Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
File: g2Rixix_Y9L114enAdd5q2luIjY.mft (raw, json)
Hash identifier: fZs9GHXRBSnto55gMYS6CadYPwU1itcCCo3dQVpzk/4=
Subject key identifier: 89:83:3A:70:C4:BB:6C:B8:F8:58:10:7C:47:5F:08:7A:7C:63:C1:72
Authority key identifier: 83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
Certificate issuer: /CN=836462c62c7f63d2f5d787a701d779ab696e2236
Certificate serial: 019FA93E48A102E7D741F2124D6B49D23498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
Manifest number: 0AE9
Signing time: Tue 28 Jul 2026 15:00:59 +0000
Manifest this update: Tue 28 Jul 2026 15:00:59 +0000
Manifest next update: Wed 29 Jul 2026 15:00:59 +0000
Files and hashes: 1: PuchMrjsFjFbMrol0kkaS60RRNs.roa (hash: 0Qhlnt0wkF71rKlYa2Irnl7Q6TZWYHLlCjq7i3HaoAo=)
2: fRxvcTM6ZsttHwF0WM1Q-yByE2A.roa (hash: 82Lay6XggknlrO9CTIQXr6DOK4XN7yH0WY72KW8YeUk=)
3: g2Rixix_Y9L114enAdd5q2luIjY.crl (hash: hpBbIrdKALLI+QLVXz4ZqHlWWlIoSu0Fbg1z0YFTLhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:48:a1:02:e7:d7:41:f2:12:4d:6b:49:d2:34:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836462c62c7f63d2f5d787a701d779ab696e2236
Validity
Not Before: Jul 28 15:00:59 2026 GMT
Not After : Jul 29 15:00:59 2026 GMT
Subject: CN=89833a70c4bb6cb8f858107c475f087a7c63c172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:be:85:49:bd:76:9f:0c:71:1c:f9:16:e1:3c:
56:bb:b4:8d:26:dc:87:cf:a7:92:44:01:bb:d0:6f:
74:aa:4e:38:4a:d7:3e:c2:c1:14:af:61:24:f2:b7:
e1:88:52:b0:dd:41:5c:05:2e:d9:38:f0:23:7a:4c:
13:41:b7:8f:58:c1:5e:69:d4:21:4a:db:40:37:93:
6e:22:64:50:5c:3b:36:83:7a:22:91:2c:b7:7e:17:
67:d9:98:e5:8a:f7:75:d8:ca:b8:0f:c6:83:c1:25:
26:6a:54:56:8d:8f:84:78:21:40:d8:00:db:9a:59:
bf:cd:9e:db:6d:94:80:96:98:ca:48:bc:e3:fa:ce:
20:6b:0d:4e:cc:e8:60:d3:71:7d:77:4b:ea:2e:8e:
54:ee:74:f1:fa:83:54:f0:1e:f0:da:3a:e0:30:9f:
29:f6:31:68:c3:d2:6a:3f:b6:5e:6d:dc:e6:8a:d7:
37:7f:a2:e5:8b:9f:a3:64:0f:2f:fb:38:0c:8a:c5:
6a:64:8d:f0:f4:dd:b4:20:1e:cf:b9:a6:37:57:2a:
21:e7:be:e8:44:a3:1c:4e:91:24:c0:fd:83:7e:d5:
b0:ab:0d:27:f7:1e:69:85:6a:49:67:78:41:34:d9:
fa:b8:fc:91:8b:68:8f:5f:9e:d2:31:6e:85:40:85:
46:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:83:3A:70:C4:BB:6C:B8:F8:58:10:7C:47:5F:08:7A:7C:63:C1:72
X509v3 Authority Key Identifier:
keyid:83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:69:f0:f0:8a:d4:31:3e:9e:d3:82:69:ce:a8:2f:b9:25:74:
fc:df:64:f4:68:07:8d:fb:08:fe:ca:6c:34:13:e7:e6:b4:0c:
9e:07:76:7c:d7:74:88:e4:e7:38:c4:12:a0:90:7b:d6:38:e9:
01:fc:de:45:51:51:4f:48:a9:3e:4e:ab:87:93:ad:bf:95:cd:
0b:57:91:cd:b6:7e:ad:ab:29:0f:f8:95:1f:5c:67:25:df:71:
05:e3:2d:d5:28:39:54:c3:0c:6b:b7:d4:98:df:8d:22:58:b5:
51:84:60:2d:32:2f:9a:50:25:f6:3d:8e:4a:8f:b5:c4:8a:c2:
e0:0c:2e:d2:63:29:f5:57:c6:6f:02:66:47:f7:e0:3e:3d:92:
26:50:20:c8:82:99:0f:aa:7a:43:bc:6d:1a:04:19:0d:14:bc:
63:7e:5d:f0:19:1d:b0:d8:f9:1e:5f:cd:50:c5:0c:de:62:0d:
f5:b2:cd:98:8a:64:d1:66:30:6f:28:39:9b:3e:5e:cf:e9:ea:
b1:db:8c:6d:c4:c3:30:0b:17:1b:a9:48:a4:c4:b1:83:37:c3:
5c:26:6d:5d:99:7c:38:58:5b:69:a0:37:94:4f:4d:32:de:af:
2b:58:14:d1:20:cd:75:91:59:d6:b8:a8:37:12:89:b8:65:11:
a2:8d:5d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:22:11 2026 by rpki-client