Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
File: g2Rixix_Y9L114enAdd5q2luIjY.mft (raw, json)
Hash identifier: SYsiz1Isfhmj0/X2spbbRdQAKUiEIXCfquyPwQvmL5I=
Subject key identifier: FB:DB:F7:1C:6C:80:51:D7:79:F7:05:AF:AA:AC:25:AD:14:5C:73:36
Authority key identifier: 83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
Certificate issuer: /CN=836462c62c7f63d2f5d787a701d779ab696e2236
Certificate serial: 019CAA8FB9788D2366FDC458AF32C741C4A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
Manifest number: 095C
Signing time: Sun 01 Mar 2026 18:01:11 +0000
Manifest this update: Sun 01 Mar 2026 18:01:11 +0000
Manifest next update: Mon 02 Mar 2026 18:01:11 +0000
Files and hashes: 1: PuchMrjsFjFbMrol0kkaS60RRNs.roa (hash: 0Qhlnt0wkF71rKlYa2Irnl7Q6TZWYHLlCjq7i3HaoAo=)
2: fRxvcTM6ZsttHwF0WM1Q-yByE2A.roa (hash: 82Lay6XggknlrO9CTIQXr6DOK4XN7yH0WY72KW8YeUk=)
3: g2Rixix_Y9L114enAdd5q2luIjY.crl (hash: xqrEcCvSMuLN5O6sAc2xM0NkGDHNjnL3oNobd3BMoEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:b9:78:8d:23:66:fd:c4:58:af:32:c7:41:c4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836462c62c7f63d2f5d787a701d779ab696e2236
Validity
Not Before: Mar 1 18:01:11 2026 GMT
Not After : Mar 2 18:01:11 2026 GMT
Subject: CN=fbdbf71c6c8051d779f705afaaac25ad145c7336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:3b:ba:98:ad:d5:33:06:0d:b9:93:d4:39:
fa:7d:c7:b5:e0:38:81:43:93:3a:95:3c:6d:6b:5e:
11:97:83:23:6b:8e:cf:65:0d:f7:61:b6:0d:66:5d:
19:48:0a:b7:59:6a:fa:16:5f:93:bf:29:4d:40:38:
a7:54:59:e9:5b:55:8b:3e:a6:d3:5d:28:4b:fe:0b:
e6:fe:43:6f:11:4c:04:b2:b5:97:69:24:27:6d:50:
8e:a2:f9:d1:0b:69:88:3f:3f:fb:01:48:e4:c3:46:
09:ad:26:45:6a:c8:19:91:cd:ce:1e:48:e0:aa:9e:
f7:9f:0d:43:00:df:11:35:42:4b:f3:d4:22:10:e8:
4e:29:f4:cd:7e:17:2f:8d:b1:e6:8d:6c:55:1b:4f:
76:90:ca:cf:61:56:88:e8:88:81:25:83:9f:b8:9e:
c6:b7:26:2f:bb:f9:58:8b:33:91:6a:f5:40:da:0b:
49:1a:91:b4:15:32:05:aa:fb:37:01:65:ad:b5:91:
90:44:2b:8a:bf:bc:bb:ac:57:e5:e9:dc:0c:84:3c:
ad:a4:0b:fc:de:c5:96:9f:62:82:1a:7c:c5:46:5f:
d3:50:3e:e7:22:5b:9c:b9:3d:b5:e9:30:bc:c4:d6:
68:53:bd:64:4b:41:f9:b3:89:98:7a:04:83:ba:a5:
73:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DB:F7:1C:6C:80:51:D7:79:F7:05:AF:AA:AC:25:AD:14:5C:73:36
X509v3 Authority Key Identifier:
keyid:83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:53:76:93:75:0b:b4:c5:7a:9a:02:7d:94:75:ed:d4:80:58:
92:82:a0:ad:08:49:1e:59:b1:01:42:1f:f9:4c:94:06:a4:42:
27:6f:2d:a7:3e:44:cf:1e:47:7a:5d:40:5f:00:b4:97:b6:ab:
da:05:a5:39:1d:fd:72:63:b4:12:b9:55:79:d6:03:75:cd:46:
1b:34:a0:7e:14:83:24:f4:3c:22:01:eb:9c:8c:73:8a:63:82:
67:3e:9c:cc:0b:2d:96:e6:9a:a3:fe:33:71:4a:20:5e:41:4b:
48:4c:82:19:b0:a8:f3:9a:bf:cf:3a:d1:27:64:b9:29:eb:64:
52:40:16:0e:cc:0a:a9:ad:fe:5f:09:68:02:57:2d:75:48:3d:
53:68:9b:af:25:96:13:dd:83:36:02:ef:70:f2:cf:dc:c8:ea:
51:f6:f2:86:89:8d:36:f9:a4:07:01:a8:48:18:3c:d9:94:24:
1d:11:49:7d:39:e8:e5:7f:1a:a0:a6:5b:44:3a:31:29:68:14:
07:f8:07:3a:5c:6d:ea:e2:98:90:c9:a4:cd:d1:58:3e:04:78:
76:b2:d2:5f:14:2d:be:29:81:93:ab:02:db:4b:73:7a:7b:de:
49:37:d0:5b:86:ee:55:e5:3a:18:6a:08:df:01:c5:a8:ce:bc:
88:91:e6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:07 2026 by rpki-client