Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier: +foxDJ24BihIeLPivfGgllJsP5++1QUdR7yzkPNU1+E=
Subject key identifier: 5D:36:5E:B0:E5:12:1C:7B:14:27:94:E4:CE:FC:A2:F4:3D:AB:68:34
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 01A06E39AA909F2A46D63D4C8E87957FE3B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number: 0DDC
Signing time: Fri 04 Sep 2026 21:01:07 +0000
Manifest this update: Fri 04 Sep 2026 21:01:07 +0000
Manifest next update: Sat 05 Sep 2026 21:01:07 +0000
Files and hashes: 1: 8Et4wRl7tgB_17L9jG6Mdek6xDg.roa (hash: lw3WqGSEoZrvxn7wZkoN4525cvxLItsQZGDX6ZhkS8I=)
2: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: /ISvcrvDWbTgygXOFKYaQy+K+PAyGMcnKj/TLr/hxVo=)
3: Gcm3mTulA6LRvNkW38ibYEgtom4.roa (hash: NDdsNqJPO5+KERP1vetA3EoWo8gEcy/Atr+ErCOi2Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:aa:90:9f:2a:46:d6:3d:4c:8e:87:95:7f:e3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Sep 4 21:01:07 2026 GMT
Not After : Sep 5 21:01:07 2026 GMT
Subject: CN=5d365eb0e5121c7b142794e4cefca2f43dab6834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:c9:98:53:b6:f8:fe:81:f9:2a:36:66:1e:
18:bb:2e:a1:08:c1:52:59:66:83:1a:7d:e6:69:00:
5d:7a:7e:e6:84:a6:ff:18:3d:06:7f:70:e5:06:7b:
55:e7:23:cd:87:6d:26:de:9e:36:83:4c:3d:b5:79:
57:b5:0e:41:cb:eb:e0:ed:08:16:56:1a:c2:87:12:
75:ea:dd:9d:db:34:da:01:66:fb:b5:1d:62:0b:72:
c8:e2:86:ed:c6:47:75:01:8f:a0:ba:d0:b6:f7:98:
16:72:18:89:f7:19:4b:22:71:64:72:7b:b5:3c:1b:
7c:b4:3e:2a:e2:a4:46:28:f8:5d:22:25:96:03:ef:
1e:96:0e:49:7a:f9:ea:60:ef:c6:43:2b:be:55:15:
e6:2c:c7:8f:24:a0:5b:fd:93:74:00:49:be:90:dd:
d6:80:96:30:c6:a6:4d:4a:1b:e6:83:c3:38:a0:74:
ed:b1:fe:b9:a5:49:cd:da:16:3c:f9:ea:c7:7c:3e:
86:be:75:19:71:bb:80:b0:ba:da:6c:b3:ea:20:ed:
1f:88:fe:83:8b:f4:2e:f3:9a:8e:80:f0:18:90:ed:
31:6a:12:24:b1:52:01:92:8c:ac:48:bc:67:7e:ec:
be:85:30:ef:75:64:15:83:e2:6b:8a:64:6e:e9:23:
cf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:36:5E:B0:E5:12:1C:7B:14:27:94:E4:CE:FC:A2:F4:3D:AB:68:34
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f5:f0:f3:86:f7:75:a3:cd:d7:ee:5f:de:c3:ee:d1:1c:76:
43:7e:de:67:dd:50:fb:40:35:cb:80:12:37:21:c0:bd:e0:ba:
d2:f1:33:39:bb:0f:1d:9f:92:a4:fd:ce:01:19:e4:5b:1d:af:
1e:92:bf:2f:ea:6d:4a:dd:f9:a9:12:48:53:12:f6:33:b0:41:
57:fa:22:e8:5a:83:91:75:76:4b:e8:b0:f4:1d:ce:35:2a:df:
36:61:c5:ee:56:ff:1c:b9:2d:bf:5a:12:51:4a:c0:98:ea:af:
b6:81:43:09:d5:d6:b3:cd:25:60:35:71:fe:bc:e7:6e:10:c4:
b6:1b:68:2f:cf:3b:3a:6a:75:c9:fb:cb:de:14:f4:e1:3f:50:
21:81:d7:ec:ca:59:13:9e:63:2d:96:a2:4a:d0:1b:60:b7:b7:
eb:70:0f:06:cd:4c:33:d2:ff:fc:08:89:26:38:5b:a5:bd:c2:
ce:77:c7:d3:cd:4c:6f:23:d8:ab:bf:65:6f:4d:c6:d5:02:13:
dc:d0:f5:16:fe:6f:ef:59:9c:49:9f:40:ff:a2:7e:69:da:e8:
30:1b:99:99:bb:12:ce:bf:09:e7:81:4b:9c:81:24:c8:fa:cc:
92:32:cc:14:b9:2e:ec:53:d0:6d:7c:7a:06:40:e1:40:af:e1:
4d:da:c1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:24:20 2026 by rpki-client