Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
File: g2Rixix_Y9L114enAdd5q2luIjY.mft (raw, json)
Hash identifier: Aj+g5kJq1fOZm/FINj9NiBNLoEUxJZ5htctRX08yg9M=
Subject key identifier: 64:EB:30:6F:34:52:88:4A:D8:B6:14:D0:2B:15:3F:E1:B0:0F:D4:90
Authority key identifier: 83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
Certificate issuer: /CN=836462c62c7f63d2f5d787a701d779ab696e2236
Certificate serial: 019D9818FBFD828F7AA342F7D0E8EF3AA098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
Manifest number: 09D7
Signing time: Thu 16 Apr 2026 21:01:07 +0000
Manifest this update: Thu 16 Apr 2026 21:01:07 +0000
Manifest next update: Fri 17 Apr 2026 21:01:07 +0000
Files and hashes: 1: PuchMrjsFjFbMrol0kkaS60RRNs.roa (hash: 0Qhlnt0wkF71rKlYa2Irnl7Q6TZWYHLlCjq7i3HaoAo=)
2: fRxvcTM6ZsttHwF0WM1Q-yByE2A.roa (hash: 82Lay6XggknlrO9CTIQXr6DOK4XN7yH0WY72KW8YeUk=)
3: g2Rixix_Y9L114enAdd5q2luIjY.crl (hash: 1DjsaJgDWTGibvFkIcEr7+ZPUMxAFbTOYJTVAjryJEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:fb:fd:82:8f:7a:a3:42:f7:d0:e8:ef:3a:a0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836462c62c7f63d2f5d787a701d779ab696e2236
Validity
Not Before: Apr 16 21:01:07 2026 GMT
Not After : Apr 17 21:01:07 2026 GMT
Subject: CN=64eb306f3452884ad8b614d02b153fe1b00fd490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:4a:a4:f7:88:bb:7f:f7:c8:16:e7:15:cd:
db:d2:b8:33:c9:53:b7:32:95:3a:39:82:20:a2:72:
68:3f:e3:b8:a7:d8:b5:b9:18:55:e5:7b:f5:d7:92:
e9:c8:d0:62:f6:56:60:13:eb:02:62:64:84:dc:c8:
4c:7a:c8:1a:67:93:d7:5f:b1:5e:04:d7:78:a2:af:
0e:d7:8a:41:2b:fd:5b:ff:86:7b:d2:be:c5:5e:1d:
ab:db:0d:68:cb:0f:e0:41:c6:28:38:49:57:bc:f5:
16:3b:9c:df:ca:e9:fe:0b:f8:dc:c7:bb:a0:94:07:
fe:13:a0:0c:73:c6:b5:fb:66:8b:4e:0a:70:a0:ea:
2a:42:4f:7b:97:ce:97:9f:ee:9e:e4:9f:dd:06:91:
53:aa:07:ee:4a:ed:f8:a3:f0:a7:44:53:dd:60:e7:
04:78:96:21:94:83:b5:c8:53:a9:0b:89:27:9f:cd:
1b:40:76:85:78:ff:2a:dd:79:e1:0c:08:a0:1f:83:
8c:fd:8d:dd:1e:ed:3c:cc:ab:91:0a:61:43:7d:47:
3c:32:6f:02:e7:7a:7c:29:8c:9c:b0:2d:c7:9d:97:
f5:0a:95:9f:fc:1d:35:d1:4d:0d:76:b2:00:48:1d:
a7:8a:d9:17:21:fc:27:b4:69:76:d6:d4:11:ca:33:
75:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EB:30:6F:34:52:88:4A:D8:B6:14:D0:2B:15:3F:E1:B0:0F:D4:90
X509v3 Authority Key Identifier:
keyid:83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:11:47:c4:4c:34:96:bf:25:8e:50:b3:ee:a2:1c:6d:99:b5:
2b:97:1b:bf:f2:90:8a:8d:67:78:a6:d2:d5:77:91:4d:ea:02:
b4:77:78:84:da:7b:e9:f8:3d:3d:a9:de:5a:2a:20:05:f5:59:
51:dc:4f:a7:cf:13:0b:26:41:4b:2b:46:90:28:f8:c8:63:cd:
dc:03:ae:82:6b:81:a4:b2:0d:95:84:f5:cf:e0:4d:2f:dc:29:
2b:65:dc:22:20:14:f0:1e:7f:69:c0:31:19:4c:b0:27:59:e5:
0c:e6:41:50:71:cb:e8:eb:0a:69:9d:50:04:0d:7c:9f:f5:7f:
3d:af:97:88:99:0d:bb:57:0d:7f:88:d1:c1:f6:af:34:39:de:
33:02:fa:c1:39:31:01:8d:59:24:25:66:e2:dc:37:5a:4f:07:
33:90:a9:f8:98:c5:f4:82:25:b7:16:f6:a6:88:7e:84:2b:14:
4f:ad:fc:30:ab:f5:65:cc:d0:3f:1f:eb:21:30:da:0d:93:84:
7c:91:c9:12:a1:49:d4:67:99:be:3d:af:b7:8d:53:7b:a5:76:
40:d0:8c:dc:0a:c3:d3:f3:4d:bb:b4:98:62:91:46:96:e5:83:
5d:37:e3:fb:6d:9c:04:20:de:90:18:10:04:61:62:23:64:a2:
ec:74:9e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:56 2026 by rpki-client