Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
File: g2Rixix_Y9L114enAdd5q2luIjY.mft (raw, json)
Hash identifier: Z6T77Va3/l7nQLZyoxwzOQdcY/jsOpVZ7Vkds0scXbg=
Subject key identifier: 95:D3:47:3F:1A:B1:0D:86:C1:70:A2:19:66:34:A2:51:58:B5:66:58
Authority key identifier: 83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
Certificate issuer: /CN=836462c62c7f63d2f5d787a701d779ab696e2236
Certificate serial: 019E5748AF6E9458FBB85B05944FD7FA7347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
Manifest number: 0A3A
Signing time: Sun 24 May 2026 00:00:41 +0000
Manifest this update: Sun 24 May 2026 00:00:41 +0000
Manifest next update: Mon 25 May 2026 00:00:41 +0000
Files and hashes: 1: PuchMrjsFjFbMrol0kkaS60RRNs.roa (hash: 0Qhlnt0wkF71rKlYa2Irnl7Q6TZWYHLlCjq7i3HaoAo=)
2: fRxvcTM6ZsttHwF0WM1Q-yByE2A.roa (hash: 82Lay6XggknlrO9CTIQXr6DOK4XN7yH0WY72KW8YeUk=)
3: g2Rixix_Y9L114enAdd5q2luIjY.crl (hash: D4sidvYU5Ab1kNFe5cE4VsvEEyl3zIoHLVV68SIEI9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:57:48:af:6e:94:58:fb:b8:5b:05:94:4f:d7:fa:73:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836462c62c7f63d2f5d787a701d779ab696e2236
Validity
Not Before: May 24 00:00:41 2026 GMT
Not After : May 25 00:00:41 2026 GMT
Subject: CN=95d3473f1ab10d86c170a2196634a25158b56658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:93:57:67:35:be:68:cd:c9:a1:c1:31:33:09:
92:17:17:bd:13:4c:6e:ba:e2:aa:48:dc:d0:9e:20:
49:e0:6a:bd:1f:0e:f3:18:69:aa:c3:7f:56:29:77:
3a:de:4e:0b:e1:e5:aa:ff:10:28:19:c6:d7:c8:0d:
db:a5:a8:94:03:0e:a3:23:15:6f:22:ce:85:1d:26:
cb:6a:78:5e:39:08:30:f7:06:43:11:3f:52:90:bc:
5a:80:de:3c:ec:36:3e:1f:10:48:b9:0c:b5:29:55:
2d:16:0b:90:df:be:fd:00:49:25:31:2e:d3:3d:70:
90:f9:fc:6c:52:93:f2:df:0f:91:e2:ea:54:47:63:
75:7c:e9:19:13:ee:3b:b2:a0:1e:06:58:11:96:a5:
e0:03:63:51:c9:dd:81:71:13:c0:55:79:a1:ea:ea:
7b:ec:3c:00:19:19:b1:c0:a3:c6:1c:7a:64:9a:42:
cf:e5:b0:e6:4d:2f:c7:70:6a:af:ba:35:0d:32:ef:
d8:c7:d8:64:a4:9c:12:87:99:f9:17:8c:9f:21:fa:
50:7a:39:e1:05:61:8b:f5:35:e7:27:6a:06:6d:66:
02:13:f0:f3:6d:c4:1e:1f:66:cc:7f:79:aa:9c:f7:
0b:d9:db:8a:19:e2:a0:1d:94:f7:49:63:4b:06:ed:
92:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D3:47:3F:1A:B1:0D:86:C1:70:A2:19:66:34:A2:51:58:B5:66:58
X509v3 Authority Key Identifier:
keyid:83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2b:44:95:a9:2c:1e:a5:bf:b3:ef:70:14:e9:0a:79:0a:37:
41:e8:c5:da:58:70:22:2a:9c:68:74:eb:bd:84:82:c0:8a:ca:
38:85:46:06:55:6e:7b:4f:40:1d:fa:e8:d1:3c:8e:e5:b7:61:
44:30:72:f7:77:e5:6e:73:a2:11:dc:62:ee:25:e4:3a:5d:0e:
f2:2d:5b:c6:4c:62:05:f8:f6:93:3e:c8:16:b1:23:1f:97:5b:
3e:0e:c8:ad:b2:fc:46:11:15:f4:9d:5b:a0:6d:83:d3:db:4f:
bd:ab:05:30:79:8e:a0:4d:59:95:40:7f:a0:c1:bd:29:18:49:
e2:c0:08:f1:b3:8e:cb:d4:32:73:32:89:88:2d:0c:7d:aa:75:
07:99:02:9a:ee:b5:d4:7a:62:30:b0:32:83:6c:43:bf:33:1b:
3e:bc:ee:db:07:f8:0e:ff:2b:6c:81:dc:e5:90:69:95:42:2b:
29:d1:d2:f0:f2:75:31:f3:9e:9d:e6:02:1d:63:4b:40:6c:d4:
89:ec:e8:bc:12:b6:ec:cf:3f:90:a4:9f:e8:2e:4d:1c:a7:69:
12:2b:37:3b:fb:1e:3f:a0:9c:cb:63:96:1c:dd:f6:46:3c:4f:
a6:c8:06:7d:13:d5:67:85:4f:0f:bd:2d:4a:12:ae:29:6b:53:
2a:ff:02:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:37:22 2026 by rpki-client