Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
File: g_rANRxoqaHdZA2oY9hnrYX3ipE.mft (raw, json)
Hash identifier: NLKJoacE8JlZ3nIATPzd4yNblLsdlGLYdLgwp2fYXzc=
Subject key identifier: FB:F9:90:16:E1:29:3B:B0:19:ED:23:0E:E0:52:38:82:BB:A8:40:21
Authority key identifier: 83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
Certificate issuer: /CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Certificate serial: 019E1DC75B5E8EE04342B4D153120D85C04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
Manifest number: 0245
Signing time: Tue 12 May 2026 20:01:04 +0000
Manifest this update: Tue 12 May 2026 20:01:04 +0000
Manifest next update: Wed 13 May 2026 20:01:04 +0000
Files and hashes: 1: RpX-BY98Lx61d6BbDQ85JgwJHHA.roa (hash: 0VMmsY08zvLKyajdXHCzmWNfxGZ2eh7xs6DS8yoIsrs=)
2: g_rANRxoqaHdZA2oY9hnrYX3ipE.crl (hash: zoU3/b3SY9qocIF/uO5rQdo/c4DFwAmVtkdIuk0Kfbg=)
3: jpo0P1bv75byvE6Uc1iS5rsp5PQ.roa (hash: orgmNk1notPErLnn1LIBwRtRE9IlZLvNrZGm1ZGrDr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:5b:5e:8e:e0:43:42:b4:d1:53:12:0d:85:c0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Validity
Not Before: May 12 20:01:04 2026 GMT
Not After : May 13 20:01:04 2026 GMT
Subject: CN=fbf99016e1293bb019ed230ee0523882bba84021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:20:a3:15:fa:59:d3:6b:da:92:63:f2:a2:
04:82:46:ab:52:7f:ff:03:21:c9:93:c6:61:92:4f:
b8:66:c3:94:7f:2c:ca:9c:e5:9f:49:60:ca:5a:bf:
6b:cc:50:72:db:5e:d7:ed:d3:c3:cf:c9:27:8f:23:
26:5d:21:ab:89:a1:8c:1e:7b:33:b9:d9:52:24:9f:
3b:8b:0f:2c:4f:51:81:b0:be:47:2d:05:3b:b5:5c:
e6:19:fa:78:33:0d:11:87:f9:31:29:6b:d5:88:a8:
16:94:01:3a:94:aa:95:54:b3:1a:69:a2:1e:b8:f8:
7f:d5:3d:72:19:71:b0:59:96:7e:7d:7c:8d:72:03:
51:88:e8:45:de:c4:05:cc:0e:45:73:35:e2:30:4a:
54:55:df:df:9a:61:df:23:d6:07:bd:73:30:b7:ec:
2e:88:27:8f:a5:ef:6c:ce:5f:4e:bc:49:5b:ea:c7:
ba:c1:9a:c7:ea:d5:2f:4e:ed:0c:b9:a9:1d:23:46:
a4:84:05:ae:ee:50:a9:6a:19:4c:70:8f:e0:1e:65:
fc:ab:73:1b:47:18:0b:80:6f:24:d4:9a:1f:2a:cd:
b6:e7:f6:b2:74:88:e9:bc:39:82:fb:1a:34:79:c5:
74:ce:44:5f:7f:ba:ed:1e:9c:e0:49:07:ff:c7:49:
cc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F9:90:16:E1:29:3B:B0:19:ED:23:0E:E0:52:38:82:BB:A8:40:21
X509v3 Authority Key Identifier:
keyid:83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:03:7d:a8:f7:97:a9:ee:20:c2:de:ae:22:1d:ab:4e:c9:30:
c4:27:1c:1a:f2:7e:ce:b9:30:d8:63:17:74:57:d0:9c:0f:fd:
3a:2f:b6:1f:67:10:d8:cf:33:f6:81:62:64:5e:e8:ac:e5:b8:
2c:d5:a4:33:16:6e:dd:42:8f:8b:b7:1d:1a:fa:c0:a9:f1:6b:
af:77:cf:19:9a:47:3e:2a:78:b3:e7:06:60:7d:97:4e:a3:c8:
51:25:12:3d:42:5f:4d:d7:f2:a8:11:d5:71:a3:fe:e9:cd:0d:
6f:48:bb:b1:ac:68:a1:96:8b:a8:aa:c3:98:13:02:72:10:8c:
5b:2f:65:97:93:78:e0:9d:90:23:6c:f8:97:65:f8:43:7e:0d:
29:1e:a3:47:b5:87:b9:8f:f6:f2:14:52:3d:78:be:6b:be:aa:
ef:84:c5:dd:16:ab:5d:30:73:26:9f:b6:d5:10:05:72:24:fb:
2d:f4:95:5f:df:f3:42:28:13:2c:a0:90:14:a6:b2:b6:7a:c0:
45:e5:4f:3e:40:82:45:1f:4b:83:d6:3e:db:d4:e2:9b:fa:6e:
53:4a:94:e7:6d:d4:a3:60:f7:90:07:67:15:52:0b:32:c4:fa:
5b:a8:0e:bc:d0:49:5f:2c:96:ec:b2:a7:ed:5c:4c:37:c5:9a:
bc:96:76:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:22:00 2026 by rpki-client