Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier: TECo919BjpBz9AOFPrl7oDPPBRFH9vOkK6Rwsur2AkE=
Subject key identifier: 88:02:62:42:F8:6A:7A:05:67:B0:E5:74:9F:DC:AA:C8:06:B9:11:F8
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 019F92119451B47D6163686E627DE943F27B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number: 0D6A
Signing time: Fri 24 Jul 2026 03:00:53 +0000
Manifest this update: Fri 24 Jul 2026 03:00:53 +0000
Manifest next update: Sat 25 Jul 2026 03:00:53 +0000
Files and hashes: 1: 8Et4wRl7tgB_17L9jG6Mdek6xDg.roa (hash: lw3WqGSEoZrvxn7wZkoN4525cvxLItsQZGDX6ZhkS8I=)
2: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: Xn+HJwqxITtpsxSPo4cav37k3ldNnrfmAEOKUY7ggio=)
3: Gcm3mTulA6LRvNkW38ibYEgtom4.roa (hash: NDdsNqJPO5+KERP1vetA3EoWo8gEcy/Atr+ErCOi2Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:94:51:b4:7d:61:63:68:6e:62:7d:e9:43:f2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Jul 24 03:00:53 2026 GMT
Not After : Jul 25 03:00:53 2026 GMT
Subject: CN=88026242f86a7a0567b0e5749fdcaac806b911f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:05:4a:48:a5:97:80:c5:49:19:04:e1:28:
3b:7f:ca:9e:0b:17:d8:38:0f:fb:4e:ed:cc:f7:ad:
07:23:6f:a4:4e:a8:24:76:07:b5:04:4a:38:27:41:
97:95:d0:81:a5:73:e2:84:88:89:ee:35:8f:4b:0d:
e5:67:d4:6e:4a:35:76:39:2c:5f:07:5f:60:33:bc:
fd:8d:bf:48:4d:bb:1f:e1:90:53:13:a5:f1:c3:c1:
5d:41:1a:79:7b:74:6e:8c:9a:ea:a1:b0:12:d3:bb:
1a:5e:1a:08:1a:02:9c:27:19:63:db:a1:1c:d1:63:
ca:67:2a:1f:3a:a2:42:e9:04:ca:1c:f3:d8:f2:95:
a9:31:6d:ed:f1:63:63:76:1e:03:fd:82:d1:f9:b9:
21:eb:3a:7b:a8:95:2f:66:94:8a:9c:48:3b:60:52:
a0:b4:d1:ac:0a:d2:0b:8a:e8:93:53:e9:c9:36:6d:
01:47:1e:f7:01:4b:55:14:e5:10:39:0d:ed:50:18:
c2:ef:7d:18:b9:7d:ef:d9:0e:3a:49:b6:55:59:6d:
7d:44:78:ff:05:34:0f:3c:1c:1c:79:38:ce:76:2a:
40:74:db:1c:da:1b:50:04:ab:d2:8b:fb:49:2c:04:
d9:66:09:ef:93:09:cf:a8:64:94:0f:40:da:53:df:
a4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:02:62:42:F8:6A:7A:05:67:B0:E5:74:9F:DC:AA:C8:06:B9:11:F8
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:81:b1:e3:a4:b5:65:02:8d:da:68:50:d2:e1:d7:bc:63:b8:
14:39:a7:a7:25:9e:d8:96:2d:cd:eb:be:4d:d0:0d:05:69:b0:
c4:0c:ee:b1:ba:17:21:ec:63:92:d9:e2:e1:a0:8a:14:a9:ab:
8f:cd:1f:d6:d3:c2:ba:8f:d3:60:7c:d4:6d:9c:ec:2b:df:a3:
c8:f1:2c:c0:f0:ba:e8:06:03:5e:16:2c:8f:e8:09:c4:9f:92:
41:04:42:9c:94:1c:29:21:a2:42:94:f0:9d:ac:0e:e4:91:42:
0d:ff:e5:81:68:40:34:c8:ae:3f:c9:f5:13:55:59:2e:ec:57:
4b:79:7b:d7:df:a3:7b:77:d3:49:92:c3:fd:70:5a:d0:ea:37:
80:a3:03:98:91:9f:87:cf:89:0e:e8:cb:f9:52:3e:6f:45:33:
fa:b7:ee:2c:c0:63:e4:80:cc:71:44:41:9a:3f:a3:af:0c:c2:
57:91:95:8b:84:08:0c:df:ac:a4:16:ba:7c:ce:07:f5:ad:f0:
16:f0:37:1c:6a:13:28:cd:35:eb:81:cb:41:22:6b:1c:ea:50:
fc:31:b0:62:84:a0:fe:be:83:20:39:47:9c:30:33:fe:3c:88:
29:a8:cc:1e:e9:d6:13:a5:e7:eb:82:ee:a1:ae:2c:47:0c:55:
69:d3:c7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:04:19 2026 by rpki-client