Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
File: g2Rixix_Y9L114enAdd5q2luIjY.mft (raw, json)
Hash identifier: x5MTU84RA8IYL5ByFZHr11EEC5DkhNt8V5biDkv3UX4=
Subject key identifier: DB:9A:B4:9B:DC:45:38:F0:25:79:DF:AD:13:87:DA:BA:C6:2C:28:F3
Authority key identifier: 83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
Certificate issuer: /CN=836462c62c7f63d2f5d787a701d779ab696e2236
Certificate serial: 019E1D596B628A7A90BE3F066ED80333F386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
Manifest number: 0A1C
Signing time: Tue 12 May 2026 18:00:59 +0000
Manifest this update: Tue 12 May 2026 18:00:59 +0000
Manifest next update: Wed 13 May 2026 18:00:59 +0000
Files and hashes: 1: PuchMrjsFjFbMrol0kkaS60RRNs.roa (hash: 0Qhlnt0wkF71rKlYa2Irnl7Q6TZWYHLlCjq7i3HaoAo=)
2: fRxvcTM6ZsttHwF0WM1Q-yByE2A.roa (hash: 82Lay6XggknlrO9CTIQXr6DOK4XN7yH0WY72KW8YeUk=)
3: g2Rixix_Y9L114enAdd5q2luIjY.crl (hash: Hiu87aUKUewiNJCHIEy9xRxKCclPNugHwRy405ioZd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:6b:62:8a:7a:90:be:3f:06:6e:d8:03:33:f3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836462c62c7f63d2f5d787a701d779ab696e2236
Validity
Not Before: May 12 18:00:59 2026 GMT
Not After : May 13 18:00:59 2026 GMT
Subject: CN=db9ab49bdc4538f02579dfad1387dabac62c28f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1b:f6:96:32:ac:8f:77:1f:ae:27:b6:63:38:
a9:01:9d:14:41:a5:13:52:84:89:86:ba:73:d4:d8:
56:1b:b7:cb:e1:9c:de:d7:57:29:52:92:a9:c1:c4:
2a:b4:aa:4b:4e:74:c1:bf:9f:23:7e:2a:c3:bd:88:
f8:9f:8c:e0:4e:ff:02:c4:1c:78:2a:8d:7c:74:dd:
6f:8f:00:b1:03:48:f5:72:08:ce:55:ec:ab:9b:f1:
25:9d:e9:c5:b0:03:54:ff:e7:a1:87:24:e0:73:05:
fe:a5:0b:3b:4e:71:d1:e5:ac:7e:e3:59:89:40:37:
cd:42:57:c2:a4:c6:97:f7:9f:02:03:44:24:f3:ed:
3d:b1:2b:8d:0a:45:95:15:7e:b8:35:0c:65:45:26:
3d:02:61:74:44:47:2b:bf:ee:08:19:b4:fa:55:7a:
ce:34:32:c5:7e:c5:37:9c:48:58:de:c7:e9:48:5c:
e9:a1:8b:6b:de:0a:13:c9:3c:d7:d1:f1:75:2a:4c:
eb:72:c2:51:83:1c:0a:b3:c8:a4:1f:da:a5:5c:bf:
1c:56:52:49:40:e2:ff:00:39:ff:b0:40:76:e3:f9:
cf:2f:f1:eb:38:5e:9f:97:d0:50:d0:1d:44:f0:b9:
95:9c:8d:2d:be:87:aa:75:5e:ef:08:5a:4b:dc:7f:
62:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9A:B4:9B:DC:45:38:F0:25:79:DF:AD:13:87:DA:BA:C6:2C:28:F3
X509v3 Authority Key Identifier:
keyid:83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:9e:f5:47:3b:f7:9b:1b:3c:a2:46:6f:b0:4c:a4:7d:c0:32:
35:a8:59:db:d7:27:3f:62:2e:5a:81:9f:02:71:76:9c:6c:b8:
f0:c0:41:eb:31:f2:31:86:fa:bd:b5:aa:91:7f:94:df:04:e1:
db:1a:01:4c:ff:06:44:b3:8a:da:e4:78:84:97:c9:8d:e9:b2:
ae:2b:bd:15:ff:5a:dd:5b:fe:13:da:c2:91:ca:34:20:de:33:
5b:74:d4:8e:f6:cc:90:fa:53:48:69:f6:1e:fc:3c:07:82:08:
b6:63:7f:0d:00:43:cd:e3:d9:b7:a1:c7:ee:44:44:63:0d:29:
8f:28:81:9a:13:ed:48:5f:e6:f6:58:40:9b:50:46:64:e4:a5:
b5:59:a5:e0:9c:8e:b4:70:cd:d7:7e:56:f5:69:7f:a3:ca:1c:
2b:9a:f5:6f:79:2f:b0:55:0e:c1:40:70:1c:9a:35:78:96:ac:
92:1b:4e:00:00:46:de:55:b7:12:9d:c1:cb:59:46:9f:46:1b:
74:d1:18:f8:2e:60:9e:14:c7:7e:ae:1a:fd:12:86:57:99:6c:
70:76:d4:13:3e:05:ef:2e:fb:5e:45:08:27:66:6f:df:2e:0f:
16:90:c3:ff:f2:07:ac:52:59:6b:fb:75:b4:61:f8:de:e1:62:
89:3f:eb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:44:29 2026 by rpki-client