Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
File: g_rANRxoqaHdZA2oY9hnrYX3ipE.mft (raw, json)
Hash identifier: C+vg4wJmUjd9evKlmEmshS9rfajcJXB7PCfjwZhF+tE=
Subject key identifier: C0:F5:FB:CF:0B:1F:52:26:18:35:B0:28:C6:35:E5:2A:05:54:AC:5D
Authority key identifier: 83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
Certificate issuer: /CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Certificate serial: 019CAC46FD9D8DA7966797AC735DC27E2856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
Manifest number: 0185
Signing time: Mon 02 Mar 2026 02:00:59 +0000
Manifest this update: Mon 02 Mar 2026 02:00:59 +0000
Manifest next update: Tue 03 Mar 2026 02:00:59 +0000
Files and hashes: 1: g_rANRxoqaHdZA2oY9hnrYX3ipE.crl (hash: J6xAmtcRYjFBMY2YdSjQBWoWSveHlXkf2GMDZCuHo+4=)
2: jpo0P1bv75byvE6Uc1iS5rsp5PQ.roa (hash: orgmNk1notPErLnn1LIBwRtRE9IlZLvNrZGm1ZGrDr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:fd:9d:8d:a7:96:67:97:ac:73:5d:c2:7e:28:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Validity
Not Before: Mar 2 02:00:59 2026 GMT
Not After : Mar 3 02:00:59 2026 GMT
Subject: CN=c0f5fbcf0b1f52261835b028c635e52a0554ac5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:24:0a:1d:36:51:fa:cc:58:a2:d6:a8:2e:cf:
12:9b:4e:2d:0c:7a:24:d8:e8:69:ea:b4:91:ef:7f:
d4:9e:83:cd:14:f8:17:3b:05:e7:2b:eb:dc:63:15:
c4:93:da:85:9f:03:f0:7d:c5:4c:47:ab:8e:39:16:
68:ed:2f:c6:93:b6:a1:78:2c:29:f8:cb:7f:b1:07:
4f:5e:c2:28:cd:1b:8c:71:0c:7e:2e:fc:4d:ad:b5:
94:3f:67:4f:62:06:5f:69:5f:8a:39:07:b5:3d:bb:
4a:e3:fb:9b:12:d9:25:8b:ce:f2:65:0e:eb:04:68:
a7:11:0c:a8:08:dc:4e:85:7e:d9:f0:7b:66:35:24:
16:53:8d:3b:c2:ae:60:d8:9b:be:b5:c3:39:1a:ec:
d1:6d:26:a5:55:5a:88:d2:c0:9c:75:6c:2b:ed:95:
f0:64:2e:7f:b2:67:1e:46:0c:1c:74:e1:c0:b5:1e:
62:d3:59:e7:3e:39:ff:c7:aa:d4:8a:24:cf:5d:5c:
cb:78:24:4a:6d:b2:56:5d:b4:f5:72:28:aa:01:89:
11:08:2c:d3:ea:ab:50:88:7a:05:ef:4c:bc:28:36:
41:99:33:1c:25:63:85:e9:92:1c:6e:f9:0b:84:4f:
d0:8e:33:f5:e8:51:60:2a:f9:0b:cf:6d:5c:69:13:
78:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F5:FB:CF:0B:1F:52:26:18:35:B0:28:C6:35:E5:2A:05:54:AC:5D
X509v3 Authority Key Identifier:
keyid:83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3a:48:60:83:d6:a0:3f:3f:bd:00:e9:ee:bd:18:84:e1:89:
09:80:8b:e7:89:aa:0a:a6:ec:dd:a6:85:cc:10:18:c5:2d:88:
63:16:d3:a3:6d:1f:7e:a7:b1:5b:58:c5:35:23:78:ba:b1:8d:
f1:3b:a2:e2:80:1e:92:3f:1d:6a:75:31:e3:22:5f:cd:ca:4e:
63:9f:bd:b4:aa:ce:e5:04:bd:ac:46:8c:f1:39:7e:e0:d5:ed:
b6:b9:bc:64:51:50:6b:34:59:8e:0f:43:3e:21:10:77:24:a8:
15:44:9f:34:b4:c9:43:a3:df:45:f3:40:66:c3:25:4d:d8:31:
5d:d5:36:75:5e:a7:b6:33:54:56:43:9c:af:e1:72:68:d6:6a:
c4:9e:37:9c:4c:a7:fd:6e:6b:00:44:58:50:f7:71:46:82:69:
0f:77:dc:96:da:ac:31:01:18:54:12:a8:6e:ad:83:0e:dd:12:
e6:10:a5:60:56:3e:78:7c:e9:d3:b6:de:31:00:86:3a:b3:f4:
4d:66:68:8b:3b:26:ff:f2:23:30:81:f6:a1:2a:b0:17:80:aa:
e7:31:3e:f2:4c:ac:69:60:a2:a3:bb:98:9b:a8:51:1e:43:2d:
00:e4:1a:46:76:81:34:bd:64:17:e8:0d:30:49:16:e6:f2:b2:
59:c2:1c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:10:05 2026 by rpki-client