Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier: vkh0tgCsc3xwd/IgMrkLRvKFEBM7HVgtkIqqMUemEjA=
Subject key identifier: 9D:EA:DD:3E:BF:5D:24:14:C6:AD:81:89:6E:15:DA:BF:F1:69:FB:32
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 019D281684E7AA5582DCEFA93EC3D7A5FCE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number: 0C2A
Signing time: Thu 26 Mar 2026 03:00:57 +0000
Manifest this update: Thu 26 Mar 2026 03:00:57 +0000
Manifest next update: Fri 27 Mar 2026 03:00:57 +0000
Files and hashes: 1: 8Et4wRl7tgB_17L9jG6Mdek6xDg.roa (hash: lw3WqGSEoZrvxn7wZkoN4525cvxLItsQZGDX6ZhkS8I=)
2: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: ATolfR0qT0hiM5Dv9xuEKCkHmUcCg2qbyfUbnuKp+Mc=)
3: Gcm3mTulA6LRvNkW38ibYEgtom4.roa (hash: NDdsNqJPO5+KERP1vetA3EoWo8gEcy/Atr+ErCOi2Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:84:e7:aa:55:82:dc:ef:a9:3e:c3:d7:a5:fc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Mar 26 03:00:57 2026 GMT
Not After : Mar 27 03:00:57 2026 GMT
Subject: CN=9deadd3ebf5d2414c6ad81896e15dabff169fb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:8b:ba:be:7a:48:32:57:f0:39:98:08:86:
19:d3:e9:7a:1e:8e:ba:6f:ce:15:ef:04:67:6a:8f:
c3:e1:e3:99:98:fa:36:e3:74:27:e7:2c:84:f3:ac:
23:cc:9d:ae:0d:d8:ea:b6:c8:86:5e:f2:69:b9:76:
6a:d6:21:61:42:be:89:8b:7d:8d:a1:5e:1e:4f:86:
ce:19:60:9d:ac:8c:c4:e7:88:31:c1:38:00:a1:11:
68:28:15:24:8b:f8:9c:d4:25:42:e5:10:10:91:70:
f5:70:ef:dd:75:69:4f:24:e9:63:e2:ff:28:17:0c:
ec:8c:be:66:9c:da:d0:6a:bc:45:a2:14:e7:13:f0:
f1:f9:70:d9:05:c4:7c:a1:2c:d6:79:d1:d5:2a:66:
7a:19:46:7f:40:4d:00:f8:c3:15:d0:05:70:2d:f5:
97:5b:20:db:35:5c:69:d1:db:c0:2c:c7:0b:58:2a:
84:04:8c:7b:3d:7c:f9:47:48:f3:fd:c1:20:fa:52:
af:c1:a5:62:64:59:8f:b0:ae:6e:d9:8b:77:4a:ce:
6f:f8:6f:58:b2:f6:1c:00:5f:cb:1b:b6:b3:a1:29:
d6:9c:1e:18:9b:da:08:08:e2:af:7a:74:1b:55:89:
b1:31:19:6d:dd:8a:1b:44:90:94:2d:45:29:39:35:
7b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EA:DD:3E:BF:5D:24:14:C6:AD:81:89:6E:15:DA:BF:F1:69:FB:32
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9e:c5:1f:a8:59:ba:ca:e9:44:ba:d6:87:a3:ce:0d:44:18:
ae:30:84:70:2b:1c:15:e7:4b:3b:24:51:11:0b:5a:47:f4:76:
20:88:35:d7:38:35:8d:0f:22:56:ec:9a:31:d8:69:76:05:01:
6c:fb:ec:ab:d4:7b:20:e3:23:13:44:74:eb:bf:c3:b2:bb:31:
e2:1e:84:b5:86:9c:bf:30:5a:3b:3c:77:a1:0f:0b:53:01:f1:
8c:7a:a8:65:a7:b9:2f:b9:a2:cd:7c:b5:9a:46:ee:0a:4f:9a:
96:01:af:b9:bc:99:48:65:81:8a:e1:23:b7:22:03:4d:23:6d:
b5:98:a5:53:68:d8:15:7f:39:d2:36:79:0c:b3:38:85:d3:e1:
c2:15:c7:fa:c4:b5:34:71:a9:06:ec:a1:92:dc:ed:9c:c4:f8:
92:4a:20:0c:30:03:7a:9b:90:67:3d:c4:71:61:48:6a:f5:24:
a5:01:68:26:f6:57:3a:31:6c:4b:79:a9:a8:96:81:ff:84:d4:
1c:54:d6:e3:00:0c:0e:e0:9a:2d:b2:aa:71:bd:1f:8c:2f:68:
fb:ad:e4:d7:87:85:c1:15:86:e5:96:7e:cc:c8:d1:fe:4a:03:
a5:7d:d8:34:54:b2:88:3c:50:33:25:d2:56:e9:07:ed:fc:89:
e8:7e:58:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFoTnqlWC3O+pPsPXpfzpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZjI2ODE3NWM1YTA5YTdhZmQwZDg3ODUxODI0ZTFkYjcz
ZjdlN2IwHhcNMjYwMzI2MDMwMDU3WhcNMjYwMzI3MDMwMDU3WjAzMTEwLwYDVQQD
Eyg5ZGVhZGQzZWJmNWQyNDE0YzZhZDgxODk2ZTE1ZGFiZmYxNjlmYjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvyLur56SDJX8DmYCIYZ0+l6Ho66
b84V7wRnao/D4eOZmPo243Qn5yyE86wjzJ2uDdjqtsiGXvJpuXZq1iFhQr6Ji32N
oV4eT4bOGWCdrIzE54gxwTgAoRFoKBUki/ic1CVC5RAQkXD1cO/ddWlPJOlj4v8o
FwzsjL5mnNrQarxFohTnE/Dx+XDZBcR8oSzWedHVKmZ6GUZ/QE0A+MMV0AVwLfWX
WyDbNVxp0dvALMcLWCqEBIx7PXz5R0jz/cEg+lKvwaViZFmPsK5u2Yt3Ss5v+G9Y
svYcAF/LG7azoSnWnB4Ym9oICOKvenQbVYmxMRlt3YobRJCULUUpOTV7zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3q3T6/XSQUxq2BiW4V2r/xafsyMB8GA1UdIwQY
MBaAFBvyaBdcWgmnr9DYeFGCTh23P357MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82NjY1MGEtNTk4YS00Mzg5LTk0MWYt
NTM0YjhjZDY1MmU5LzEvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82NjY1MGEtNTk4YS00Mzg5LTk0MWYtNTM0YjhjZDY1MmU5
LzEvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZp7FH6hZ
usrpRLrWh6PODUQYrjCEcCscFedLOyRREQtaR/R2IIg11zg1jQ8iVuyaMdhpdgUB
bPvsq9R7IOMjE0R067/Dsrsx4h6EtYacvzBaOzx3oQ8LUwHxjHqoZae5L7mizXy1
mkbuCk+algGvubyZSGWBiuEjtyIDTSNttZilU2jYFX850jZ5DLM4hdPhwhXH+sS1
NHGpBuyhktztnMT4kkogDDADepuQZz3EcWFIavUkpQFoJvZXOjFsS3mpqJaB/4TU
HFTW4wAMDuCaLbKqcb0fjC9o+63k14eFwRWG5ZZ+zMjR/koDpX3YNFSyiDxQMyXS
VukH7fyJ6H5YEQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:37:35 2026 by rpki-client