Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
File: g_rANRxoqaHdZA2oY9hnrYX3ipE.mft (raw, json)
Hash identifier: ji9rliKOiO3CufNBHVL10H+Q9uZOJxQfAViy9UaB/bk=
Subject key identifier: 9A:F6:0B:CE:58:25:AD:38:D9:EA:C1:3D:E4:1A:FF:3C:78:30:13:26
Authority key identifier: 83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
Certificate issuer: /CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Certificate serial: 019F661544C2863A40A7ED5BB9330E9B2C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
Manifest number: 02EF
Signing time: Wed 15 Jul 2026 14:01:37 +0000
Manifest this update: Wed 15 Jul 2026 14:01:37 +0000
Manifest next update: Thu 16 Jul 2026 14:01:37 +0000
Files and hashes: 1: RpX-BY98Lx61d6BbDQ85JgwJHHA.roa (hash: 0VMmsY08zvLKyajdXHCzmWNfxGZ2eh7xs6DS8yoIsrs=)
2: g_rANRxoqaHdZA2oY9hnrYX3ipE.crl (hash: aFMNbJEP+BiPw+WaA/jZF8D/Gz8AzyaOWw3HrYpJWHw=)
3: jpo0P1bv75byvE6Uc1iS5rsp5PQ.roa (hash: orgmNk1notPErLnn1LIBwRtRE9IlZLvNrZGm1ZGrDr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:15:44:c2:86:3a:40:a7:ed:5b:b9:33:0e:9b:2c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Validity
Not Before: Jul 15 14:01:37 2026 GMT
Not After : Jul 16 14:01:37 2026 GMT
Subject: CN=9af60bce5825ad38d9eac13de41aff3c78301326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:44:88:fa:0f:03:3c:56:3f:88:82:9d:ca:44:
b4:4b:6e:77:cc:47:54:d9:44:e3:e6:d1:65:4d:c6:
f0:f2:32:0d:d4:5b:bc:13:be:1b:b0:cc:5e:5f:25:
cd:e5:26:0a:74:77:ef:e7:7a:fe:ef:17:c3:5c:c8:
37:08:60:d6:5f:c4:dd:46:24:bb:b7:05:fa:75:b2:
99:1c:2f:7e:fb:20:da:7d:62:e2:97:67:60:d5:48:
49:07:3f:da:d9:bc:48:cb:30:ea:33:2f:e5:03:6e:
85:0b:f3:14:65:be:18:49:56:70:6f:e7:82:67:f0:
d9:87:47:08:1b:70:f4:57:50:b8:24:c9:d9:dd:57:
cb:92:00:92:b7:b0:f2:78:9e:4d:d6:30:b7:50:27:
ca:0f:d9:45:ca:4c:da:d6:6e:35:2a:c0:94:0f:6d:
a7:b1:dc:91:39:d5:da:0b:01:8d:4d:6d:8d:93:13:
92:b0:1c:c3:6c:81:f2:e2:c0:5f:d1:66:c4:12:f8:
64:d7:2a:78:5c:a7:62:63:65:cd:dd:e1:e0:81:b6:
aa:01:70:c4:63:4e:ab:4f:dc:e9:3e:b5:25:e2:ad:
ae:f6:b2:ed:3b:55:5e:be:29:83:67:da:e2:a4:0b:
37:c0:33:b9:80:d1:25:0c:40:de:d9:ba:35:53:16:
24:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F6:0B:CE:58:25:AD:38:D9:EA:C1:3D:E4:1A:FF:3C:78:30:13:26
X509v3 Authority Key Identifier:
keyid:83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:43:7c:29:a8:9f:fa:f7:7a:b7:6d:ba:e6:57:9b:bf:61:5a:
e7:d7:70:2f:2e:15:fa:86:18:81:bf:d0:f9:ea:f0:d9:f5:e5:
82:58:91:01:79:c6:c1:23:50:27:f9:d4:c9:17:70:d0:f2:8d:
35:ef:27:7e:d2:d4:99:d4:75:df:f6:b0:f5:2d:22:0d:db:12:
02:20:14:59:8d:0b:23:3b:b2:22:d4:eb:ca:90:db:95:f6:16:
42:0a:47:0c:5a:f2:36:2f:1f:04:5c:7a:b5:52:8d:28:b2:db:
c1:08:9c:47:6b:9f:f1:70:d8:47:28:2a:df:cd:20:ce:97:69:
5b:7d:5f:88:a4:67:45:7f:fe:38:73:d0:80:18:29:bd:6b:f8:
3f:87:74:7c:71:ce:0f:21:e6:85:8d:73:9f:e8:cd:80:53:e7:
d1:28:ab:c4:ca:8d:6f:d8:a7:5f:d8:01:26:47:62:90:ef:2c:
27:9d:d3:d5:2a:e6:47:47:29:ee:c0:2f:55:6e:0a:c1:ae:75:
30:16:1b:b4:7f:99:c0:ae:11:71:30:9e:68:10:2a:93:2f:2a:
a5:e2:3c:7b:cd:82:24:99:5f:99:31:93:f6:b6:96:4c:54:80:
c6:f5:31:3f:5d:50:ad:24:85:2b:97:12:15:81:2e:05:e5:87:
54:a0:c7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 15:35:13 2026 by rpki-client