Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
File: g2Rixix_Y9L114enAdd5q2luIjY.mft (raw, json)
Hash identifier: ZBNl99lZiqOXdU7eOBc2V/oU+aQ0FWSFflm5kiigLhU=
Subject key identifier: 26:5C:5E:AF:BB:E2:55:01:8B:A1:94:81:A4:29:1F:67:59:5A:43:FF
Authority key identifier: 83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
Certificate issuer: /CN=836462c62c7f63d2f5d787a701d779ab696e2236
Certificate serial: 019D3977CF5233B646B3879B3844A7BA3A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
Manifest number: 09A6
Signing time: Sun 29 Mar 2026 12:00:46 +0000
Manifest this update: Sun 29 Mar 2026 12:00:46 +0000
Manifest next update: Mon 30 Mar 2026 12:00:46 +0000
Files and hashes: 1: PuchMrjsFjFbMrol0kkaS60RRNs.roa (hash: 0Qhlnt0wkF71rKlYa2Irnl7Q6TZWYHLlCjq7i3HaoAo=)
2: fRxvcTM6ZsttHwF0WM1Q-yByE2A.roa (hash: 82Lay6XggknlrO9CTIQXr6DOK4XN7yH0WY72KW8YeUk=)
3: g2Rixix_Y9L114enAdd5q2luIjY.crl (hash: qWebt7YBwonMaSuh7qgpMfQp22LAEWAxaJ6D5POAcoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:cf:52:33:b6:46:b3:87:9b:38:44:a7:ba:3a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836462c62c7f63d2f5d787a701d779ab696e2236
Validity
Not Before: Mar 29 12:00:46 2026 GMT
Not After : Mar 30 12:00:46 2026 GMT
Subject: CN=265c5eafbbe255018ba19481a4291f67595a43ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:32:58:07:c8:57:24:ea:4a:8f:dd:3b:2d:
75:33:53:72:b7:3b:c0:3e:ae:23:95:2d:38:77:c5:
20:0f:0f:aa:0b:73:52:82:74:b8:d2:e0:a6:ff:5d:
3d:ea:79:6d:6a:e8:f1:0a:e6:15:18:dd:f8:7a:31:
23:63:7f:07:d6:9b:a0:7f:5f:bd:54:ef:68:00:89:
2f:0f:26:f2:16:e1:1a:c2:bf:8d:d2:03:f9:d8:6c:
66:64:3e:07:ba:0c:05:72:a7:eb:c6:a5:95:70:ee:
ca:28:4b:d0:92:ee:3a:78:82:30:f7:e8:10:79:b5:
e8:6b:67:5a:58:dc:f2:c8:82:78:11:0b:b5:14:62:
24:94:6d:9c:f1:8c:56:66:26:43:1e:90:e0:2c:5c:
36:b7:2b:2b:29:37:34:df:ea:31:19:03:64:0c:28:
10:dd:98:9c:8b:5b:0b:64:16:61:85:1a:c7:01:94:
c9:86:ef:02:82:00:4c:36:af:ca:48:2e:51:ff:06:
04:8e:07:32:a4:95:95:49:7f:da:6a:36:7f:56:b7:
dc:b2:3d:34:62:c8:99:69:58:f7:9e:41:2d:00:80:
65:cc:6b:af:4c:bb:02:c4:0f:56:bb:fb:52:6d:56:
ac:77:cc:21:6d:04:65:e1:ea:3e:8b:7b:8d:1d:47:
0e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5C:5E:AF:BB:E2:55:01:8B:A1:94:81:A4:29:1F:67:59:5A:43:FF
X509v3 Authority Key Identifier:
keyid:83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ce:e3:38:2f:4a:7a:17:cf:34:f2:eb:5e:14:ef:e6:1a:78:
93:44:1c:cf:96:d7:53:b4:73:63:0d:b4:66:96:42:cd:00:e0:
9a:02:ab:de:56:90:10:b9:e8:62:bb:87:f9:76:7c:04:11:f5:
3c:62:18:a3:4e:4b:3e:27:21:df:10:19:7f:45:20:e2:11:41:
aa:b4:2c:bb:64:2b:8f:e0:c6:92:b1:7f:de:b5:39:86:19:1a:
ce:64:6e:d9:7b:40:0b:0f:9c:69:09:ec:54:60:b1:4a:e0:8a:
3e:58:b8:7c:9d:a0:ef:ca:3c:c3:6c:c4:a8:7b:22:f3:85:88:
1e:22:f2:2c:84:1f:d8:c1:06:e7:e5:2e:c0:2d:42:30:04:af:
ee:d3:69:2f:94:7b:2a:dc:51:97:df:34:5a:30:4d:db:d1:bc:
1d:1e:4e:89:ad:10:3c:3c:97:e9:27:fa:ac:3e:b1:e0:de:c2:
d6:3d:d5:55:bd:07:39:40:de:59:80:db:50:ac:a9:4e:e8:bc:
b8:9a:1e:66:64:45:0d:c8:d6:70:29:fb:13:6a:3f:46:3b:9f:
3b:a5:65:e5:06:7d:60:b5:49:16:3b:e6:3d:7c:8a:bd:46:5e:
1b:0f:d2:ee:9a:c9:bd:a9:b3:0b:0b:ff:de:f5:2f:b5:56:76:
7f:eb:ec:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:44 2026 by rpki-client