Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier: sb9GDIun81Nn1N0Lg6ibhcXDz+e8eLBv2om675vIU+o=
Subject key identifier: BA:13:71:DB:88:1C:A5:95:49:79:BB:4E:2A:4C:2A:77:39:88:0B:60
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 019E913830A76178CFEDDA87E9A9AF6FEFDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number: 0CE5
Signing time: Thu 04 Jun 2026 06:00:39 +0000
Manifest this update: Thu 04 Jun 2026 06:00:39 +0000
Manifest next update: Fri 05 Jun 2026 06:00:39 +0000
Files and hashes: 1: 8Et4wRl7tgB_17L9jG6Mdek6xDg.roa (hash: lw3WqGSEoZrvxn7wZkoN4525cvxLItsQZGDX6ZhkS8I=)
2: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: Ui5qK1F7URV530NwOg/fjkX+66h5ifY/1OxQq9dy/Ak=)
3: Gcm3mTulA6LRvNkW38ibYEgtom4.roa (hash: NDdsNqJPO5+KERP1vetA3EoWo8gEcy/Atr+ErCOi2Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:38:30:a7:61:78:cf:ed:da:87:e9:a9:af:6f:ef:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Jun 4 06:00:39 2026 GMT
Not After : Jun 5 06:00:39 2026 GMT
Subject: CN=ba1371db881ca5954979bb4e2a4c2a7739880b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5b:53:4d:b4:7a:da:0b:56:b7:c5:20:53:8f:
5e:05:6f:5b:3c:c1:2a:4c:30:36:13:08:92:d2:6b:
b8:d8:55:ad:0f:5b:c8:87:24:7b:1c:8f:1a:74:78:
c0:af:a8:8e:72:37:7f:e7:05:6e:c5:16:8f:e6:52:
bf:b0:2c:87:fe:6a:a1:cb:f0:18:df:00:1f:1f:13:
50:1c:f0:dc:d8:21:e2:79:68:a2:50:98:a3:35:51:
5d:11:38:c7:d5:7a:09:ba:d7:e1:86:22:9d:2d:cb:
ae:c1:fa:ed:8f:a9:94:5a:c7:b8:53:92:4c:17:ca:
67:71:aa:78:c8:1d:df:ef:82:00:ea:c3:44:b5:ad:
fc:21:16:43:eb:2e:af:bc:cb:0c:e4:0b:d5:73:10:
da:a1:50:c2:0a:5c:9a:b2:da:92:22:5a:53:89:a9:
5d:f6:16:f8:c2:7f:0f:ce:dd:4b:5c:64:58:8b:26:
0c:f4:6e:c0:a0:ed:08:af:01:4f:04:4e:53:15:77:
5c:c5:a0:85:0b:fa:8c:6d:60:0e:dd:36:78:e4:15:
60:a5:e4:30:37:a9:cb:1f:24:17:e7:d2:90:b5:63:
3b:52:07:6b:3e:31:32:9a:fc:28:08:c1:1d:be:e8:
73:3e:bc:bf:2d:f0:90:30:58:a5:0b:10:3b:ac:93:
bc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:13:71:DB:88:1C:A5:95:49:79:BB:4E:2A:4C:2A:77:39:88:0B:60
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:89:cd:5e:20:40:25:3c:4b:18:5a:53:76:e4:e0:34:6b:d9:
c5:8f:23:c2:13:4e:39:94:e0:e5:2b:2f:39:98:05:9b:37:ff:
a4:de:1c:8c:01:9b:8b:2e:c3:1a:9e:4a:a8:f0:a9:9f:8b:b7:
94:96:c3:b4:e7:d0:1e:9e:6d:c8:db:61:b7:0f:5a:7a:5d:e3:
b3:88:50:f5:33:33:7b:36:5c:54:1a:48:50:bc:9b:82:83:de:
c6:69:cf:77:6c:d4:de:dc:81:d2:10:fc:99:46:1a:47:2c:c3:
35:bb:a9:5b:ad:0f:0b:30:7e:c1:fa:e4:b3:1c:84:15:fd:ac:
30:72:ab:f2:c3:50:34:7c:fb:83:49:c0:22:ff:8a:f0:8a:94:
1c:2f:a2:d4:ab:36:6c:9f:33:bf:8d:3d:2c:11:f4:f3:33:01:
c2:90:3d:f3:f8:c3:16:fa:b9:4c:d7:32:cd:59:8c:2d:5d:1d:
26:e3:29:1e:0a:7c:1c:fc:4c:3f:85:38:eb:ac:12:93:27:d6:
62:14:c9:74:0a:47:0d:de:32:ca:1e:dd:f3:20:4f:95:5e:20:
fc:63:e3:d1:35:24:f3:3a:19:67:d1:2b:d6:ea:6d:a4:16:36:
5a:48:b7:2f:64:66:08:b9:26:35:51:b2:d3:19:25:e9:63:8e:
62:3a:42:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:09:31 2026 by rpki-client