
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
File: g5ka_NRV6xsXT8-J-OEOr39ws1U.mft (raw, json)
Hash identifier: QWqgHo85J7v/3bLB55ZsUQocQzckMX2cNiIOw/ir1dM=
Subject key identifier: AF:F4:DD:E2:85:19:EA:9A:ED:8F:F0:9B:03:4A:70:C3:58:2F:6D:DC
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Certificate issuer: /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial: 019EBF5AA746007D27D09FF41FD7740945D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
Manifest number: 197A
Signing time: Sat 13 Jun 2026 05:00:49 +0000
Manifest this update: Sat 13 Jun 2026 05:00:49 +0000
Manifest next update: Sun 14 Jun 2026 05:00:49 +0000
Files and hashes: 1: 4XlWrcpKp73JmNE_TYGdFMer_68.roa (hash: iFFQ7ZGIoYm0QNTEQ9/1dEJrXHo9YkBhgDXfPankBQU=)
2: VrXhIxke9Eng6wFk89X_01h58ek.roa (hash: Z3OA/vBhia80Nw5B0Nr3SRG0hjQuwP7wy5EuhIhow/I=)
3: g5ka_NRV6xsXT8-J-OEOr39ws1U.crl (hash: bYUgF/7Rxadq0jYFBR9KHJnoSUE652dBS0vB6rfqcl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:a7:46:00:7d:27:d0:9f:f4:1f:d7:74:09:45:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Validity
Not Before: Jun 13 05:00:49 2026 GMT
Not After : Jun 14 05:00:49 2026 GMT
Subject: CN=aff4dde28519ea9aed8ff09b034a70c3582f6ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:db:aa:f9:05:e4:f1:fa:37:6e:50:fd:d7:
ba:2e:3a:ed:0f:b9:d6:c5:ae:99:f7:fc:b7:5e:81:
96:e2:85:81:e0:e3:0d:1e:92:70:b2:06:87:98:65:
26:8c:06:dd:58:ce:78:8a:56:5c:b9:3a:07:92:22:
57:4b:43:f5:41:4f:82:d8:89:4f:08:91:77:a9:60:
bc:10:13:0b:58:5d:78:b0:09:36:21:de:8e:30:0f:
62:ab:f9:a5:62:88:6c:d1:54:8b:3c:54:ca:82:a3:
24:1f:da:9a:a0:51:c9:66:3f:7e:b9:30:88:f2:d8:
5a:47:99:f9:27:ed:b1:48:d0:32:5b:1f:ee:da:72:
bf:54:57:3a:cb:06:6a:9d:31:db:e7:b0:09:4a:12:
fd:be:16:c7:cb:91:a8:7f:91:08:43:e6:74:7c:61:
45:4f:a2:3e:d9:1e:69:68:92:78:1d:5b:c8:05:14:
93:4a:01:7e:fe:b3:3f:c0:8e:19:75:c5:83:81:fe:
78:4e:42:59:0f:d3:51:3d:db:c1:5b:e8:26:c2:05:
d1:ed:e4:40:89:98:4f:86:8c:47:c0:ed:4f:fa:9e:
1d:a1:5e:7b:a1:16:4a:fb:25:5c:51:c5:e8:b6:bb:
24:68:2b:91:2a:09:ff:ff:b7:75:57:d9:9b:88:0e:
08:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F4:DD:E2:85:19:EA:9A:ED:8F:F0:9B:03:4A:70:C3:58:2F:6D:DC
X509v3 Authority Key Identifier:
keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8f:a3:7a:0e:91:42:1f:a7:6e:01:4c:c4:90:db:64:21:da:
f9:3f:66:c6:09:20:a9:6b:21:5b:91:5c:a3:b7:d5:1f:e4:ca:
20:c1:a7:d2:14:0d:8a:a7:2a:8f:18:0c:32:eb:19:d8:df:ba:
2f:66:82:4a:5e:9e:dc:cd:87:6b:98:c3:e5:53:a8:2a:eb:06:
9b:b1:8d:b3:d2:a5:5e:ad:82:55:57:dd:b9:26:1c:34:8f:10:
62:54:d9:8a:f1:e0:d3:6e:44:c9:91:72:a1:b8:67:f9:17:bc:
27:4b:96:29:49:92:cc:f3:3c:eb:39:30:d8:3d:0b:f7:9f:52:
c6:0b:15:16:f6:07:01:3e:68:0e:54:a4:75:35:17:3b:e4:55:
16:ce:f9:94:a2:6e:e1:2c:2e:66:25:ba:37:46:34:41:6b:39:
45:3b:a7:27:cc:7c:3e:ef:49:35:93:7e:77:92:4c:3e:c6:15:
57:2f:e7:b1:00:3f:bd:2f:8a:3e:5a:99:1f:d8:eb:fc:d8:cd:
17:e0:f4:f3:e6:9c:f5:76:ba:6b:70:fa:6e:9b:c1:95:8f:15:
00:f0:2f:05:1a:8c:99:6e:53:47:1c:82:8f:f7:b5:03:da:4d:
32:ea:09:47:9d:f9:f5:2b:49:df:eb:bf:eb:f6:5c:94:74:b7:
aa:97:bf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:32:55 2026 by rpki-client