Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier: PV7lBx6j8yvgd695wMVLOjPvKcCyEX5pd/YKVcAQU9A=
Subject key identifier: 5D:B8:71:2C:1D:EE:C2:34:1D:94:25:4F:D6:28:86:8C:71:38:69:74
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 019E1F47876E141347CF1EEAE1C842621914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number: 0CAA
Signing time: Wed 13 May 2026 03:00:41 +0000
Manifest this update: Wed 13 May 2026 03:00:41 +0000
Manifest next update: Thu 14 May 2026 03:00:41 +0000
Files and hashes: 1: 8Et4wRl7tgB_17L9jG6Mdek6xDg.roa (hash: lw3WqGSEoZrvxn7wZkoN4525cvxLItsQZGDX6ZhkS8I=)
2: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: /zfYdMZRcL444C1ODR877TYCNxPMAhaoZhOS2uASIKg=)
3: Gcm3mTulA6LRvNkW38ibYEgtom4.roa (hash: NDdsNqJPO5+KERP1vetA3EoWo8gEcy/Atr+ErCOi2Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:87:6e:14:13:47:cf:1e:ea:e1:c8:42:62:19:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: May 13 03:00:41 2026 GMT
Not After : May 14 03:00:41 2026 GMT
Subject: CN=5db8712c1deec2341d94254fd628868c71386974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d6:ca:e0:46:a6:e4:1a:d6:8b:52:07:93:6e:
80:0e:9d:b7:04:6a:f8:51:c0:fa:f4:f3:8b:e3:a2:
a9:fa:b1:ff:71:bd:f7:53:48:3f:16:fb:cf:b3:46:
c6:e3:e5:7b:0e:1d:3f:16:cc:52:dd:11:60:e9:47:
9f:0b:a4:51:0c:95:69:fb:64:27:3b:94:2d:4b:73:
82:c2:8e:29:29:9c:4a:22:0b:bb:4d:ad:66:2c:f7:
24:5c:05:0a:12:cf:fe:ab:ce:26:34:e7:02:ec:82:
58:33:f5:d0:b5:5f:79:62:10:f0:5c:37:24:55:79:
e3:de:fd:72:1a:a7:99:65:48:46:74:d8:2f:40:44:
68:d7:35:27:4f:26:f8:9c:3c:d1:d5:15:6d:57:e1:
1e:ae:71:0b:1e:e8:15:e2:06:97:60:8f:40:7a:07:
50:8e:30:74:f2:06:22:2f:a3:80:89:43:61:1c:40:
d3:a3:22:d7:9f:7c:fb:34:3e:8b:c6:91:6a:d3:f3:
5b:3a:59:df:15:35:fb:e6:4f:6f:b9:94:1a:36:2c:
30:c7:61:8e:98:c8:94:12:40:5e:73:f5:5f:e5:93:
ea:b4:a3:42:86:d1:4a:9c:c4:c9:ab:b3:a0:ee:d0:
cf:cb:9f:a4:55:e2:65:a9:d6:f7:01:83:2a:9b:a0:
4f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B8:71:2C:1D:EE:C2:34:1D:94:25:4F:D6:28:86:8C:71:38:69:74
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5d:30:b6:b3:f2:61:25:5f:87:39:36:71:24:4e:74:8e:13:
e4:87:63:e9:08:c9:4a:77:44:5a:c6:02:53:e6:1d:dd:35:51:
02:2a:a9:c7:52:4b:15:ea:da:94:a7:7e:7f:50:09:75:44:80:
24:d4:53:30:e2:c8:48:a4:c6:50:7e:32:ee:0e:1f:26:ce:16:
c9:f8:3e:eb:07:1c:99:3b:ba:71:e0:6a:24:06:39:a2:ae:0f:
41:a5:9e:bb:59:87:70:d6:d6:ac:9f:ff:41:b3:99:f0:da:d4:
82:13:5e:85:24:1c:7f:8b:c4:7c:85:e7:0c:80:d9:d8:b0:c5:
1f:b8:87:ad:3f:2d:8d:ed:b8:85:b8:af:73:39:87:6d:32:18:
c1:4e:56:db:f9:ef:58:f8:f3:c8:cf:ab:42:82:ce:58:9b:80:
3e:ba:7a:44:bf:16:63:4d:ec:77:48:54:3d:03:f6:39:69:bc:
c6:09:1b:5b:46:75:5a:61:9f:1a:c0:aa:16:3c:1d:52:b5:ff:
02:b0:94:19:9a:4f:cb:77:d3:a8:e2:7d:aa:f9:ad:54:54:e7:
57:ab:83:b9:14:79:b8:a1:66:f0:00:ca:d6:1d:0e:f9:ed:d8:
92:de:7a:8f:e0:41:66:6f:a6:50:24:db:24:99:1f:57:14:3e:
ee:ca:9d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:10:49 2026 by rpki-client