Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier: VXnWt5wEq2lI/xvOXkYtjONbaHOthkTvYcFQb+WjD0k=
Subject key identifier: D9:76:4D:51:70:0B:E1:50:0A:C4:18:99:98:AF:EF:E7:10:A4:11:85
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 01A1656B36E4792A53E11478B76EB3581339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number: 0E5C
Signing time: Thu 22 Oct 2026 21:01:27 +0000
Manifest this update: Thu 22 Oct 2026 21:01:27 +0000
Manifest next update: Fri 23 Oct 2026 21:01:27 +0000
Files and hashes: 1: 8Et4wRl7tgB_17L9jG6Mdek6xDg.roa (hash: lw3WqGSEoZrvxn7wZkoN4525cvxLItsQZGDX6ZhkS8I=)
2: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: Jm1joVoG2r9/wgOPGzFeFXkIwjCSBnCTNsJZgIgwvPE=)
3: Gcm3mTulA6LRvNkW38ibYEgtom4.roa (hash: NDdsNqJPO5+KERP1vetA3EoWo8gEcy/Atr+ErCOi2Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:6b:36:e4:79:2a:53:e1:14:78:b7:6e:b3:58:13:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Oct 22 21:01:27 2026 GMT
Not After : Oct 23 21:01:27 2026 GMT
Subject: CN=d9764d51700be1500ac4189998afefe710a41185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5e:23:f3:c6:10:af:49:da:9a:38:0f:e8:77:
dc:7f:49:1d:50:f9:6d:ee:74:8d:ef:fa:54:97:9a:
09:45:b3:d5:38:54:7e:fa:02:26:f6:5c:8a:cf:8e:
85:71:25:58:b7:e2:52:ec:d1:18:a8:4e:d8:cf:02:
15:ae:85:f6:10:c0:78:8b:92:9f:87:50:5c:2f:a2:
1a:54:33:db:2d:ad:cf:51:3c:97:cc:5e:2e:d1:90:
33:f0:21:44:b4:f2:df:96:77:be:a1:39:77:b0:e6:
99:e1:41:1d:84:ac:49:72:e8:29:54:d1:f6:fd:2c:
f8:2e:34:5a:29:24:9d:fa:9c:a0:52:b5:53:43:1a:
1e:00:6f:75:d3:80:8d:5d:d4:1c:19:42:39:41:97:
3c:fa:57:59:84:6e:60:84:74:78:5d:92:0b:87:ac:
1f:a7:7a:ba:41:25:7f:b1:93:4f:31:17:40:db:f3:
20:c5:66:2d:77:9c:c8:46:1d:fc:7a:08:ec:b9:fe:
a6:c6:4b:a0:bf:c9:9f:d0:46:66:2a:fa:60:39:42:
1e:b5:ff:7e:ec:73:83:64:d5:90:15:9a:89:01:6f:
e7:51:a2:d2:97:3d:74:b5:58:91:81:8e:fb:7e:76:
a3:f2:57:86:d9:ac:9a:2e:bc:ab:60:3a:06:55:a2:
aa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:76:4D:51:70:0B:E1:50:0A:C4:18:99:98:AF:EF:E7:10:A4:11:85
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:23:1e:ab:2e:f8:87:5c:1f:a7:83:a6:fe:98:4b:c8:25:21:
12:01:df:20:05:da:a6:9e:5a:36:f8:90:2c:69:0d:b5:0b:94:
32:ae:77:92:e5:d0:a3:9b:f9:c3:03:24:4d:01:86:78:45:ac:
6a:87:52:b5:d7:f5:a0:f2:03:a1:dd:ce:4b:75:cb:27:69:9e:
e0:81:ff:d4:b2:08:d7:d7:8d:ab:4a:12:a9:a0:28:36:1b:5c:
f1:4a:44:91:3d:03:1d:a1:a0:cd:ab:21:25:b7:d4:ad:72:2c:
72:00:99:a7:a9:5b:34:e7:8d:1f:af:60:48:93:75:de:eb:36:
77:a4:09:7f:a6:64:7b:44:38:ed:fe:c9:20:45:f1:f2:e8:8e:
cc:17:89:4c:49:46:d2:c2:c5:50:a1:94:34:88:3f:ef:a6:24:
aa:94:38:19:a0:9d:7a:ca:85:c2:09:6a:a9:ca:0e:65:62:94:
91:24:b9:10:05:67:49:d2:83:40:fb:fe:bd:da:20:95:70:e8:
9f:5a:2c:43:e4:b6:06:73:7a:1f:e0:0b:ea:ac:fb:f0:f0:aa:
e1:f6:87:89:2f:61:71:f5:c0:30:e2:3f:0d:9b:7f:ef:b4:ac:
bc:56:ad:12:8a:4a:61:9d:4a:3c:41:20:9e:88:a7:f6:aa:2c:
94:a7:1a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:37:26 2026 by rpki-client