Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier: FIiiNz4LhBUDQ4uRUwbsmMNAAkxoi/bpmjLrBIuSalE=
Subject key identifier: 8C:3F:C6:A7:BF:4F:9E:3E:CD:6E:FD:06:54:4A:A7:5D:33:DB:44:5F
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 019CAA8FC002A25D1D2D3353C26C59C24230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number: 0BE9
Signing time: Sun 01 Mar 2026 18:01:13 +0000
Manifest this update: Sun 01 Mar 2026 18:01:13 +0000
Manifest next update: Mon 02 Mar 2026 18:01:13 +0000
Files and hashes: 1: 8Et4wRl7tgB_17L9jG6Mdek6xDg.roa (hash: lw3WqGSEoZrvxn7wZkoN4525cvxLItsQZGDX6ZhkS8I=)
2: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: 1EInVsrjipKNe4RqyzlpbusIoxV5ggg77i2uFlLF76g=)
3: Gcm3mTulA6LRvNkW38ibYEgtom4.roa (hash: NDdsNqJPO5+KERP1vetA3EoWo8gEcy/Atr+ErCOi2Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:c0:02:a2:5d:1d:2d:33:53:c2:6c:59:c2:42:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Mar 1 18:01:13 2026 GMT
Not After : Mar 2 18:01:13 2026 GMT
Subject: CN=8c3fc6a7bf4f9e3ecd6efd06544aa75d33db445f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:59:f4:f6:bd:33:c2:4e:e5:4d:7c:06:a5:
47:b3:34:1b:e8:76:10:a6:57:57:59:68:63:26:43:
66:75:99:09:66:c4:82:b3:00:64:39:cc:b7:f6:f8:
65:9a:0c:6d:73:f1:1d:89:0c:58:c2:54:d5:40:d1:
5f:a0:00:af:80:fa:a3:0d:7d:8d:fd:06:f3:e7:c2:
dd:54:ed:03:b0:1c:e7:a8:a7:02:a7:32:29:bc:fb:
88:31:30:39:5a:5a:1d:89:2b:58:38:83:50:e1:1e:
e5:e7:b2:f4:b0:ab:58:e9:07:f4:2c:ce:e1:4b:01:
85:1e:5a:be:32:62:92:77:24:f8:cc:14:64:87:64:
b5:d8:0f:83:1d:bb:e7:42:dc:fc:02:87:cb:5c:77:
af:d2:ab:d3:26:fc:d6:fd:cb:24:bb:ea:34:db:ba:
9d:74:6c:93:2e:9a:fd:d1:a5:ae:30:14:e3:22:b4:
e0:61:78:09:22:23:bc:7a:1a:1a:c5:7a:30:8f:8d:
9c:bf:0f:3e:d5:d8:44:b1:31:9b:32:8f:2b:1d:4e:
37:c8:34:0f:11:95:bd:77:4e:9f:98:c2:d4:5f:f3:
66:5d:42:70:00:2f:e0:e0:74:94:cd:dc:c1:23:12:
c0:64:65:b5:50:ad:46:14:6f:42:c2:d8:92:9b:0c:
21:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3F:C6:A7:BF:4F:9E:3E:CD:6E:FD:06:54:4A:A7:5D:33:DB:44:5F
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ee:2f:25:dd:db:9f:d6:2f:8b:89:04:97:5c:a1:6f:b4:f6:
70:c9:78:66:3b:32:56:be:73:40:0f:da:3d:67:54:f3:e2:40:
85:4c:4e:b7:85:2d:9e:d3:7a:9e:a0:7a:e6:60:3d:4c:4b:44:
b4:5f:5f:76:d7:71:77:86:22:07:66:34:ab:eb:45:de:bf:72:
28:67:93:3b:35:09:88:45:db:e2:4e:f6:5c:96:fc:0f:ef:3b:
66:d0:1f:1a:16:44:4a:10:5a:42:37:73:d5:0b:6b:95:f0:cd:
ab:70:f2:1a:94:b3:4e:f3:97:e2:e0:59:37:08:a7:60:5b:f4:
aa:f9:77:24:51:fc:e2:de:58:dd:1a:4f:dd:3d:af:43:03:af:
a1:3d:46:83:65:cf:14:07:81:c9:02:76:7f:55:ec:02:e5:86:
3b:65:71:02:3b:14:d7:13:e7:f2:bc:64:56:a8:eb:59:4b:1d:
52:9a:1e:83:52:48:41:ff:58:9d:50:bc:57:75:c8:36:b3:3c:
cd:dd:d8:60:04:3a:22:56:45:35:9a:68:e5:4c:87:fb:0d:4f:
2f:23:89:3b:f3:a7:08:4f:93:6c:d5:a1:66:11:f9:4e:ae:ef:
4d:22:ef:2a:69:9b:3c:e6:14:38:a8:5a:10:12:31:51:44:a3:
bd:1a:55:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:34 2026 by rpki-client