Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
File: g5ka_NRV6xsXT8-J-OEOr39ws1U.mft (raw, json)
Hash identifier: Ib+WCLGjkeGQz0Xq4lM1u7KsGJ/nYKvhn/I2rTyQgSY=
Subject key identifier: FD:E8:AD:A3:8B:4B:D9:37:97:B5:FD:94:E1:D8:02:22:25:4F:10:A1
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Certificate issuer: /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial: 019D99CFC944E74411EA9D0DD33022D21F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
Manifest number: 18E2
Signing time: Fri 17 Apr 2026 05:00:24 +0000
Manifest this update: Fri 17 Apr 2026 05:00:24 +0000
Manifest next update: Sat 18 Apr 2026 05:00:24 +0000
Files and hashes: 1: 4XlWrcpKp73JmNE_TYGdFMer_68.roa (hash: iFFQ7ZGIoYm0QNTEQ9/1dEJrXHo9YkBhgDXfPankBQU=)
2: VrXhIxke9Eng6wFk89X_01h58ek.roa (hash: Z3OA/vBhia80Nw5B0Nr3SRG0hjQuwP7wy5EuhIhow/I=)
3: g5ka_NRV6xsXT8-J-OEOr39ws1U.crl (hash: 2oqwH3bHmONenFCTqjVDgQk5TbQ7iASBJVEZfGdBcCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:c9:44:e7:44:11:ea:9d:0d:d3:30:22:d2:1f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Validity
Not Before: Apr 17 05:00:24 2026 GMT
Not After : Apr 18 05:00:24 2026 GMT
Subject: CN=fde8ada38b4bd93797b5fd94e1d80222254f10a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:74:5f:ad:d2:6f:d6:94:0c:1a:01:32:ba:25:
84:98:a6:91:a4:65:85:f5:65:bb:c0:2b:28:a7:3b:
52:7b:c7:7f:20:03:17:c5:f4:a0:b4:23:48:27:f6:
a3:72:4c:7a:6d:e3:81:06:f2:d3:d2:9f:30:b4:5c:
5b:72:8b:ea:41:e3:12:f7:a6:fb:dc:ca:01:b4:ef:
a9:0b:e4:06:ba:ae:34:7c:e8:6f:3f:8a:69:8f:6e:
ee:2c:6f:97:80:c1:a7:bd:dd:b2:71:ef:57:73:dd:
ba:52:5e:98:7f:ad:9a:4d:55:de:ce:b7:16:d6:c8:
60:70:9c:e4:3f:75:55:e9:7f:e2:18:ba:13:76:82:
dc:ca:81:6c:52:14:20:ce:c3:d8:8a:b8:d6:8d:3a:
a4:ed:e9:56:c1:2b:9f:72:59:09:a6:e7:c8:5f:71:
9e:84:67:63:93:b2:35:1d:32:db:ec:09:4c:2d:9f:
c9:dc:1f:78:f1:a6:eb:12:b3:04:8d:fc:2c:dd:2d:
fb:a7:12:e4:f4:83:f5:b4:65:3a:0a:be:5d:01:2d:
d3:9d:3d:b6:d4:a1:cb:ea:b3:6b:94:3c:72:55:6a:
68:8c:b9:c5:82:75:41:74:ff:07:b0:03:2e:62:41:
32:dd:71:de:79:c6:85:a7:41:02:93:17:fc:12:0f:
32:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E8:AD:A3:8B:4B:D9:37:97:B5:FD:94:E1:D8:02:22:25:4F:10:A1
X509v3 Authority Key Identifier:
keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:58:f5:cd:da:1b:a1:d0:93:d7:3d:75:d3:c9:3a:69:cc:91:
54:3d:ba:39:55:e3:1f:23:1f:90:70:fc:91:20:eb:88:0e:a7:
4a:d9:99:df:5c:35:61:78:ae:7b:cf:4f:c2:d9:6c:e7:dd:99:
b9:5a:5f:3c:ab:a4:50:46:e8:f1:86:bd:40:1f:49:04:6e:62:
68:ec:40:ec:08:2b:a1:e4:cd:78:f9:81:05:c6:e4:cc:bc:73:
4a:59:5d:28:38:ec:ca:dd:d7:ec:66:39:4d:b7:25:33:d2:e5:
9b:58:03:ad:b2:1f:5f:60:40:b5:7f:44:ce:71:82:60:2b:68:
a3:89:15:05:99:94:64:e4:4d:ed:d4:2b:a2:c7:7c:e5:66:3c:
77:46:19:a8:0e:4b:0b:71:71:2f:42:c7:0d:4a:2f:f1:b6:b7:
ed:bb:8f:3d:8c:1b:e7:aa:30:93:fb:1d:54:03:67:83:09:a4:
d8:03:21:a9:d4:43:65:d6:ab:e9:14:9d:c5:2e:6e:99:de:fc:
a2:5c:fa:e2:22:8b:e4:bd:c1:0a:4c:aa:57:5d:59:55:43:16:
51:b5:c5:91:b4:b2:72:61:85:1c:a5:bf:78:e0:54:d4:a8:b8:
bd:65:45:8d:4f:77:53:72:24:cc:7c:67:6f:ab:62:09:34:a3:
70:d8:2d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:48:30 2026 by rpki-client