Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier: DlWO47CHmCLo2LT+DQCDQM0bt1a0OSIXOQSmxUanntA=
Subject key identifier: 0A:24:F9:EE:B0:9C:C7:22:0C:C4:50:84:9F:56:85:B5:0E:5B:F2:93
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 019D37892EFED2672CF6EEEF4D1CEF272ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number: 0C32
Signing time: Sun 29 Mar 2026 03:00:30 +0000
Manifest this update: Sun 29 Mar 2026 03:00:30 +0000
Manifest next update: Mon 30 Mar 2026 03:00:30 +0000
Files and hashes: 1: 8Et4wRl7tgB_17L9jG6Mdek6xDg.roa (hash: lw3WqGSEoZrvxn7wZkoN4525cvxLItsQZGDX6ZhkS8I=)
2: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: f60pNj/tVUOpCCnhVWlH3Fh/Y1mLN+faIeyNOTqtcGo=)
3: Gcm3mTulA6LRvNkW38ibYEgtom4.roa (hash: NDdsNqJPO5+KERP1vetA3EoWo8gEcy/Atr+ErCOi2Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:2e:fe:d2:67:2c:f6:ee:ef:4d:1c:ef:27:2e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Mar 29 03:00:30 2026 GMT
Not After : Mar 30 03:00:30 2026 GMT
Subject: CN=0a24f9eeb09cc7220cc450849f5685b50e5bf293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:e1:ec:b5:c7:c6:5e:5f:70:d3:e7:b8:16:
e9:e1:c6:36:0e:ae:63:fa:93:a1:c6:22:05:62:c3:
a9:ae:7d:87:a4:ec:f9:ea:ac:ce:a8:a2:78:cf:ba:
88:0a:2e:cb:b1:0f:f1:a0:f7:90:71:6c:f6:14:71:
b3:e3:97:b1:62:f0:90:85:14:df:24:de:74:35:8e:
4e:ba:fa:0b:1b:aa:04:03:35:9e:38:bc:15:95:2e:
67:c5:25:5c:30:62:fc:e5:11:31:cb:62:5c:28:ec:
f0:2d:ec:ec:58:6f:cf:a5:28:f3:cc:38:7f:1c:2a:
a3:81:d1:5b:b1:de:a6:a6:b4:43:c4:f9:a6:2e:47:
6e:b0:c3:92:2e:86:e2:81:b5:3b:7b:08:eb:8e:b7:
3c:d7:8e:c2:fb:6b:47:bc:d0:60:d9:0c:6b:69:b8:
bc:c0:f4:97:0b:72:7a:77:4e:fa:bd:67:48:7f:c4:
21:47:79:69:de:c7:d3:8b:43:3c:f8:18:0e:9d:e1:
96:ee:d7:e1:56:f9:7c:99:92:25:c6:1a:17:c7:67:
8b:5b:cb:ff:73:12:53:b5:78:60:e8:bd:ee:c2:72:
4b:53:fc:ce:e5:1c:62:fd:55:97:35:85:b8:b6:3b:
8e:08:f2:5e:f2:db:f8:b9:69:51:89:fc:d2:90:f4:
11:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:24:F9:EE:B0:9C:C7:22:0C:C4:50:84:9F:56:85:B5:0E:5B:F2:93
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c1:d7:68:47:7b:77:63:ac:21:4a:4d:43:6d:55:31:53:3b:
32:dd:6c:00:9a:85:d0:cc:20:3e:46:b7:27:6e:0b:c3:74:1f:
77:70:0b:dd:9a:c9:ea:d3:bf:66:38:34:d1:c5:6d:22:13:a6:
e4:14:c1:37:74:d7:f6:99:65:10:a0:69:37:f3:1b:db:ff:c1:
fd:0e:88:c9:60:14:a1:4b:47:e0:b2:37:aa:93:0a:b9:79:35:
00:5e:f6:a7:91:ae:f1:a1:3a:d7:a5:4e:ef:fa:9c:f0:78:14:
bf:fa:eb:c8:07:4e:a2:80:fd:04:16:d7:4e:ba:94:e1:db:40:
3e:1e:57:ae:c4:5e:0c:6b:4c:ba:15:50:ee:28:e8:63:b5:4a:
29:97:fe:be:6f:95:a0:f2:5e:45:aa:80:30:91:6e:64:e7:f9:
d3:db:08:f1:bf:8b:ce:4f:97:23:53:62:63:78:d7:22:1b:54:
87:fd:6f:d6:12:72:0f:69:cb:05:46:bd:b9:8c:79:40:2f:6d:
fb:39:36:b6:33:49:b3:cf:59:fa:2a:7e:2d:8a:61:2b:eb:dc:
b8:60:19:ed:c4:d2:bb:7a:ca:61:51:b1:fc:5b:3d:5c:57:6e:
f9:2c:d4:bc:f3:33:7b:c8:0f:b1:79:d9:8d:13:ff:85:f0:fe:
88:0a:ca:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iS7+0mcs9u7vTRzvJy7LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZjI2ODE3NWM1YTA5YTdhZmQwZDg3ODUxODI0ZTFkYjcz
ZjdlN2IwHhcNMjYwMzI5MDMwMDMwWhcNMjYwMzMwMDMwMDMwWjAzMTEwLwYDVQQD
EygwYTI0ZjllZWIwOWNjNzIyMGNjNDUwODQ5ZjU2ODViNTBlNWJmMjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZXh7LXHxl5fcNPnuBbp4cY2Dq5j
+pOhxiIFYsOprn2HpOz56qzOqKJ4z7qICi7LsQ/xoPeQcWz2FHGz45exYvCQhRTf
JN50NY5OuvoLG6oEAzWeOLwVlS5nxSVcMGL85RExy2JcKOzwLezsWG/PpSjzzDh/
HCqjgdFbsd6mprRDxPmmLkdusMOSLobigbU7ewjrjrc8147C+2tHvNBg2Qxrabi8
wPSXC3J6d076vWdIf8QhR3lp3sfTi0M8+BgOneGW7tfhVvl8mZIlxhoXx2eLW8v/
cxJTtXhg6L3uwnJLU/zO5Rxi/VWXNYW4tjuOCPJe8tv4uWlRifzSkPQRUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAok+e6wnMciDMRQhJ9WhbUOW/KTMB8GA1UdIwQY
MBaAFBvyaBdcWgmnr9DYeFGCTh23P357MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82NjY1MGEtNTk4YS00Mzg5LTk0MWYt
NTM0YjhjZDY1MmU5LzEvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82NjY1MGEtNTk4YS00Mzg5LTk0MWYtNTM0YjhjZDY1MmU5
LzEvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8HXaEd7
d2OsIUpNQ21VMVM7Mt1sAJqF0MwgPka3J24Lw3Qfd3AL3ZrJ6tO/Zjg00cVtIhOm
5BTBN3TX9pllEKBpN/Mb2//B/Q6IyWAUoUtH4LI3qpMKuXk1AF72p5Gu8aE616VO
7/qc8HgUv/rryAdOooD9BBbXTrqU4dtAPh5XrsReDGtMuhVQ7ijoY7VKKZf+vm+V
oPJeRaqAMJFuZOf509sI8b+Lzk+XI1NiY3jXIhtUh/1v1hJyD2nLBUa9uYx5QC9t
+zk2tjNJs89Z+ip+LYphK+vcuGAZ7cTSu3rKYVGx/Fs9XFdu+SzUvPMze8gPsXnZ
jRP/hfD+iArKTw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:42 2026 by rpki-client