Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
File: g5ka_NRV6xsXT8-J-OEOr39ws1U.mft (raw, json)
Hash identifier: 5kaLRP7BZ+kwzF/0kb+SNKyUCDT4uVjir/dn+HjLif8=
Subject key identifier: 83:C5:40:7A:A6:40:1A:D9:7B:A0:36:A8:18:4E:F4:D9:2A:B9:22:57
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Certificate issuer: /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial: 019DCFE37F98F971626650A9C80B3E3CC297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
Manifest number: 18FE
Signing time: Mon 27 Apr 2026 17:01:26 +0000
Manifest this update: Mon 27 Apr 2026 17:01:26 +0000
Manifest next update: Tue 28 Apr 2026 17:01:26 +0000
Files and hashes: 1: 4XlWrcpKp73JmNE_TYGdFMer_68.roa (hash: iFFQ7ZGIoYm0QNTEQ9/1dEJrXHo9YkBhgDXfPankBQU=)
2: VrXhIxke9Eng6wFk89X_01h58ek.roa (hash: Z3OA/vBhia80Nw5B0Nr3SRG0hjQuwP7wy5EuhIhow/I=)
3: g5ka_NRV6xsXT8-J-OEOr39ws1U.crl (hash: hhFVDHE0O0dLY+mXII1RwSresOVRwCYTwuq+2zyDrS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:7f:98:f9:71:62:66:50:a9:c8:0b:3e:3c:c2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Validity
Not Before: Apr 27 17:01:26 2026 GMT
Not After : Apr 28 17:01:26 2026 GMT
Subject: CN=83c5407aa6401ad97ba036a8184ef4d92ab92257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:67:db:13:92:a1:e7:81:73:41:0c:52:ac:
c3:2c:89:37:4a:90:f6:1d:d8:07:99:75:e1:60:57:
94:74:e7:dc:5e:dd:7d:90:71:82:1f:d6:af:a7:d0:
fd:88:c1:55:b0:c7:b3:ef:36:00:9d:13:63:3d:d9:
03:f7:7b:ba:fe:c5:34:d2:c9:33:91:0a:e3:fb:9c:
94:ee:6f:28:59:22:a8:c1:17:99:fe:47:37:72:92:
d1:92:03:0e:33:e6:17:ea:14:16:d9:bb:56:c1:ea:
50:77:48:d4:c3:f7:af:64:8d:43:41:6b:9b:46:6b:
07:94:d4:9d:83:36:14:cd:27:12:5a:d5:70:28:9c:
39:7e:00:49:bb:35:4b:b6:9c:57:8a:3c:93:9b:9d:
fc:dc:d7:ca:d2:d1:63:82:f8:20:f7:5a:fc:10:cd:
30:ce:f6:97:0e:b4:bb:c1:d2:7f:36:a1:23:9f:1b:
67:97:a0:2f:0b:4a:35:b4:66:d2:fa:03:e6:aa:cb:
88:21:03:a4:26:e3:5c:04:a5:af:c5:5b:cd:86:7b:
ef:2f:71:9c:de:be:1d:1a:77:f9:57:3a:ef:96:7f:
a3:d8:a9:1d:a4:e1:aa:61:b5:5a:ec:15:50:eb:a1:
9e:23:fd:5a:f1:a3:c9:b3:22:88:02:42:c4:12:53:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C5:40:7A:A6:40:1A:D9:7B:A0:36:A8:18:4E:F4:D9:2A:B9:22:57
X509v3 Authority Key Identifier:
keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9f:db:d1:1f:b2:85:ed:1f:88:20:57:b0:b4:d0:26:93:66:
8a:49:50:4f:e3:1e:60:78:86:89:45:48:a1:18:69:05:6c:e9:
6c:4b:6e:df:40:fd:23:7b:9b:18:5b:d8:57:a2:77:29:22:33:
b0:f5:4c:ae:60:5f:1c:b2:79:f5:56:61:d1:86:6f:e6:bf:2f:
0a:51:e9:85:8e:c8:83:75:f9:c6:92:74:7b:73:44:44:50:b7:
0b:d3:b7:f2:ad:ab:1b:f8:78:c8:69:28:b3:f5:e7:df:cd:09:
6a:30:9f:82:c3:69:80:93:f8:0c:0a:65:13:60:cb:b3:80:e9:
5b:ee:6d:b8:9f:3a:32:5c:45:da:0e:4a:e9:00:17:33:d5:3c:
b0:25:7e:01:ec:e3:a5:f2:ea:80:c7:91:b4:bf:97:8b:24:dd:
1d:77:61:a9:0e:48:d1:0a:27:89:d3:af:cc:72:c5:8a:dd:31:
78:b6:a3:a6:05:89:d8:69:74:95:3b:ae:5d:a9:cc:e1:39:92:
03:7b:9f:2d:8b:05:c3:80:36:df:8a:ea:99:c8:ba:ef:63:15:
a0:d6:65:3a:69:dc:9b:f8:e1:64:69:16:65:08:aa:1b:f6:67:
d7:e7:11:8a:26:35:c2:57:6c:0c:83:48:2e:3a:47:6a:cd:95:
6f:08:82:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:45:16 2026 by rpki-client