Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier: ZmTmyLyrZFmmbV2RYYl+UYLIV6UaEg8JZDX8bv5fqfg=
Subject key identifier: 49:30:E7:71:AD:CD:E1:8A:1C:36:25:DC:F7:21:20:2D:63:CC:F3:2A
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 019D2BF3152E49204F66FEF7E10E7F0E85DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number: 0C2C
Signing time: Thu 26 Mar 2026 21:00:44 +0000
Manifest this update: Thu 26 Mar 2026 21:00:44 +0000
Manifest next update: Fri 27 Mar 2026 21:00:44 +0000
Files and hashes: 1: 8Et4wRl7tgB_17L9jG6Mdek6xDg.roa (hash: lw3WqGSEoZrvxn7wZkoN4525cvxLItsQZGDX6ZhkS8I=)
2: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: caLY8y+CAV4IhHFKwne62NPFMxg0NQyXITj45bmh1qE=)
3: Gcm3mTulA6LRvNkW38ibYEgtom4.roa (hash: NDdsNqJPO5+KERP1vetA3EoWo8gEcy/Atr+ErCOi2Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f3:15:2e:49:20:4f:66:fe:f7:e1:0e:7f:0e:85:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Mar 26 21:00:44 2026 GMT
Not After : Mar 27 21:00:44 2026 GMT
Subject: CN=4930e771adcde18a1c3625dcf721202d63ccf32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:25:4b:35:64:da:e1:13:ab:30:3a:4e:4a:
9a:b6:c6:8c:de:83:63:7a:4f:b6:db:92:7a:82:3d:
4a:b8:73:09:2e:7b:90:a2:c2:51:21:2e:3a:a8:83:
97:12:32:2c:93:f1:a0:fb:70:1e:b0:16:a1:ed:84:
a7:cb:9d:fc:06:0e:80:b2:f7:d9:bf:dc:cc:a2:28:
31:19:e9:90:2e:f3:ba:d4:c0:50:20:1e:87:5c:14:
6f:f6:fc:45:e1:57:67:ec:a8:82:ab:eb:c5:69:33:
b5:ab:46:ed:b9:13:d2:17:e5:98:80:8f:e4:a8:d7:
c3:e5:26:8b:e4:cd:47:71:15:68:a9:0f:b6:ba:b4:
13:25:83:0f:9c:ac:d0:fa:4a:3d:ee:69:09:4d:5f:
4f:a0:70:16:bf:26:8e:bf:12:6c:15:bf:01:59:04:
ba:83:6b:f9:93:a7:1c:37:a8:b6:39:ba:e2:23:39:
f6:69:1d:57:37:fb:7e:a4:1b:bd:7e:f7:99:5e:a7:
c9:ca:9b:cf:83:fb:ab:2b:32:7e:34:a9:66:af:67:
17:36:c9:eb:d6:d0:f1:76:52:77:52:ab:e0:a4:35:
a0:bb:ee:a9:e8:1d:1a:79:e1:da:08:45:3c:f9:6a:
cf:e6:8f:a8:07:b6:f1:70:dc:93:c4:f0:9c:6d:28:
c9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:30:E7:71:AD:CD:E1:8A:1C:36:25:DC:F7:21:20:2D:63:CC:F3:2A
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:dc:a7:67:3b:cd:31:76:a7:40:50:04:a6:d2:10:b5:01:6d:
90:04:4e:62:65:d5:5d:df:e5:dc:74:85:8c:9f:5a:b2:c7:f8:
e0:9d:7a:3d:4f:00:57:24:4d:fb:29:16:1c:aa:7d:37:5a:42:
32:69:e4:d8:31:4c:e7:97:50:46:7c:77:c7:c8:95:78:0d:b6:
97:f7:36:8c:42:77:8c:a9:83:92:75:83:4f:8a:38:c2:74:9b:
cf:f7:26:cc:e4:82:50:a9:7f:18:a8:60:01:72:f9:22:87:e9:
b0:16:6d:86:89:c2:81:71:77:1e:73:c2:c0:a1:01:57:fb:52:
ac:72:04:0a:7e:71:70:05:b7:9e:7d:29:b8:1c:42:e6:10:19:
e5:66:75:6a:cb:3e:91:63:91:cd:d7:0d:4a:8e:c0:9f:2f:42:
22:f4:40:22:4f:5a:09:f5:94:6f:be:d8:85:f6:ba:64:44:e8:
93:0d:a7:d0:b1:74:f5:99:b4:cd:6e:ed:3a:3a:ed:6e:a7:64:
88:c7:21:bf:d8:fc:25:53:dd:ab:ca:e7:90:27:23:5e:4d:51:
b0:5c:3e:0f:2b:7e:a2:01:92:5b:aa:51:a3:58:30:7d:e5:9e:
49:99:0b:17:0d:54:5d:1c:23:8d:d0:5e:ca:23:5e:a0:bd:86:
72:45:0c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:03:17 2026 by rpki-client