Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
File: g_rANRxoqaHdZA2oY9hnrYX3ipE.mft (raw, json)
Hash identifier: u5v+PC8V3vy1ZtzACUUXLJqyEcH0IkLqqi2EcsJC78Q=
Subject key identifier: 34:6D:D5:AB:A0:4A:13:F9:BC:06:97:6D:20:A8:B1:75:66:25:11:C8
Authority key identifier: 83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
Certificate issuer: /CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Certificate serial: 01A0C96B3A2809DF0A5E8F3F9B45E05E9950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
Manifest number: 03A7
Signing time: Tue 22 Sep 2026 14:00:42 +0000
Manifest this update: Tue 22 Sep 2026 14:00:42 +0000
Manifest next update: Wed 23 Sep 2026 14:00:42 +0000
Files and hashes: 1: RpX-BY98Lx61d6BbDQ85JgwJHHA.roa (hash: 0VMmsY08zvLKyajdXHCzmWNfxGZ2eh7xs6DS8yoIsrs=)
2: g_rANRxoqaHdZA2oY9hnrYX3ipE.crl (hash: oHhZtN89a42S/4+LNFwLRrzZoS+BT+5sxoNKFr/Meu0=)
3: jpo0P1bv75byvE6Uc1iS5rsp5PQ.roa (hash: orgmNk1notPErLnn1LIBwRtRE9IlZLvNrZGm1ZGrDr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:3a:28:09:df:0a:5e:8f:3f:9b:45:e0:5e:99:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Validity
Not Before: Sep 22 14:00:42 2026 GMT
Not After : Sep 23 14:00:42 2026 GMT
Subject: CN=346dd5aba04a13f9bc06976d20a8b175662511c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:eb:d9:a0:23:95:d7:c4:35:67:04:b9:90:5d:
91:d1:fb:e9:f1:3c:a5:23:e9:c6:49:61:50:b0:31:
87:4c:c5:4d:d2:0d:46:26:4e:c8:dc:5b:c4:71:da:
ef:a3:ee:0d:58:e4:a1:b6:c4:51:b2:00:e4:4b:94:
be:18:5d:08:21:20:eb:27:d5:7c:5e:2a:a4:ae:20:
fd:e3:4b:fa:9b:0c:46:ea:90:7d:17:78:f5:20:63:
63:98:02:8e:5e:41:0b:2e:84:42:2a:38:77:ee:ab:
3d:e5:36:1f:4b:a5:f5:fd:4d:68:35:3b:9d:28:b2:
3b:93:61:3c:4e:56:81:73:a8:55:e2:3e:7b:18:1c:
51:e6:e8:dd:ec:3f:21:d2:69:6a:14:13:ef:b8:46:
6f:63:11:d8:0d:c3:14:a3:dd:cc:91:96:d2:dd:d4:
12:b0:6f:17:c2:f5:e4:66:92:4a:c1:e2:cd:b4:a2:
ab:89:37:ac:65:9d:c5:1b:47:84:02:e8:72:e7:0d:
7f:55:1d:fc:44:3d:69:6d:91:b8:8a:9e:10:51:5c:
71:dc:60:57:28:a2:8c:61:08:95:a0:1c:57:f5:54:
ff:7d:78:6e:e7:86:0a:44:5b:e8:1f:1e:ce:90:f2:
a1:e3:01:df:33:22:23:39:a8:42:41:ea:a4:6c:56:
eb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6D:D5:AB:A0:4A:13:F9:BC:06:97:6D:20:A8:B1:75:66:25:11:C8
X509v3 Authority Key Identifier:
keyid:83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f0:f3:2e:96:14:97:bf:3c:94:58:2f:bf:7a:f0:9d:4e:4f:
12:e8:c1:d3:62:3d:4c:0a:c3:12:d5:d6:52:c2:e7:3e:04:46:
92:da:d7:92:3d:81:8b:ae:09:ca:bc:3e:de:bc:f1:15:2d:2f:
8f:fc:1d:54:81:ee:2e:e4:43:0e:52:b3:75:0f:fb:d0:b5:b3:
5a:9e:41:95:22:d8:7c:22:d6:58:3a:ab:bd:16:56:07:7c:b8:
65:f3:80:88:04:2b:b1:b5:85:d2:ad:c7:b8:a8:07:4e:20:90:
bb:03:2b:b5:f5:d3:7f:1d:39:71:af:c9:36:05:cb:45:aa:d9:
b7:54:ea:bd:a0:34:03:df:b2:a2:c0:d8:4f:05:57:59:0b:4b:
c5:b4:0f:f8:e4:e6:2a:0a:0e:c6:63:c6:d3:33:43:54:d4:05:
6c:8b:24:8a:a4:db:3b:45:c0:51:0e:16:2c:bb:61:94:29:0b:
17:a0:83:45:e9:60:bd:3b:18:80:15:a8:ea:e8:15:43:96:65:
e0:bb:30:67:47:2b:92:35:5c:a0:48:95:5c:2c:de:6b:c5:67:
3c:e7:9d:56:ec:82:3a:d6:23:d9:26:f9:28:bc:4a:25:a0:94:
93:0f:86:27:89:bb:3e:0e:cb:63:21:3a:29:95:a1:ac:5e:e9:
d1:98:b3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:14:55 2026 by rpki-client