Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
File: g_rANRxoqaHdZA2oY9hnrYX3ipE.mft (raw, json)
Hash identifier: QxWXwzgUnPbYhTQH2bwDab7xY2y0dEF830TS8nIPYl0=
Subject key identifier: 16:3B:6C:13:8B:FE:16:A5:69:49:F4:BB:24:05:4A:0B:50:BB:D4:BC
Authority key identifier: 83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
Certificate issuer: /CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Certificate serial: 019D9F9B1B36CA65977687AB0CFA6A1C00D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
Manifest number: 0203
Signing time: Sat 18 Apr 2026 08:00:35 +0000
Manifest this update: Sat 18 Apr 2026 08:00:35 +0000
Manifest next update: Sun 19 Apr 2026 08:00:35 +0000
Files and hashes: 1: g_rANRxoqaHdZA2oY9hnrYX3ipE.crl (hash: tQn5CiAMMu/G5n0DQt4lo9oUhYQHBGm+TUQ+GCOWbbQ=)
2: jpo0P1bv75byvE6Uc1iS5rsp5PQ.roa (hash: orgmNk1notPErLnn1LIBwRtRE9IlZLvNrZGm1ZGrDr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9f:9b:1b:36:ca:65:97:76:87:ab:0c:fa:6a:1c:00:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Validity
Not Before: Apr 18 08:00:35 2026 GMT
Not After : Apr 19 08:00:35 2026 GMT
Subject: CN=163b6c138bfe16a56949f4bb24054a0b50bbd4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:34:50:38:c2:1f:a7:cb:e6:eb:16:a7:06:
3b:53:59:1f:ca:8d:40:2e:38:20:da:56:f3:5a:35:
ca:fa:8d:ab:90:98:6e:65:41:9d:78:cc:6e:e9:83:
95:16:7d:c7:71:3e:c7:b2:fc:25:27:03:84:2b:db:
6d:b4:8b:8a:ab:4a:0b:c0:80:bc:b0:34:1d:94:38:
78:25:72:a9:ba:5e:f9:d4:ed:f3:27:88:df:a0:e3:
36:a0:89:bb:7f:74:21:e2:5a:6f:64:b4:45:82:d0:
b3:d2:6c:e7:f3:27:dd:ae:c8:1d:db:3e:cf:c1:8d:
5a:c3:9b:1e:68:8f:c6:29:98:21:99:8c:87:c7:94:
77:d9:2b:ed:8a:9a:55:b3:e4:04:95:d8:67:8a:7f:
a6:78:87:23:6b:70:b4:4f:79:cf:0c:1f:d5:f0:85:
ec:09:3b:91:8a:f0:eb:56:94:db:17:45:e3:fa:08:
67:59:4d:3c:5b:da:ce:e1:18:66:18:d5:64:85:a9:
2c:9a:e0:62:9e:8e:c1:08:94:48:f3:37:05:8d:1b:
3c:47:e0:99:0a:75:c6:68:5c:19:8f:c4:3c:89:ec:
06:36:b4:78:ff:c5:ce:39:f5:e2:57:fc:57:b8:c0:
75:b4:d4:cf:53:4d:2e:12:60:74:fd:13:53:03:f2:
bd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3B:6C:13:8B:FE:16:A5:69:49:F4:BB:24:05:4A:0B:50:BB:D4:BC
X509v3 Authority Key Identifier:
keyid:83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8d:c7:c9:19:d7:7b:c3:8b:ab:92:ad:16:5a:62:90:f9:c5:
01:1e:e1:37:4b:78:e3:7e:37:17:19:7e:96:4f:53:b6:57:fc:
80:00:3a:1d:80:05:8a:11:ad:83:da:5e:e9:1e:38:b4:f6:5c:
f2:30:9b:8e:42:81:67:02:01:da:fa:be:92:3e:41:84:a1:1f:
03:c1:6b:f1:19:bc:9a:f0:82:8c:80:cd:68:82:14:a7:9c:bd:
37:7e:a1:a9:a2:da:35:a8:84:58:e2:e7:2d:8d:8c:b2:5f:15:
04:6e:13:99:a0:29:25:12:0d:8c:be:6a:a9:97:6d:fc:2c:3b:
d0:25:30:09:5e:c7:38:11:8f:4c:e4:c7:e4:fe:b8:7a:6f:84:
1a:38:95:46:75:e4:0f:d4:2c:2f:52:02:f8:0d:ba:a1:b3:07:
d0:16:a2:61:0c:91:6d:24:02:a4:78:0e:e1:79:b0:b6:a3:27:
a4:08:24:7f:51:b5:aa:77:d8:11:90:8e:3d:34:b8:d8:7c:e0:
99:c3:e4:1b:b6:20:91:f7:75:a4:3d:f5:50:9b:43:a5:cf:3e:
b0:0b:fb:0e:89:5e:38:ee:91:63:10:f6:6f:5c:e7:61:0c:85:
59:5a:cf:3a:4a:8c:d1:51:fd:f5:59:96:b5:2a:3c:17:88:cc:
f9:6b:5b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:28:07 2026 by rpki-client