Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier: M2B2ItMKD3Cd0MkXfpmV6/Ui5zxc9rvEcsflduRIios=
Subject key identifier: 05:97:7E:37:8D:C9:6E:50:03:75:CF:D3:11:56:5C:29:60:1A:B5:D7
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 01A0D494194DD52A5FF486C61896C9E2ABD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number: 0E11
Signing time: Thu 24 Sep 2026 18:01:10 +0000
Manifest this update: Thu 24 Sep 2026 18:01:10 +0000
Manifest next update: Fri 25 Sep 2026 18:01:10 +0000
Files and hashes: 1: 8Et4wRl7tgB_17L9jG6Mdek6xDg.roa (hash: lw3WqGSEoZrvxn7wZkoN4525cvxLItsQZGDX6ZhkS8I=)
2: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: tXMSAimThO496dpML3MIYOg2Jpa428UsWkjl1eOKACE=)
3: Gcm3mTulA6LRvNkW38ibYEgtom4.roa (hash: NDdsNqJPO5+KERP1vetA3EoWo8gEcy/Atr+ErCOi2Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:19:4d:d5:2a:5f:f4:86:c6:18:96:c9:e2:ab:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Sep 24 18:01:10 2026 GMT
Not After : Sep 25 18:01:10 2026 GMT
Subject: CN=05977e378dc96e500375cfd311565c29601ab5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:1e:87:f7:9d:27:56:e1:b5:cf:42:cb:b0:
b2:73:41:21:14:3a:17:89:c2:35:85:d1:4b:61:98:
1b:08:f8:ef:a4:57:da:8d:5d:3f:4a:7f:00:55:3e:
a3:68:e8:ac:4d:12:34:e6:03:97:cd:23:98:ea:f7:
57:21:da:76:38:89:78:aa:73:ca:b1:9c:4d:c5:c8:
61:c6:0e:d5:24:5b:c6:15:c6:06:67:ec:12:b2:e2:
93:84:69:87:a0:f1:f9:e5:ac:77:3d:8e:8b:b6:39:
41:85:47:5d:68:7b:f2:b3:b0:2c:72:f4:e6:70:de:
d6:3c:a4:1f:b8:da:06:1d:da:33:e7:54:ce:de:25:
b7:ed:95:67:27:eb:61:a3:d6:f5:53:50:f7:df:36:
91:55:43:a8:1b:8d:2a:b9:6d:8d:f7:0d:9b:e5:7a:
b8:80:a9:dc:14:fc:1a:4d:9a:fb:b3:24:e0:c8:b1:
cd:5f:ae:b1:8b:59:8b:18:91:31:ca:e5:8d:5a:41:
c1:35:95:7b:c0:93:fc:b5:92:5d:84:b0:55:74:b2:
53:ba:dc:ad:65:fd:8b:a8:44:46:53:6a:a3:f5:4a:
78:51:6f:e1:4a:f3:1a:2a:a1:69:f5:e7:fd:57:1e:
43:bd:77:6b:15:ab:45:30:13:a2:be:cc:0b:92:80:
29:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:97:7E:37:8D:C9:6E:50:03:75:CF:D3:11:56:5C:29:60:1A:B5:D7
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5f:d9:51:92:a9:b2:2a:78:18:95:e7:c3:43:25:49:a0:69:
24:1c:9f:28:00:40:f9:36:6e:cc:6f:72:86:75:f2:d3:00:99:
9a:88:76:48:d7:f4:55:98:f8:c6:ab:b3:07:62:7e:e1:7d:73:
19:d4:f8:70:ad:77:28:c5:85:3c:a3:05:c9:ad:b3:22:c1:01:
6c:5f:ba:7d:51:2d:62:2b:97:96:19:e8:5f:fd:2b:55:c4:65:
21:a9:35:f4:3e:05:1c:e2:29:16:54:02:1c:44:75:07:81:4a:
dc:56:2c:d7:36:b9:ba:54:49:1d:78:7f:c2:71:fd:43:23:0c:
fd:b1:c4:08:b1:4d:0c:16:7e:98:05:ca:b9:ca:e7:86:12:01:
8d:42:68:8b:fa:65:b0:5b:04:1a:60:ad:22:eb:6f:90:be:33:
6f:d0:ec:e6:33:6a:da:6b:39:e3:ad:f7:3d:58:4f:a8:57:36:
29:45:15:9f:97:81:e9:80:c9:c7:9a:28:8d:27:39:f8:24:ef:
1a:7e:21:01:c6:b8:df:91:03:23:af:05:e1:9d:dd:8a:3f:c8:
27:a6:f1:62:3b:dc:3a:4f:e7:33:f8:ed:c0:70:07:11:a0:43:
36:59:e2:f6:20:84:28:f1:23:04:c6:b3:ad:18:06:e4:cd:eb:
d4:6d:09:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:02:07 2026 by rpki-client