Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
File: g2Rixix_Y9L114enAdd5q2luIjY.mft (raw, json)
Hash identifier: HDSrUDfehecdOnuBIWGpA1iv+VhXMYXYHBVcpBMfeJc=
Subject key identifier: 5D:42:8A:4A:05:21:20:7C:75:35:EA:FB:E8:FC:DB:8A:0D:2C:4C:76
Authority key identifier: 83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
Certificate issuer: /CN=836462c62c7f63d2f5d787a701d779ab696e2236
Certificate serial: 019F40F60E059021FF4461F8C22725151BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
Manifest number: 0AB3
Signing time: Wed 08 Jul 2026 09:01:34 +0000
Manifest this update: Wed 08 Jul 2026 09:01:34 +0000
Manifest next update: Thu 09 Jul 2026 09:01:34 +0000
Files and hashes: 1: PuchMrjsFjFbMrol0kkaS60RRNs.roa (hash: 0Qhlnt0wkF71rKlYa2Irnl7Q6TZWYHLlCjq7i3HaoAo=)
2: fRxvcTM6ZsttHwF0WM1Q-yByE2A.roa (hash: 82Lay6XggknlrO9CTIQXr6DOK4XN7yH0WY72KW8YeUk=)
3: g2Rixix_Y9L114enAdd5q2luIjY.crl (hash: vbVElAmoE8PlhP16azBQlFb/K15uPrCoCI0Ah90jwnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:f6:0e:05:90:21:ff:44:61:f8:c2:27:25:15:1b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836462c62c7f63d2f5d787a701d779ab696e2236
Validity
Not Before: Jul 8 09:01:34 2026 GMT
Not After : Jul 9 09:01:34 2026 GMT
Subject: CN=5d428a4a0521207c7535eafbe8fcdb8a0d2c4c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b7:9f:29:55:81:d5:ec:99:bb:dc:93:76:4d:
af:c2:6d:5d:e3:9b:0b:a4:28:72:68:4b:b2:64:a3:
de:19:29:81:d5:b7:0b:92:55:9d:90:12:33:cf:e0:
99:14:98:c1:0d:e2:9a:d3:50:a0:e7:a9:71:d1:53:
68:b7:0c:7d:6d:f3:66:52:38:21:c3:19:89:87:3c:
53:02:45:01:81:d4:4a:d5:70:08:49:6e:59:a2:5a:
35:bb:0b:07:17:9e:13:25:86:52:45:b5:f6:9e:0f:
5a:3c:60:08:bf:a6:05:67:f2:f1:ac:4b:cb:18:e5:
cd:d2:c2:7f:50:d0:d1:fe:80:a7:5c:df:6e:12:5b:
97:33:fa:75:21:35:81:59:d5:10:c5:7d:09:e2:5c:
a1:37:69:75:7b:0c:08:55:fb:8c:ec:0d:44:d8:77:
48:32:61:18:ab:83:60:3f:9c:79:a3:6a:c1:cb:4f:
ba:7a:87:e4:54:a5:da:67:c9:8f:51:d1:96:aa:26:
f6:76:8f:40:10:3b:83:f7:28:8b:97:c6:97:6f:c0:
e0:e7:79:f8:76:b5:dc:90:75:4e:b6:29:db:26:e8:
f2:ae:53:9d:b6:65:a2:97:df:54:1c:ff:db:ea:99:
03:e8:02:f2:49:13:60:97:e9:be:03:12:17:84:bf:
eb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:42:8A:4A:05:21:20:7C:75:35:EA:FB:E8:FC:DB:8A:0D:2C:4C:76
X509v3 Authority Key Identifier:
keyid:83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a4:6d:2b:aa:bb:d2:c9:c9:32:e4:72:ca:e7:f3:7c:4a:36:
03:f9:1c:5c:a1:d5:eb:0d:b8:f5:33:61:c9:07:d0:5c:6d:3a:
ed:4d:20:63:a8:93:cb:7e:77:02:2e:0e:6c:3e:51:a4:a9:b1:
3b:41:d1:a4:77:fe:b8:54:b2:7f:15:78:00:7e:da:c0:fd:90:
75:69:a4:a1:93:b3:f7:34:5e:85:14:ae:f0:b8:03:dc:71:9c:
24:48:83:28:5f:37:d0:a8:e5:c4:d8:d5:30:91:38:ff:85:c2:
0b:8f:0a:01:9a:aa:e5:13:8e:19:02:13:85:25:7e:8c:e1:16:
5c:af:0f:11:a0:26:99:c0:dc:74:61:34:33:86:7e:59:55:08:
a3:96:e2:71:14:d9:b9:57:ef:11:65:90:75:9b:f6:32:c5:54:
00:04:e7:18:b9:6d:fc:c0:74:a4:cd:84:2c:c0:8a:dc:f4:f2:
b3:b9:1a:a9:0b:51:f6:99:ce:78:6b:64:7e:56:b4:84:24:cb:
ac:bf:c4:d8:9d:24:5c:5a:ae:97:55:af:3e:4e:2b:e2:f7:fc:
43:6b:dc:31:a1:30:61:58:83:4e:57:af:35:46:95:96:7c:d4:
50:7c:4b:4f:18:79:46:82:1b:4a:ec:52:a4:4f:60:f7:76:19:
2a:a1:8c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:30:04 2026 by rpki-client