Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier: QMHtG/NE4YnFJyJBJhI39QRnnsvMnSh6UViiq9KCgAY=
Subject key identifier: 6C:D0:6B:7C:41:19:09:A0:48:BF:00:5B:A3:42:4E:D7:AD:3D:A2:05
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 019F848CD60092B11161377E2EC871179CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number: 0D63
Signing time: Tue 21 Jul 2026 12:00:50 +0000
Manifest this update: Tue 21 Jul 2026 12:00:50 +0000
Manifest next update: Wed 22 Jul 2026 12:00:50 +0000
Files and hashes: 1: 8Et4wRl7tgB_17L9jG6Mdek6xDg.roa (hash: lw3WqGSEoZrvxn7wZkoN4525cvxLItsQZGDX6ZhkS8I=)
2: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: anG/8wP7UQlCKE2gq9r/QJIQuuia2J8InwXEeb3SGgo=)
3: Gcm3mTulA6LRvNkW38ibYEgtom4.roa (hash: NDdsNqJPO5+KERP1vetA3EoWo8gEcy/Atr+ErCOi2Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8c:d6:00:92:b1:11:61:37:7e:2e:c8:71:17:9c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Jul 21 12:00:50 2026 GMT
Not After : Jul 22 12:00:50 2026 GMT
Subject: CN=6cd06b7c411909a048bf005ba3424ed7ad3da205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:db:b3:d8:a7:44:79:bd:71:c3:dd:13:f6:
58:36:4c:d0:a0:00:57:07:9a:1d:84:16:e2:42:db:
70:c6:72:e9:ca:81:0f:b5:c5:9f:21:1f:a7:9e:02:
af:37:b8:b4:47:4a:ec:47:50:e8:8c:2d:38:71:3d:
4f:93:dd:12:77:ff:fb:6b:40:1b:b6:6c:20:4a:7b:
5a:4d:27:7b:73:85:72:a7:d0:d5:ed:bd:87:01:c3:
16:13:6e:9c:bd:70:94:11:4d:c4:ee:a6:76:5c:bb:
3c:ed:fc:a5:52:b0:de:eb:60:d3:19:59:01:a1:65:
9c:ce:38:1f:4d:e7:33:7c:cb:60:3c:0a:f9:0e:bf:
56:97:74:65:e5:0e:b8:3d:06:a3:ba:34:72:0f:7a:
d5:6b:9b:c5:49:7d:5e:cf:d0:83:3f:f8:d0:63:d9:
43:43:5e:e3:9e:02:95:36:c8:a5:82:9a:31:e1:55:
e1:c3:cf:41:a5:9e:79:99:23:16:11:46:eb:95:8a:
d2:12:f7:91:84:d5:ca:d6:c1:c8:5a:cb:8f:30:e6:
cf:92:aa:ea:c4:12:1a:6b:5c:3b:9a:24:5b:46:7f:
77:2d:09:84:b9:41:7e:b0:ad:b8:1f:93:b3:49:54:
c5:01:23:de:f1:2e:1b:90:70:1a:87:94:44:0c:e4:
3c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D0:6B:7C:41:19:09:A0:48:BF:00:5B:A3:42:4E:D7:AD:3D:A2:05
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f5:82:4e:ef:b4:46:f0:a5:f0:8e:92:dd:9f:1c:19:17:19:
4e:98:71:96:b1:eb:45:03:55:88:5c:41:32:96:94:7d:47:af:
72:f9:f2:6a:e2:ed:d3:5b:83:a5:79:26:ec:5b:8e:52:35:af:
42:72:5f:be:15:ab:a6:68:30:79:df:a3:f6:35:76:10:d1:ab:
04:12:71:38:76:00:61:42:ad:b2:19:af:ae:19:e7:e6:a1:f2:
f1:73:fa:02:8d:b8:87:5c:a4:92:9a:95:bf:ea:23:66:73:f4:
bb:c6:d8:ba:9d:8f:d6:94:6b:0f:a9:1d:35:79:8c:c8:99:d4:
9f:be:cc:e5:46:0a:5e:e8:1c:86:1c:45:e2:a7:59:19:ce:bf:
e3:30:9c:e0:54:4b:1f:08:90:54:bf:e6:9d:92:f4:a1:f4:60:
b6:61:85:5c:50:3c:14:d2:02:b7:e8:8f:98:1d:ca:de:80:0e:
20:c5:8f:93:a1:38:5d:fa:11:b0:7f:3c:d9:a6:4d:c5:12:0a:
a6:67:bc:7e:05:06:a7:77:50:f6:b4:88:08:b8:77:8c:51:bc:
53:59:99:d0:92:fe:a3:25:1a:92:88:43:5d:33:e4:31:70:a7:
b4:5f:d1:cb:ba:47:27:04:78:57:9e:79:6e:04:35:14:69:53:
25:6b:b5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:04:28 2026 by rpki-client