Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
File: g_rANRxoqaHdZA2oY9hnrYX3ipE.mft (raw, json)
Hash identifier: DaRppsSw/u5sZ3GWmDjg3fyxcEpJ7QoGzgSLFa4BBcE=
Subject key identifier: 9B:C3:62:DA:3C:E9:67:5F:05:9D:9B:D2:44:98:DB:FD:6A:84:34:46
Authority key identifier: 83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
Certificate issuer: /CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Certificate serial: 019E7C6814D06EDB20748C41DC7F51477820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
Manifest number: 0276
Signing time: Sun 31 May 2026 05:00:56 +0000
Manifest this update: Sun 31 May 2026 05:00:56 +0000
Manifest next update: Mon 01 Jun 2026 05:00:56 +0000
Files and hashes: 1: RpX-BY98Lx61d6BbDQ85JgwJHHA.roa (hash: 0VMmsY08zvLKyajdXHCzmWNfxGZ2eh7xs6DS8yoIsrs=)
2: g_rANRxoqaHdZA2oY9hnrYX3ipE.crl (hash: kblwCyA3BxzscGiXovPIsk7gR30/i5rkaadZQEpgLJ8=)
3: jpo0P1bv75byvE6Uc1iS5rsp5PQ.roa (hash: orgmNk1notPErLnn1LIBwRtRE9IlZLvNrZGm1ZGrDr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7c:68:14:d0:6e:db:20:74:8c:41:dc:7f:51:47:78:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Validity
Not Before: May 31 05:00:56 2026 GMT
Not After : Jun 1 05:00:56 2026 GMT
Subject: CN=9bc362da3ce9675f059d9bd24498dbfd6a843446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c4:ed:18:14:2f:1b:1a:4c:c3:22:07:1b:23:
37:80:38:cf:ca:a7:c5:25:c9:50:9d:44:9c:50:e6:
e7:3a:48:90:5d:5a:08:54:1f:75:5f:e0:ba:d5:6a:
4a:03:63:5f:ad:c8:e6:7c:f1:07:ca:3b:72:b2:d9:
f9:f5:3f:af:77:a2:b2:7b:1d:98:77:73:69:df:5c:
d9:ce:2c:57:61:d1:56:63:70:be:a1:9e:1f:6e:67:
25:ec:6d:41:ef:31:bf:a6:8c:d8:11:8f:5f:5c:77:
52:6f:1e:cb:0b:a3:37:86:28:5f:36:fb:76:54:71:
b1:f9:cf:18:fd:85:ad:d7:6b:e1:81:e8:64:71:a5:
31:c9:d8:80:9d:8f:fe:2b:8d:23:ab:23:5c:56:95:
e1:9c:54:a8:35:9a:0d:fc:c6:c4:4c:93:db:39:1e:
2b:f3:d4:75:ed:a0:c6:f9:42:8d:5d:32:4e:7f:0d:
48:39:98:fc:83:71:43:19:6e:ab:46:cd:b9:d2:fb:
2f:45:06:d6:bd:3e:57:ab:bb:87:31:a5:14:a8:76:
ac:01:e0:49:9f:73:e0:c0:ac:a9:3c:85:c3:af:36:
20:13:7b:9d:30:4c:60:2e:c1:b5:17:61:09:20:4e:
18:ac:db:db:ee:05:ea:68:9a:a2:93:41:c1:ee:8f:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C3:62:DA:3C:E9:67:5F:05:9D:9B:D2:44:98:DB:FD:6A:84:34:46
X509v3 Authority Key Identifier:
keyid:83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b5:aa:4e:af:3a:29:57:77:de:1a:1e:9a:f2:ee:6c:cf:32:
88:12:d0:fb:9c:8a:e9:8c:44:f4:fd:16:0a:b9:66:d4:51:d0:
3c:aa:98:6f:61:89:82:8d:e9:e5:20:30:30:7c:45:e6:3f:31:
0d:ab:be:30:ff:a8:33:46:8f:82:0d:25:6e:0c:43:3c:30:47:
90:f5:c3:85:29:dc:02:56:8f:c0:aa:24:1d:ac:28:d4:4b:f9:
7d:b7:d2:6a:19:ff:c2:ef:30:9f:b4:71:7d:5c:01:5a:29:38:
99:3c:82:d7:e2:6f:cf:17:f8:65:e1:f3:6d:fe:09:94:4f:38:
8a:e0:3e:7b:b2:e0:2b:3a:ff:36:59:d7:c5:78:ed:6e:3a:cb:
17:22:96:77:3f:b5:60:3d:ea:7c:08:33:44:52:3a:32:53:ae:
97:97:b9:6e:6a:c5:9e:c9:9b:d6:75:e3:de:e5:91:af:67:fe:
13:31:10:48:0c:02:99:2f:d4:fe:0e:71:59:42:b6:79:65:96:
e9:01:3b:b2:ec:cf:8a:5b:20:b8:d5:14:6a:24:9d:96:05:a3:
b3:64:7d:76:a9:3a:7b:96:35:01:54:64:4a:9b:4b:17:79:e1:
71:30:3c:2c:ff:1d:a3:5a:37:5b:4c:16:60:8a:d7:5a:6d:99:
48:9b:1f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:45:42 2026 by rpki-client