Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
File: g_rANRxoqaHdZA2oY9hnrYX3ipE.mft (raw, json)
Hash identifier: 8GPsI13ddXRL3VmVba0EKlOTAV0H3qOAMq+ie9Pq4jU=
Subject key identifier: E1:DB:E2:10:43:7D:26:88:2D:31:E4:E8:18:DF:93:76:00:A3:CE:EF
Authority key identifier: 83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
Certificate issuer: /CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Certificate serial: 01A065001ABC9455B073DBBB38CF3FAFA32C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
Manifest number: 0373
Signing time: Thu 03 Sep 2026 02:01:40 +0000
Manifest this update: Thu 03 Sep 2026 02:01:40 +0000
Manifest next update: Fri 04 Sep 2026 02:01:40 +0000
Files and hashes: 1: RpX-BY98Lx61d6BbDQ85JgwJHHA.roa (hash: 0VMmsY08zvLKyajdXHCzmWNfxGZ2eh7xs6DS8yoIsrs=)
2: g_rANRxoqaHdZA2oY9hnrYX3ipE.crl (hash: YgXiNHw5jYdURSZbrM/niTeQU7WnHSuevGHldZSZBXA=)
3: jpo0P1bv75byvE6Uc1iS5rsp5PQ.roa (hash: orgmNk1notPErLnn1LIBwRtRE9IlZLvNrZGm1ZGrDr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 02:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:65:00:1a:bc:94:55:b0:73:db:bb:38:cf:3f:af:a3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Validity
Not Before: Sep 3 02:01:40 2026 GMT
Not After : Sep 4 02:01:40 2026 GMT
Subject: CN=e1dbe210437d26882d31e4e818df937600a3ceef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:af:fb:60:47:f2:19:71:99:fc:67:a0:34:7d:
2f:7d:92:eb:85:4a:dd:7c:cf:9c:fc:cf:77:40:bb:
0a:5d:12:07:f4:ae:64:5f:98:ef:28:e3:f1:42:5d:
9a:05:33:d3:fc:0f:33:ed:eb:7e:4b:48:b5:cd:72:
51:9e:36:43:21:4c:81:da:f1:84:7e:f3:16:c7:be:
74:6f:af:8b:85:e4:1d:f3:22:f8:eb:23:9d:58:a4:
38:f6:99:f1:09:37:a8:dd:48:7f:5d:2c:c9:56:11:
8c:60:8e:06:90:60:cd:49:ba:dd:74:0e:14:b1:1a:
36:5e:9d:82:dd:7c:da:65:44:58:ba:ac:b0:88:9b:
75:88:8b:ce:9c:b7:b9:96:b2:15:25:40:0f:0e:d7:
af:50:7e:34:13:a1:57:55:48:32:b9:3a:b5:d1:fc:
f8:e4:fc:0f:db:c2:34:53:ca:9c:f0:16:a9:6d:91:
ab:89:ec:96:ab:00:66:4f:a9:b9:25:0a:71:f1:7d:
8c:ac:e6:5c:93:15:73:60:0c:58:00:7c:e0:1d:dd:
99:6d:bc:67:b7:3e:ff:3c:da:9d:71:22:3c:c8:14:
dd:83:9a:6d:8f:6f:10:94:68:eb:fc:ca:31:57:1a:
66:9d:ec:fb:af:e2:50:e0:ac:9d:9e:d7:84:57:81:
a8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DB:E2:10:43:7D:26:88:2D:31:E4:E8:18:DF:93:76:00:A3:CE:EF
X509v3 Authority Key Identifier:
keyid:83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:62:cf:f3:06:7f:9c:24:2f:43:69:e3:bd:b8:3f:bf:f9:ef:
bf:f8:d9:eb:6b:55:02:9a:3a:79:86:a3:dd:ba:0d:dd:43:ea:
5c:be:17:49:40:cc:48:3d:2a:c7:7a:23:41:42:20:ab:6b:e2:
7e:84:d9:5a:e2:89:85:44:42:55:c7:7c:12:ec:01:fc:71:5e:
8a:d2:5f:89:6e:56:c4:c2:01:ec:eb:81:35:5c:62:4e:ff:5c:
1e:75:6a:dd:9f:f7:8a:24:7c:2c:a6:1a:73:26:ae:0e:80:8d:
f5:e1:1d:44:0c:4f:47:40:2f:0e:5c:11:b6:e7:23:66:47:c5:
31:a7:0f:f9:8c:1d:6a:d3:7f:11:36:47:26:63:11:78:42:4c:
dd:74:9d:a5:8a:52:26:13:be:4d:99:33:ba:2f:ad:d4:2d:b3:
84:63:f1:24:74:99:5d:86:52:da:58:0b:2c:84:8d:95:0b:5e:
ed:73:5d:1f:da:86:ea:ff:e5:81:ae:24:a4:1e:c2:b0:2b:a0:
23:46:05:e2:d8:b3:fd:c8:9d:b0:f2:ff:56:f5:64:91:3e:69:
32:50:5a:00:f8:7f:1d:64:ca:e0:92:16:15:c7:c3:cf:fe:24:
3b:f3:aa:a8:32:38:3f:c2:62:d0:2a:d8:a8:fa:1d:e8:d2:57:
5f:c1:d6:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBlABq8lFWwc9u7OM8/r6MsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZmFjMDM1MWM2OGE5YTFkZDY0MGRhODYzZDg2N2FkODVm
NzhhOTEwHhcNMjYwOTAzMDIwMTQwWhcNMjYwOTA0MDIwMTQwWjAzMTEwLwYDVQQD
EyhlMWRiZTIxMDQzN2QyNjg4MmQzMWU0ZTgxOGRmOTM3NjAwYTNjZWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla/7YEfyGXGZ/GegNH0vfZLrhUrd
fM+c/M93QLsKXRIH9K5kX5jvKOPxQl2aBTPT/A8z7et+S0i1zXJRnjZDIUyB2vGE
fvMWx750b6+LheQd8yL46yOdWKQ49pnxCTeo3Uh/XSzJVhGMYI4GkGDNSbrddA4U
sRo2Xp2C3XzaZURYuqywiJt1iIvOnLe5lrIVJUAPDtevUH40E6FXVUgyuTq10fz4
5PwP28I0U8qc8BapbZGrieyWqwBmT6m5JQpx8X2MrOZckxVzYAxYAHzgHd2Zbbxn
tz7/PNqdcSI8yBTdg5ptj28QlGjr/MoxVxpmnez7r+JQ4KydnteEV4GogwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHb4hBDfSaILTHk6Bjfk3YAo87vMB8GA1UdIwQY
MBaAFIP6wDUcaKmh3WQNqGPYZ62F94qRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ19yQU5SeG9xYUhkWkEyb1k5aG5yWVgzaXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9jNzJjZjctMzU3Yi00ZmM3LTlmNjEt
ZGZmN2U2MzQ4ZmZmLzEvZ19yQU5SeG9xYUhkWkEyb1k5aG5yWVgzaXBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9jNzJjZjctMzU3Yi00ZmM3LTlmNjEtZGZmN2U2MzQ4ZmZm
LzEvZ19yQU5SeG9xYUhkWkEyb1k5aG5yWVgzaXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimLP8wZ/
nCQvQ2njvbg/v/nvv/jZ62tVApo6eYaj3boN3UPqXL4XSUDMSD0qx3ojQUIgq2vi
foTZWuKJhURCVcd8EuwB/HFeitJfiW5WxMIB7OuBNVxiTv9cHnVq3Z/3iiR8LKYa
cyauDoCN9eEdRAxPR0AvDlwRtucjZkfFMacP+YwdatN/ETZHJmMReEJM3XSdpYpS
JhO+TZkzui+t1C2zhGPxJHSZXYZS2lgLLISNlQte7XNdH9qG6v/lga4kpB7CsCug
I0YF4tiz/cidsPL/VvVkkT5pMlBaAPh/HWTK4JIWFcfDz/4kO/OqqDI4P8Ji0CrY
qPod6NJXX8HWlA==
-----END CERTIFICATE-----
Generated at Thu Sep 3 12:40:53 2026 by rpki-client