:CA:63:86:0D:91:60
Authority key identifier: 83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
Certificate issuer: /CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Certificate serial: 019FA9AC1848726E3CA8499BE82426751C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
Manifest number: 0312
Signing time: Tue 28 Jul 2026 17:00:55 +0000
Manifest this update: Tue 28 Jul 2026 17:00:55 +0000
Manifest next update: Wed 29 Jul 2026 17:00:55 +0000
Files and hashes: 1: RpX-BY98Lx61d6BbDQ85JgwJHHA.roa (hash: 0VMmsY08zvLKyajdXHCzmWNfxGZ2eh7xs6DS8yoIsrs=)
2: g_rANRxoqaHdZA2oY9hnrYX3ipE.crl (hash: I98IEU1lmTU0gkYa5+pkTAsmecs5/kbRyu2TOc2rpBA=)
3: jpo0P1bv75byvE6Uc1iS5rsp5PQ.roa (hash: orgmNk1notPErLnn1LIBwRtRE9IlZLvNrZGm1ZGrDr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:18:48:72:6e:3c:a8:49:9b:e8:24:26:75:1c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Validity
Not Before: Jul 28 17:00:55 2026 GMT
Not After : Jul 29 17:00:55 2026 GMT
Subject: CN=d575087703d2c9afcafbe31791e9ca63860d9160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:da:24:1f:39:67:cb:ee:54:ae:ae:97:b6:
d9:65:f5:c6:c7:20:73:32:af:83:26:7b:2b:54:12:
be:63:99:cd:92:2f:ab:af:c7:8f:18:c2:6b:77:95:
6f:51:6a:0c:ec:40:12:a9:c1:91:f1:a1:32:a7:4a:
c3:87:1f:b6:b3:38:a1:e5:79:bf:1b:8f:37:46:2f:
ec:6a:9a:66:3c:63:4d:b8:05:c2:e7:75:d4:e6:a8:
c0:b9:b7:4c:b6:4e:00:9e:b0:48:49:1f:f0:d3:cf:
a3:e1:4a:a7:92:e2:2f:52:b5:6e:62:f7:64:e2:da:
32:4d:2f:18:b0:8a:ac:f7:9c:ee:ff:da:fa:61:24:
36:8a:34:02:52:27:ea:d4:25:86:a1:6b:6e:8a:ad:
90:be:9a:6b:5e:c4:58:ac:14:13:5a:0a:f9:00:0f:
75:02:b1:b9:c3:7a:84:7d:cb:c9:31:89:ad:bd:14:
c6:ab:da:1c:ad:11:10:42:43:22:ba:b1:d7:02:64:
2b:ed:95:5a:0c:d6:2d:17:51:04:eb:3c:ac:fe:01:
5b:f4:e5:44:af:c2:3f:78:7c:7a:84:57:a7:af:38:
9e:02:87:f1:32:56:ff:3d:d3:92:bd:f6:88:7c:39:
3a:18:ff:4f:14:71:ec:26:37:7c:23:0d:b9:a7:6f:
1d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:75:08:77:03:D2:C9:AF:CA:FB:E3:17:91:E9:CA:63:86:0D:91:60
X509v3 Authority Key Identifier:
keyid:83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:45:94:8e:73:c3:8f:ec:6a:93:48:ea:51:98:f1:6c:da:94:
fd:d7:36:a0:a2:ae:a7:9a:0c:19:55:5f:a2:8a:8f:88:55:a4:
89:97:70:d4:33:bf:6e:8b:76:d4:93:ab:0c:de:ae:d5:30:81:
dc:45:8a:8d:c9:3c:64:a6:50:66:aa:0a:8e:dc:50:e1:c8:75:
f5:5c:8a:b4:ab:62:a6:b6:b6:8c:ee:a6:0a:a0:03:17:64:a2:
b2:15:ef:b8:c8:c8:65:96:25:97:9a:0d:da:cf:fe:39:69:b5:
52:33:6e:58:60:e2:c3:e6:16:33:25:31:09:8c:b5:79:cd:b9:
3c:e1:19:bd:01:43:3c:d1:0a:6f:3d:f4:58:df:7a:de:09:14:
52:58:86:68:8c:7d:9a:f6:ef:bd:c4:c8:17:81:e4:38:47:30:
57:f6:ce:e1:2b:4f:3e:65:2b:87:69:3e:35:60:ed:ab:7b:7f:
4f:e9:9b:d2:bb:5f:ba:b8:9e:08:d4:9f:69:16:be:cf:13:86:
ea:5c:0a:59:2c:21:0d:30:aa:83:2b:4f:a9:f9:37:2f:08:fa:
8d:1e:07:51:24:a1:36:89:3c:50:b3:bd:6a:b2:21:a5:cc:4e:
1e:30:bc:67:49:60:36:ce:6b:3c:1b:10:b6:f8:1b:d8:91:b4:
1a:85:48:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:31:15 2026 by rpki-client