Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
File: g2Rixix_Y9L114enAdd5q2luIjY.mft (raw, json)
Hash identifier: OhIUyUXtIS4P+3qNIi+BPLo9xVj4poVM3kDPpbnpsKw=
Subject key identifier: 45:B7:AB:93:B8:C4:7C:78:D9:EA:21:19:EB:62:85:D1:ED:42:5A:BF
Authority key identifier: 83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
Certificate issuer: /CN=836462c62c7f63d2f5d787a701d779ab696e2236
Certificate serial: 019D262850FAF3C40956F1D367F53AE6CC9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
Manifest number: 099C
Signing time: Wed 25 Mar 2026 18:01:09 +0000
Manifest this update: Wed 25 Mar 2026 18:01:09 +0000
Manifest next update: Thu 26 Mar 2026 18:01:09 +0000
Files and hashes: 1: PuchMrjsFjFbMrol0kkaS60RRNs.roa (hash: 0Qhlnt0wkF71rKlYa2Irnl7Q6TZWYHLlCjq7i3HaoAo=)
2: fRxvcTM6ZsttHwF0WM1Q-yByE2A.roa (hash: 82Lay6XggknlrO9CTIQXr6DOK4XN7yH0WY72KW8YeUk=)
3: g2Rixix_Y9L114enAdd5q2luIjY.crl (hash: Ct3yFJ4qOLElbTar+b8gQgQ7wiayc856Mu0B51BJp6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:50:fa:f3:c4:09:56:f1:d3:67:f5:3a:e6:cc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836462c62c7f63d2f5d787a701d779ab696e2236
Validity
Not Before: Mar 25 18:01:09 2026 GMT
Not After : Mar 26 18:01:09 2026 GMT
Subject: CN=45b7ab93b8c47c78d9ea2119eb6285d1ed425abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:7e:92:af:11:18:cb:a1:26:c6:ae:4b:da:
6a:83:ea:e4:7a:de:65:5b:36:ca:c5:01:89:10:5d:
95:ba:f7:cb:9f:71:e9:ae:41:01:be:54:a3:e7:3c:
75:50:31:0e:6a:bf:23:a4:41:bc:30:83:a5:0e:50:
61:7b:0b:47:46:84:68:e8:d2:4e:f4:9f:30:71:84:
3e:f9:60:5c:47:9d:97:3e:9b:0a:88:e6:c4:21:a0:
0c:fc:62:1d:e9:6e:4d:f8:5a:ad:be:ec:29:ce:76:
25:d3:2b:f8:e8:03:63:3e:ad:88:13:15:c3:60:d0:
47:e3:0a:eb:cd:8d:c7:f0:4c:49:30:c1:61:a5:45:
29:18:74:c5:79:a9:49:de:e4:9f:5e:49:5e:f2:56:
13:65:09:a9:b6:1a:5e:83:38:40:ab:57:17:bb:27:
cd:44:1a:9c:f8:4a:9b:8c:bc:5a:35:d8:b6:96:12:
44:4e:77:c0:f5:b5:01:41:4c:fa:a0:1a:93:8a:3b:
a4:13:5d:66:60:a3:70:73:75:72:df:74:6e:21:fb:
fb:df:9f:77:2d:65:d3:2a:f4:cd:8d:b7:17:71:bf:
6a:5f:45:97:05:07:1b:3a:65:27:f3:bc:48:d5:b6:
de:35:fb:b3:c6:cf:ff:aa:4e:0d:10:78:8a:46:10:
45:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B7:AB:93:B8:C4:7C:78:D9:EA:21:19:EB:62:85:D1:ED:42:5A:BF
X509v3 Authority Key Identifier:
keyid:83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:05:4e:49:92:18:8b:4c:06:a2:a6:ec:8e:51:1b:e4:df:65:
fa:b7:3d:28:f7:6f:d3:98:11:79:ac:51:77:0d:df:3b:d6:ef:
9e:65:e1:88:b8:b8:d5:54:a2:a6:b5:27:7c:7a:00:85:33:e7:
71:dd:c5:a0:9e:18:7f:c8:c8:58:52:83:e6:90:19:c4:ac:f9:
e2:49:38:15:82:0f:1d:71:0b:c9:7c:ba:3b:2c:95:82:ba:42:
3a:b2:56:b2:62:18:e4:d6:32:b8:31:ba:04:ac:bd:4e:86:b2:
de:f3:20:14:36:ed:c1:b8:88:bb:6e:28:e2:9f:83:c9:ff:a9:
15:4a:37:fa:3f:d6:14:6a:9a:f7:fc:71:0c:00:9e:40:95:8d:
81:c2:bb:7f:57:5c:ac:53:e9:e0:85:88:94:dc:1b:ce:44:3e:
a1:be:72:fb:9c:36:1d:54:7b:59:9b:54:7b:f7:33:63:d3:2c:
b1:a4:b9:b7:4c:be:8a:f4:d2:8a:4d:a4:50:99:37:fd:55:7b:
77:9e:6d:4e:46:44:5a:07:71:3f:f9:b7:ff:fa:d8:8d:53:27:
05:b4:e6:72:90:f8:d1:10:f4:41:86:d6:5c:64:92:95:46:7c:
c0:b2:3f:36:e4:f5:47:a2:bc:39:95:a7:2b:88:47:68:57:e9:
48:97:66:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:18 2026 by rpki-client