Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
File: g_rANRxoqaHdZA2oY9hnrYX3ipE.mft (raw, json)
Hash identifier: GsOuGt/4vnM0/MgerH1e9SUbkC0UJhEUS65w5z5CRxc=
Subject key identifier: 3B:B3:A9:84:09:65:E8:D6:CA:2D:99:6C:B9:03:B2:CA:43:89:7C:06
Authority key identifier: 83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
Certificate issuer: /CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Certificate serial: 019EBFFFC085C1640A6EECCF04F29EC71D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
Manifest number: 0299
Signing time: Sat 13 Jun 2026 08:01:09 +0000
Manifest this update: Sat 13 Jun 2026 08:01:09 +0000
Manifest next update: Sun 14 Jun 2026 08:01:09 +0000
Files and hashes: 1: RpX-BY98Lx61d6BbDQ85JgwJHHA.roa (hash: 0VMmsY08zvLKyajdXHCzmWNfxGZ2eh7xs6DS8yoIsrs=)
2: g_rANRxoqaHdZA2oY9hnrYX3ipE.crl (hash: dkvLlvSGuVMIfVK39NyDbRkF4HaZROzHS2TU88GQoxw=)
3: jpo0P1bv75byvE6Uc1iS5rsp5PQ.roa (hash: orgmNk1notPErLnn1LIBwRtRE9IlZLvNrZGm1ZGrDr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:c0:85:c1:64:0a:6e:ec:cf:04:f2:9e:c7:1d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Validity
Not Before: Jun 13 08:01:09 2026 GMT
Not After : Jun 14 08:01:09 2026 GMT
Subject: CN=3bb3a9840965e8d6ca2d996cb903b2ca43897c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:7f:fd:d1:5c:26:37:5c:08:14:97:e5:3d:
54:8c:e3:da:a1:86:c9:0b:65:97:7f:9d:8f:6b:35:
6b:88:b8:22:07:dc:84:74:a6:5e:c7:99:a4:97:ce:
38:cd:0f:34:a8:6b:4a:4e:9c:bb:f2:94:42:55:5a:
02:74:68:f9:02:47:4a:4b:27:81:0f:0e:33:9d:47:
cf:c8:c7:9d:9a:40:f4:5e:5a:19:23:ea:02:57:6d:
65:7f:7d:fb:e9:ab:1d:3c:48:d7:af:e1:19:e3:7c:
d6:75:01:e1:f0:af:bc:87:76:5d:7a:f1:2f:56:b3:
44:33:bf:5f:7e:37:8d:d1:b2:6e:ad:ff:5a:b0:a0:
a6:8b:77:90:57:36:b8:f1:01:55:2f:62:71:1c:b0:
9e:38:77:45:04:f5:63:9c:2e:97:7e:5b:68:03:f9:
5a:0f:51:4b:ad:f1:d3:b4:93:76:20:a1:0b:24:9c:
c8:6b:cd:5b:0a:88:3f:2a:97:2f:bb:99:d4:f4:ee:
56:04:93:28:f5:aa:47:2d:ae:ca:19:3f:ab:ed:05:
a3:dc:58:89:17:30:ed:a4:31:0e:e3:4d:42:ac:68:
7b:4e:69:fd:6c:9d:8c:03:de:43:59:f8:e9:ad:7b:
de:47:21:f2:ef:32:e9:70:09:8e:69:0f:4c:51:ca:
65:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B3:A9:84:09:65:E8:D6:CA:2D:99:6C:B9:03:B2:CA:43:89:7C:06
X509v3 Authority Key Identifier:
keyid:83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9d:7f:38:7a:cb:16:4b:8b:ab:4c:d2:ba:84:41:2a:e9:55:
5d:17:df:89:41:63:74:32:10:82:9e:e4:be:5f:fb:33:67:35:
8c:4f:81:c2:00:1f:19:90:ae:4f:01:10:ce:10:d5:70:61:b6:
1c:e2:b6:cf:3b:c5:af:0b:81:a0:e8:91:78:17:e5:b1:2c:45:
e1:42:2e:32:79:5e:41:0c:0f:42:b6:34:12:2b:1b:22:4f:c1:
c1:e3:74:35:28:10:99:68:ba:b1:a3:88:48:84:c4:21:5e:39:
b4:fd:93:9e:b1:7f:f4:a5:cf:11:35:7d:45:55:18:f7:2a:5d:
b9:bf:da:c3:11:ba:0b:e8:f7:8a:5a:62:41:34:b9:ef:fb:f4:
4b:d5:3d:a5:4e:4e:70:5d:e8:67:33:f2:a6:e7:9a:7f:4a:87:
30:e3:db:63:84:a9:a1:33:4d:80:c6:e0:27:fa:d4:f0:a5:5f:
c8:65:c5:46:6e:ac:82:1e:23:8e:aa:57:e7:be:26:be:96:30:
94:f7:56:59:b1:07:83:93:02:71:8a:d2:a1:a1:16:50:7a:03:
95:8c:25:2a:68:4e:32:77:dd:31:9e:c7:3a:ab:65:ef:2a:98:
39:c6:fd:47:cf:08:b5:b6:d6:c1:df:c9:e5:cf:62:95:e0:97:
30:11:78:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:55:17 2026 by rpki-client