Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
File: g5ka_NRV6xsXT8-J-OEOr39ws1U.mft (raw, json)
Hash identifier: GlLEzUltRcTES5rs4KD57ML3Ot/nFmb0DnJEJol04n4=
Subject key identifier: 1E:5C:5F:BE:1A:5A:3F:95:59:C9:23:F9:F4:37:E6:7C:25:7E:98:BC
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Certificate issuer: /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial: 019D25F14C96F5C7DA82DE10C9730C5305E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
Manifest number: 18A6
Signing time: Wed 25 Mar 2026 17:01:03 +0000
Manifest this update: Wed 25 Mar 2026 17:01:03 +0000
Manifest next update: Thu 26 Mar 2026 17:01:03 +0000
Files and hashes: 1: 4XlWrcpKp73JmNE_TYGdFMer_68.roa (hash: iFFQ7ZGIoYm0QNTEQ9/1dEJrXHo9YkBhgDXfPankBQU=)
2: VrXhIxke9Eng6wFk89X_01h58ek.roa (hash: Z3OA/vBhia80Nw5B0Nr3SRG0hjQuwP7wy5EuhIhow/I=)
3: g5ka_NRV6xsXT8-J-OEOr39ws1U.crl (hash: ClfSL/cXRJmEljwhH3dWBD8yyhcbXnJwjfG2X/eSUoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:4c:96:f5:c7:da:82:de:10:c9:73:0c:53:05:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Validity
Not Before: Mar 25 17:01:03 2026 GMT
Not After : Mar 26 17:01:03 2026 GMT
Subject: CN=1e5c5fbe1a5a3f9559c923f9f437e67c257e98bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:e0:d1:2f:6b:32:14:97:f8:cf:b1:e1:60:
5c:bb:9c:50:0c:a0:2e:33:b0:fe:b9:d0:8b:e5:54:
e8:b1:de:d9:25:f2:be:85:eb:56:29:da:40:6c:3b:
0d:46:8f:36:50:f0:de:cc:a0:46:c2:66:14:f4:d9:
ac:21:ee:94:59:b0:a5:03:9c:ef:a2:fc:2e:28:32:
82:3e:78:24:ea:c5:e5:39:88:ce:d4:27:57:08:4c:
8d:6a:b5:ed:0e:c4:db:66:40:39:3c:3c:93:e7:82:
e7:73:07:f5:bd:fc:ab:de:9c:25:e9:14:0e:d8:b7:
31:2c:b0:fa:61:ee:da:25:b7:63:32:13:68:9d:cb:
e7:fc:0d:21:c2:7a:36:1a:f7:65:31:3e:b3:a3:48:
9d:7d:fe:9e:a8:f4:53:8f:82:e3:3b:4e:13:25:3f:
4e:c3:76:57:9d:46:29:17:38:05:2c:54:09:54:30:
f0:5a:75:ca:29:32:68:e1:53:28:f4:59:b0:32:76:
51:1d:af:68:77:83:d9:4b:56:73:ac:78:23:1f:04:
28:72:48:c0:f4:f3:27:ac:fb:7f:af:a8:fc:88:d3:
8c:71:2e:76:a2:b8:f2:38:5c:dd:ef:ce:3c:cc:3e:
9b:4a:46:d0:cf:80:17:31:44:2e:94:3c:94:eb:54:
a9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5C:5F:BE:1A:5A:3F:95:59:C9:23:F9:F4:37:E6:7C:25:7E:98:BC
X509v3 Authority Key Identifier:
keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:93:6a:11:66:d5:62:ba:09:a0:9d:78:88:c8:72:36:8c:c7:
34:3e:11:88:86:00:41:8d:0b:1e:25:ad:e2:ce:2a:df:00:5a:
cc:75:0d:6f:bd:c2:bd:9f:d1:c9:5f:c1:9c:21:04:97:59:f1:
07:e2:38:09:31:39:8e:72:27:d6:40:36:4f:59:ef:9a:2c:30:
37:18:1b:23:63:3d:20:a0:b8:50:b4:60:66:f7:14:7a:4e:c1:
1c:5c:ee:21:58:68:55:b9:45:76:de:74:10:22:68:91:d8:b8:
da:83:b6:2e:bf:24:a9:b1:7c:94:19:f8:2a:8e:eb:f6:4a:87:
ca:25:d3:c2:f6:6f:c8:91:03:38:28:29:eb:4f:08:fb:8e:46:
00:5f:62:ed:af:70:eb:69:2c:d9:2b:26:e0:2c:01:2a:c7:e5:
38:6a:1c:e6:24:b8:08:1d:0b:b0:f4:85:22:a7:3c:fe:f9:51:
b9:b0:9e:1c:5b:8f:b5:3a:86:70:51:d6:7f:e5:91:27:42:c1:
9f:31:26:5f:49:0b:b2:44:00:8f:b8:68:bc:14:db:60:1e:37:
05:b4:2b:62:f6:53:80:2f:bf:c5:62:17:bc:b1:f0:ec:bb:d3:
04:13:1b:2c:24:98:92:f7:3a:ab:00:b9:1f:d5:b3:d0:81:7b:
f0:44:5e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:34 2026 by rpki-client