Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
File: g5ka_NRV6xsXT8-J-OEOr39ws1U.mft (raw, json)
Hash identifier: LFJewCEwGEYolf7RUCOQNyqnxw/x7ei/UTnWNeTTv04=
Subject key identifier: FA:F4:27:4D:85:F8:5D:3C:E9:20:C3:3A:5C:A5:7D:31:25:88:60:C4
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Certificate issuer: /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial: 019CE635F8F515C3B63F5E82209AE386F5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
Manifest number: 1885
Signing time: Fri 13 Mar 2026 08:00:22 +0000
Manifest this update: Fri 13 Mar 2026 08:00:22 +0000
Manifest next update: Sat 14 Mar 2026 08:00:22 +0000
Files and hashes: 1: 4XlWrcpKp73JmNE_TYGdFMer_68.roa (hash: iFFQ7ZGIoYm0QNTEQ9/1dEJrXHo9YkBhgDXfPankBQU=)
2: VrXhIxke9Eng6wFk89X_01h58ek.roa (hash: Z3OA/vBhia80Nw5B0Nr3SRG0hjQuwP7wy5EuhIhow/I=)
3: g5ka_NRV6xsXT8-J-OEOr39ws1U.crl (hash: r62KZVCjyeMaOPF9xSpRr5TcpPeOHtIfeH5CL9uarUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:35:f8:f5:15:c3:b6:3f:5e:82:20:9a:e3:86:f5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Validity
Not Before: Mar 13 08:00:22 2026 GMT
Not After : Mar 14 08:00:22 2026 GMT
Subject: CN=faf4274d85f85d3ce920c33a5ca57d31258860c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:84:3e:5a:52:b8:10:b3:73:91:95:a4:50:
2a:88:87:87:9b:c7:c9:bd:d2:4c:d0:1d:ce:14:ee:
5e:ec:dd:40:76:75:e4:83:73:5c:69:47:9e:ef:6e:
2d:c5:db:da:cb:b2:90:01:2e:0d:cf:7a:25:67:f4:
91:57:69:7c:1a:3e:18:b1:bb:9e:ea:ea:9f:be:68:
97:07:2d:c3:26:0d:70:57:18:1d:70:95:68:9c:a6:
fd:7e:cc:73:2b:e5:e5:f6:35:25:6d:5f:40:09:d8:
c0:60:58:e3:06:53:fc:68:0b:7e:81:8e:68:46:8c:
af:3a:7b:e8:7a:66:63:d1:f6:00:d0:3e:b8:2d:28:
5d:21:81:6f:48:05:d9:43:f5:d0:3f:71:e7:25:2d:
00:6b:79:41:23:e3:1d:ab:62:3a:6b:d1:94:6f:c2:
27:f8:12:f2:95:60:29:27:b7:08:d4:d2:0b:81:56:
d9:f7:d9:75:61:c2:f8:0b:37:b7:e1:e6:fb:3a:67:
a6:d6:b6:cd:51:ae:ac:3d:72:e0:a2:af:93:a5:58:
86:88:e2:5e:5f:a7:dd:ea:07:5b:1d:61:38:3b:e5:
a4:15:5c:29:b2:d1:5c:ef:c7:d6:11:47:bd:5a:8d:
e2:71:3d:ee:02:26:63:e2:50:63:b0:21:41:59:2d:
ac:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F4:27:4D:85:F8:5D:3C:E9:20:C3:3A:5C:A5:7D:31:25:88:60:C4
X509v3 Authority Key Identifier:
keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:8a:22:59:d4:41:6c:99:ab:61:69:13:cd:fd:0a:a1:45:52:
95:1f:26:73:bc:ce:db:8a:39:73:57:f6:00:eb:ef:c9:8a:2e:
b9:e6:f2:fd:45:e9:07:69:7a:de:9a:f4:26:c4:03:b5:15:21:
47:df:62:31:a6:3e:37:c4:70:10:4d:07:9d:e6:88:ae:ff:74:
bd:18:dd:4e:96:b9:76:69:d3:b9:27:cc:88:4c:8c:f5:02:3a:
7b:87:54:a0:42:ca:6b:0c:36:57:62:f3:b7:80:cb:59:1d:d4:
ec:bb:78:a5:f6:66:00:58:8b:ae:7f:98:80:53:50:25:d9:7f:
7a:ca:e8:cb:b7:29:64:35:5f:d2:a5:d2:cf:b6:2d:f7:c8:d3:
0d:3c:7d:a0:5b:bc:3d:9c:6f:e9:c4:ff:66:a7:ad:eb:1a:61:
bc:a8:ac:96:f5:a8:1b:2d:d7:72:9e:5e:71:ae:36:e4:19:9a:
b1:ba:5b:cd:d3:e7:99:f2:98:c8:1b:de:c0:1f:ee:d2:95:6e:
65:09:1d:de:a8:b2:7d:48:73:76:91:20:99:8d:29:52:01:e0:
8c:1c:8b:b3:5c:e8:f3:de:9b:80:4a:96:b0:71:f8:27:3c:90:
f7:f1:10:5b:04:17:8e:07:98:95:27:0b:fa:ff:ef:6e:d2:36:
9f:58:8d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:58:29 2026 by rpki-client