Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
File: g5ka_NRV6xsXT8-J-OEOr39ws1U.mft (raw, json)
Hash identifier: bt1Asf4R7PTuIffdx42fBL/gia3mc6Qx2UFQzLt6lIc=
Subject key identifier: 07:A5:26:B8:E3:AC:68:0B:D4:72:D4:5C:0C:F9:9F:AB:84:A5:0E:25
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Certificate issuer: /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial: 019CAA591A9D04A95A4235130D957D30F0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
Manifest number: 1866
Signing time: Sun 01 Mar 2026 17:01:32 +0000
Manifest this update: Sun 01 Mar 2026 17:01:32 +0000
Manifest next update: Mon 02 Mar 2026 17:01:32 +0000
Files and hashes: 1: 4XlWrcpKp73JmNE_TYGdFMer_68.roa (hash: iFFQ7ZGIoYm0QNTEQ9/1dEJrXHo9YkBhgDXfPankBQU=)
2: VrXhIxke9Eng6wFk89X_01h58ek.roa (hash: Z3OA/vBhia80Nw5B0Nr3SRG0hjQuwP7wy5EuhIhow/I=)
3: g5ka_NRV6xsXT8-J-OEOr39ws1U.crl (hash: vEup9xtO58E1GR6JtAKIfABdqZNPHj7p4eVeilf86Zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:1a:9d:04:a9:5a:42:35:13:0d:95:7d:30:f0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Validity
Not Before: Mar 1 17:01:32 2026 GMT
Not After : Mar 2 17:01:32 2026 GMT
Subject: CN=07a526b8e3ac680bd472d45c0cf99fab84a50e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bb:1f:7c:99:a2:2b:c1:f0:6f:86:5d:36:14:
92:cf:0e:03:43:df:dd:14:42:c2:52:da:d1:98:c8:
b5:62:3b:43:d9:e3:6f:31:a3:2d:2f:f0:92:42:8d:
13:82:f9:21:0f:0d:ae:c8:fa:eb:51:54:99:77:16:
3c:03:7a:ce:0b:5d:d3:e9:4c:84:e0:59:64:7f:3e:
ca:bc:e5:f1:be:a5:bc:72:aa:b0:a3:87:11:d7:9c:
98:88:bb:e6:5c:7d:85:d8:bd:cc:0a:70:30:7c:d4:
13:b1:6f:75:18:8e:3e:b0:a2:d3:11:8b:20:06:a3:
88:44:66:1c:0d:d2:0c:34:83:2a:2b:9e:1e:e5:ef:
83:11:17:05:63:f2:ee:70:35:3f:c9:a9:7e:75:b2:
8b:35:96:00:cc:fa:85:db:af:7f:cd:c6:9b:6a:29:
24:d9:27:91:08:a9:1f:65:68:5a:3a:99:9d:60:fe:
2f:26:d1:b3:d0:9a:b4:e5:77:f2:b9:b1:c4:84:41:
88:9e:b8:4c:54:c6:57:1c:0b:f0:46:8d:81:19:83:
23:ce:d0:84:fa:ce:86:0e:9e:d5:f9:12:a8:1a:35:
87:2d:b5:51:ce:87:5d:21:f4:10:e9:0c:75:56:57:
a7:6f:dc:d6:ac:69:3f:da:89:94:99:67:52:b1:1a:
6b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A5:26:B8:E3:AC:68:0B:D4:72:D4:5C:0C:F9:9F:AB:84:A5:0E:25
X509v3 Authority Key Identifier:
keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:92:3a:f0:9c:02:03:05:d6:0e:3e:b5:76:66:c5:17:08:c4:
76:ef:8c:4b:89:c4:40:34:f5:2f:3b:43:e8:98:79:1f:da:9b:
7c:28:f7:f0:0b:e1:c0:3b:97:8e:ce:d4:aa:d3:a6:53:ab:0b:
aa:78:03:79:89:21:bc:30:88:9f:bd:d2:09:8b:e3:bf:09:df:
3f:03:75:c0:e6:af:0f:e4:a0:5b:40:88:91:86:a5:04:0c:de:
c9:ea:41:f7:2e:de:fc:71:ea:7e:3c:da:6e:af:75:f3:0d:ae:
cc:fa:ca:cc:a9:08:61:f9:67:9c:75:7a:ba:a2:7f:91:94:2a:
f2:64:d1:61:f9:f0:80:b3:d0:70:68:f2:da:cb:0e:46:3a:d8:
22:c4:96:fd:ca:39:9e:c9:10:5d:0d:38:ea:9b:32:ad:ea:6f:
ee:88:a7:fe:99:49:fa:9b:86:9e:f9:3d:18:cb:2f:58:cc:62:
0e:c7:e7:6a:7e:76:7f:47:1f:5b:08:29:35:80:a0:52:d8:94:
93:ac:e2:6f:ae:5d:01:63:36:51:4c:30:01:78:53:b7:28:be:
03:f9:11:b0:9b:fb:38:33:b4:02:01:21:ae:c7:bb:d6:cb:cc:
1e:28:0c:80:ea:e7:26:3e:5a:54:25:b8:bc:b1:0b:48:26:b6:
1e:af:62:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:50 2026 by rpki-client