Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
File: g_rANRxoqaHdZA2oY9hnrYX3ipE.mft (raw, json)
Hash identifier: txszzFIpYyRax7lEoYcPwTZWoC23enQC+1ATz7oQrPY=
Subject key identifier: B1:C9:7E:9E:F4:6A:06:17:BC:4A:18:E7:93:47:77:D2:CC:A5:67:C3
Authority key identifier: 83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
Certificate issuer: /CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Certificate serial: 019D394159C11C1B154A5EF2D0EA1CF0C58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
Manifest number: 01CE
Signing time: Sun 29 Mar 2026 11:01:17 +0000
Manifest this update: Sun 29 Mar 2026 11:01:17 +0000
Manifest next update: Mon 30 Mar 2026 11:01:17 +0000
Files and hashes: 1: g_rANRxoqaHdZA2oY9hnrYX3ipE.crl (hash: CQTbB4K9aOYUZZQ4rWEIsE247YkitF8QLQ82eEO6sQM=)
2: jpo0P1bv75byvE6Uc1iS5rsp5PQ.roa (hash: orgmNk1notPErLnn1LIBwRtRE9IlZLvNrZGm1ZGrDr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:59:c1:1c:1b:15:4a:5e:f2:d0:ea:1c:f0:c5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Validity
Not Before: Mar 29 11:01:17 2026 GMT
Not After : Mar 30 11:01:17 2026 GMT
Subject: CN=b1c97e9ef46a0617bc4a18e7934777d2cca567c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6b:91:98:e3:7b:a8:53:df:47:fa:98:8b:af:
2a:ac:ac:f4:34:3e:e4:29:a8:fc:ab:51:c7:9e:5c:
9b:ab:7a:dd:c3:68:ec:e8:a7:51:d5:b5:61:0a:da:
26:9b:66:19:6b:f6:f1:8e:ae:cd:81:63:af:03:36:
1a:19:3a:36:27:3f:27:56:3e:c3:f6:95:da:98:dc:
e0:8e:b8:ab:f6:d7:6e:fc:77:d8:4b:d5:fa:f6:91:
fd:3c:2b:c4:fd:73:88:b1:ec:b6:6e:5f:87:8a:d9:
2d:30:0c:9b:3c:44:6f:de:74:17:b4:04:7b:ea:7d:
24:b4:61:8f:03:4e:fb:ab:82:33:da:7a:f5:62:c1:
71:1d:f1:0a:9a:a0:2c:f6:60:6b:be:a0:56:ee:aa:
5f:39:22:18:55:8c:e0:25:a1:41:e6:7d:05:06:f8:
95:01:68:db:f3:c1:6b:15:1a:e2:b8:e6:36:e0:1e:
46:d5:3e:80:11:78:b7:bc:2d:0c:c6:4e:9d:9c:0a:
b8:1b:a1:76:ae:1d:7a:89:6e:88:aa:9e:2d:c8:57:
79:95:59:1f:ce:71:c2:6b:76:ec:54:9c:08:ce:f0:
b7:3d:18:fb:34:43:ae:db:72:72:d0:d9:ff:b6:5b:
a5:fc:44:96:c8:a6:24:e3:00:79:18:39:5b:36:1f:
bd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C9:7E:9E:F4:6A:06:17:BC:4A:18:E7:93:47:77:D2:CC:A5:67:C3
X509v3 Authority Key Identifier:
keyid:83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fb:07:ea:f0:c7:0c:38:44:d1:12:99:63:32:f2:74:95:58:
86:55:fd:dd:24:fd:15:ca:9c:11:9b:72:1d:b1:e8:54:cb:79:
25:f0:e5:f4:bb:80:b5:08:97:26:cc:73:a2:b9:02:26:c0:b1:
ae:b6:d4:0b:43:6e:99:f5:85:f2:e4:3b:7a:6d:1b:0f:03:64:
5b:d2:3b:86:79:66:6c:c5:64:62:f0:3a:15:1d:8e:5c:2f:8d:
a6:0c:79:07:5a:1d:89:5c:d3:a6:6b:77:b6:ae:93:cd:3a:db:
95:80:05:0d:93:3e:bf:e3:7d:f3:f8:77:65:be:33:ec:11:6b:
e2:a8:9e:74:b0:d7:a7:d9:54:2f:bd:55:5a:30:91:19:a4:74:
86:fc:1e:00:f9:35:05:d7:3b:44:7f:64:7b:e5:9c:36:8a:54:
cb:9f:f3:cd:52:8f:de:23:4a:4b:72:f1:43:39:e8:0d:e2:7c:
40:eb:35:0d:c7:0d:2e:c9:7c:e1:a0:4e:33:4f:07:2e:59:8b:
ac:dd:33:69:5e:9e:68:99:4c:f7:bd:0f:28:2f:07:2b:74:e8:
8e:62:b0:0d:93:79:77:3c:d0:71:d0:c5:4b:51:82:22:c2:38:
45:b8:1d:24:be:94:6e:c1:a8:91:5d:b1:73:4d:88:e0:8c:95:
c7:f2:53:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QVnBHBsVSl7y0Ooc8MWPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZmFjMDM1MWM2OGE5YTFkZDY0MGRhODYzZDg2N2FkODVm
NzhhOTEwHhcNMjYwMzI5MTEwMTE3WhcNMjYwMzMwMTEwMTE3WjAzMTEwLwYDVQQD
EyhiMWM5N2U5ZWY0NmEwNjE3YmM0YTE4ZTc5MzQ3NzdkMmNjYTU2N2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGuRmON7qFPfR/qYi68qrKz0ND7k
Kaj8q1HHnlybq3rdw2js6KdR1bVhCtomm2YZa/bxjq7NgWOvAzYaGTo2Jz8nVj7D
9pXamNzgjrir9tdu/HfYS9X69pH9PCvE/XOIsey2bl+HitktMAybPERv3nQXtAR7
6n0ktGGPA077q4Iz2nr1YsFxHfEKmqAs9mBrvqBW7qpfOSIYVYzgJaFB5n0FBviV
AWjb88FrFRriuOY24B5G1T6AEXi3vC0Mxk6dnAq4G6F2rh16iW6Iqp4tyFd5lVkf
znHCa3bsVJwIzvC3PRj7NEOu23Jy0Nn/tlul/ESWyKYk4wB5GDlbNh+9rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHJfp70agYXvEoY55NHd9LMpWfDMB8GA1UdIwQY
MBaAFIP6wDUcaKmh3WQNqGPYZ62F94qRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ19yQU5SeG9xYUhkWkEyb1k5aG5yWVgzaXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9jNzJjZjctMzU3Yi00ZmM3LTlmNjEt
ZGZmN2U2MzQ4ZmZmLzEvZ19yQU5SeG9xYUhkWkEyb1k5aG5yWVgzaXBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9jNzJjZjctMzU3Yi00ZmM3LTlmNjEtZGZmN2U2MzQ4ZmZm
LzEvZ19yQU5SeG9xYUhkWkEyb1k5aG5yWVgzaXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPsH6vDH
DDhE0RKZYzLydJVYhlX93ST9FcqcEZtyHbHoVMt5JfDl9LuAtQiXJsxzorkCJsCx
rrbUC0NumfWF8uQ7em0bDwNkW9I7hnlmbMVkYvA6FR2OXC+Npgx5B1odiVzTpmt3
tq6TzTrblYAFDZM+v+N98/h3Zb4z7BFr4qiedLDXp9lUL71VWjCRGaR0hvweAPk1
Bdc7RH9ke+WcNopUy5/zzVKP3iNKS3LxQznoDeJ8QOs1DccNLsl84aBOM08HLlmL
rN0zaV6eaJlM970PKC8HK3TojmKwDZN5dzzQcdDFS1GCIsI4RbgdJL6UbsGokV2x
c02I4IyVx/JT9g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:15:36 2026 by rpki-client