Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
File: g_rANRxoqaHdZA2oY9hnrYX3ipE.mft (raw, json)
Hash identifier: AAYbo6zDRG+LlyPH4S1/qrzvqtGnamyqWRLTinwjxK4=
Subject key identifier: 78:01:58:5E:E9:32:3A:19:57:41:92:42:E7:44:F6:C5:6B:AC:8A:F6
Authority key identifier: 83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
Certificate issuer: /CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Certificate serial: 019F927FC794DF851A8F59E194B16463AEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
Manifest number: 0306
Signing time: Fri 24 Jul 2026 05:01:15 +0000
Manifest this update: Fri 24 Jul 2026 05:01:15 +0000
Manifest next update: Sat 25 Jul 2026 05:01:15 +0000
Files and hashes: 1: RpX-BY98Lx61d6BbDQ85JgwJHHA.roa (hash: 0VMmsY08zvLKyajdXHCzmWNfxGZ2eh7xs6DS8yoIsrs=)
2: g_rANRxoqaHdZA2oY9hnrYX3ipE.crl (hash: ECCohpC1s7IYPXLc+kYgnPzOOMiQk1+/bJEOtQnq1B4=)
3: jpo0P1bv75byvE6Uc1iS5rsp5PQ.roa (hash: orgmNk1notPErLnn1LIBwRtRE9IlZLvNrZGm1ZGrDr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:c7:94:df:85:1a:8f:59:e1:94:b1:64:63:ae:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Validity
Not Before: Jul 24 05:01:15 2026 GMT
Not After : Jul 25 05:01:15 2026 GMT
Subject: CN=7801585ee9323a1957419242e744f6c56bac8af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d6:3f:54:09:0b:a8:5d:ae:e0:a7:cc:6a:cf:
36:ed:c8:6d:99:c7:b2:70:20:86:f8:9d:9c:8e:dd:
13:06:fc:eb:1c:c3:96:ca:d6:93:cd:56:11:2b:88:
2f:ef:f3:1b:82:53:d2:44:6a:a4:60:00:f4:f1:d0:
03:1e:f7:c8:b9:bb:a1:38:21:60:ba:15:ae:5a:6d:
93:41:c5:7c:5c:d7:dd:b9:15:34:d0:d4:93:a0:69:
20:89:88:02:1e:e9:c1:f2:d0:14:9b:a8:d8:bd:68:
d3:80:f5:74:73:53:f6:4d:2d:ed:53:00:46:1a:52:
62:0c:06:b5:75:8c:9e:75:20:0b:00:a1:d5:21:f3:
a6:ab:7c:3c:91:20:a1:d2:d3:b2:4a:21:14:be:ec:
85:e5:33:65:b8:19:92:be:00:7d:88:02:57:e4:ab:
0d:c6:97:61:00:6f:b1:28:70:3d:ec:b2:c2:82:89:
10:ee:90:1f:05:45:8f:10:18:e8:5b:03:f7:bf:93:
39:c5:99:be:58:63:12:b2:fc:21:f9:78:e1:7e:e0:
a5:ac:f4:5c:1d:c1:95:11:44:77:1b:78:cf:4b:53:
30:db:2f:eb:58:f7:0c:10:ee:41:6e:37:8f:43:89:
8e:ce:c5:b0:7a:30:6d:ab:8c:8e:3f:c2:33:5d:0b:
3d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:01:58:5E:E9:32:3A:19:57:41:92:42:E7:44:F6:C5:6B:AC:8A:F6
X509v3 Authority Key Identifier:
keyid:83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:4d:fd:94:6a:81:87:22:34:fb:4d:79:61:b8:e6:81:86:d7:
3f:52:ed:10:a9:35:25:24:5c:d0:c6:cc:4e:58:bd:d4:64:d9:
0a:4d:a0:9c:18:a5:83:3c:95:7d:f2:2e:a5:cd:a9:f6:64:f7:
5e:5b:5c:a3:8f:9b:50:08:df:87:c0:28:49:4e:99:81:ef:c5:
98:6a:6e:fe:04:3b:64:7c:1c:be:c3:19:c5:9c:79:38:a3:28:
68:c5:6d:a2:9b:79:e7:61:b9:c1:d1:3c:41:4c:ad:e2:db:83:
b0:35:22:58:02:c9:97:e1:4d:cc:7e:b4:9e:04:83:48:5e:dc:
58:53:ad:76:22:7d:c3:ca:0f:a2:c3:cd:c2:fe:cf:57:8c:43:
94:bb:74:6d:a5:dc:ee:7a:98:3b:d8:d1:6e:a0:8a:48:c8:8e:
18:e1:4b:29:08:ab:34:65:68:cb:05:19:27:dc:f4:70:34:db:
0a:62:5c:84:cf:fb:73:7f:8e:1d:28:a5:76:b8:78:76:0b:70:
34:5e:f2:ad:df:d5:59:30:4a:67:82:21:73:c2:20:c1:e3:d0:
ce:82:39:45:83:52:2f:16:7c:11:45:b1:b9:f6:78:66:f9:e8:
73:0e:6f:c9:04:de:b9:3d:e3:c7:45:37:44:cb:f4:1d:5d:72:
30:b1:61:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:24:46 2026 by rpki-client