Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
File: g_rANRxoqaHdZA2oY9hnrYX3ipE.mft (raw, json)
Hash identifier: lyEd+ifwWHjRh6TX+cIW++7wF+dhV4udjZJLqHPK4TQ=
Subject key identifier: 5E:68:47:BD:64:63:FE:25:8E:06:A0:90:F9:6C:A7:87:9F:12:76:3D
Authority key identifier: 83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
Certificate issuer: /CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Certificate serial: 019D25F16E79FD33E29AAFBE319F670EE408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
Manifest number: 01C4
Signing time: Wed 25 Mar 2026 17:01:12 +0000
Manifest this update: Wed 25 Mar 2026 17:01:12 +0000
Manifest next update: Thu 26 Mar 2026 17:01:12 +0000
Files and hashes: 1: g_rANRxoqaHdZA2oY9hnrYX3ipE.crl (hash: 3LTMqaDUqDhlz2RMsiAqkUFwqbwQVCGHeoS6TdhJZ8E=)
2: jpo0P1bv75byvE6Uc1iS5rsp5PQ.roa (hash: orgmNk1notPErLnn1LIBwRtRE9IlZLvNrZGm1ZGrDr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:6e:79:fd:33:e2:9a:af:be:31:9f:67:0e:e4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Validity
Not Before: Mar 25 17:01:12 2026 GMT
Not After : Mar 26 17:01:12 2026 GMT
Subject: CN=5e6847bd6463fe258e06a090f96ca7879f12763d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c3:66:72:ee:9b:e8:39:29:a2:7e:50:f9:43:
eb:35:aa:0c:d5:f8:7c:c8:3b:a3:e4:dd:98:87:9d:
e2:8d:a1:33:39:dc:72:3f:5b:ea:01:17:c8:07:e0:
43:04:6d:55:cc:54:a2:a4:9d:86:dd:7a:04:77:4c:
fd:b5:b9:f6:d2:d8:1c:a1:2e:ac:19:72:6b:18:93:
64:87:02:2b:d9:ed:c3:07:60:31:46:13:67:57:91:
1f:5c:b4:ab:3a:e1:82:dc:06:a1:26:20:8c:6f:4b:
7e:77:dc:46:2f:ae:99:55:77:50:c0:7b:dc:c0:2a:
1a:1b:f4:ed:28:77:1b:be:83:57:96:86:49:c5:72:
f6:77:14:18:ff:a3:71:76:e1:88:c7:12:72:fb:fd:
49:31:dd:f7:02:76:53:b5:b2:22:ce:07:7d:25:c0:
20:b9:bd:72:ee:87:2d:e7:be:dc:63:54:7b:61:a1:
50:34:66:d2:34:89:c6:de:a1:a7:fc:eb:89:25:45:
c0:c4:a5:0a:ff:5e:21:69:63:9a:bc:8e:21:0e:26:
76:d1:e7:80:02:53:3e:27:20:ed:70:76:dd:dd:bc:
18:ad:fe:cd:de:62:2e:e6:40:41:42:25:dd:f2:51:
a5:04:a1:fa:19:b5:7a:96:62:71:65:2d:f6:21:eb:
22:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:68:47:BD:64:63:FE:25:8E:06:A0:90:F9:6C:A7:87:9F:12:76:3D
X509v3 Authority Key Identifier:
keyid:83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:34:30:67:11:00:2a:aa:6d:c4:fc:08:3b:04:69:67:c6:16:
7a:5c:ad:45:e9:62:fa:d6:8b:80:47:13:50:e6:d4:81:97:38:
73:20:dd:8e:69:e3:72:2d:c0:0b:6b:35:e4:c8:74:db:82:1c:
03:68:41:03:b1:3b:39:c7:67:bd:2a:39:29:a1:47:55:a9:8c:
13:59:e9:e6:36:7d:30:a8:67:9d:1b:d6:a7:4c:7c:28:9a:53:
df:b7:f2:9f:93:5c:ef:ce:bb:a8:d1:7a:c5:28:14:1e:cd:1a:
d0:67:17:1d:df:e3:26:49:3a:7d:05:61:ad:5b:8d:52:3f:23:
2f:08:fd:fd:e6:5b:59:50:a7:76:45:29:a8:34:24:67:7f:29:
a3:88:90:03:68:88:bc:eb:c9:41:5c:5e:1c:9a:1a:ed:30:91:
b3:ee:e1:40:4b:bd:cb:2a:68:4a:a6:5d:d2:59:73:b8:1a:02:
47:86:1c:af:cd:f5:cc:7a:3b:a2:13:9b:86:d5:2b:3f:ed:47:
29:c2:dd:e7:98:d1:6e:a9:ae:4f:f7:d5:d6:94:1f:d4:3f:7c:
36:a8:48:c1:c7:fd:3d:8e:dc:18:23:4e:e9:d7:2a:7f:19:59:
92:bf:60:aa:81:55:85:55:f9:b2:6d:d9:ce:26:ee:a3:b1:7f:
24:f8:0d:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8W55/TPimq++MZ9nDuQIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZmFjMDM1MWM2OGE5YTFkZDY0MGRhODYzZDg2N2FkODVm
NzhhOTEwHhcNMjYwMzI1MTcwMTEyWhcNMjYwMzI2MTcwMTEyWjAzMTEwLwYDVQQD
Eyg1ZTY4NDdiZDY0NjNmZTI1OGUwNmEwOTBmOTZjYTc4NzlmMTI3NjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcNmcu6b6Dkpon5Q+UPrNaoM1fh8
yDuj5N2Yh53ijaEzOdxyP1vqARfIB+BDBG1VzFSipJ2G3XoEd0z9tbn20tgcoS6s
GXJrGJNkhwIr2e3DB2AxRhNnV5EfXLSrOuGC3AahJiCMb0t+d9xGL66ZVXdQwHvc
wCoaG/TtKHcbvoNXloZJxXL2dxQY/6NxduGIxxJy+/1JMd33AnZTtbIizgd9JcAg
ub1y7oct577cY1R7YaFQNGbSNInG3qGn/OuJJUXAxKUK/14haWOavI4hDiZ20eeA
AlM+JyDtcHbd3bwYrf7N3mIu5kBBQiXd8lGlBKH6GbV6lmJxZS32IesiuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5oR71kY/4ljgagkPlsp4efEnY9MB8GA1UdIwQY
MBaAFIP6wDUcaKmh3WQNqGPYZ62F94qRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ19yQU5SeG9xYUhkWkEyb1k5aG5yWVgzaXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9jNzJjZjctMzU3Yi00ZmM3LTlmNjEt
ZGZmN2U2MzQ4ZmZmLzEvZ19yQU5SeG9xYUhkWkEyb1k5aG5yWVgzaXBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9jNzJjZjctMzU3Yi00ZmM3LTlmNjEtZGZmN2U2MzQ4ZmZm
LzEvZ19yQU5SeG9xYUhkWkEyb1k5aG5yWVgzaXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDQwZxEA
KqptxPwIOwRpZ8YWelytReli+taLgEcTUObUgZc4cyDdjmnjci3AC2s15Mh024Ic
A2hBA7E7OcdnvSo5KaFHVamME1np5jZ9MKhnnRvWp0x8KJpT37fyn5Nc7867qNF6
xSgUHs0a0GcXHd/jJkk6fQVhrVuNUj8jLwj9/eZbWVCndkUpqDQkZ38po4iQA2iI
vOvJQVxeHJoa7TCRs+7hQEu9yypoSqZd0llzuBoCR4Ycr831zHo7ohObhtUrP+1H
KcLd55jRbqmuT/fV1pQf1D98NqhIwcf9PY7cGCNO6dcqfxlZkr9gqoFVhVX5sm3Z
zibuo7F/JPgNFQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:32:42 2026 by rpki-client