Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier: CPvlPcaj1WRGNlx0gwAmi+qBRTiYUmQZ50n1CENExP0=
Subject key identifier: 71:C2:0E:EC:4D:0A:8D:65:51:90:A4:B7:32:25:A8:90:4C:14:0A:C0
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 019FAB2C20BE3245F1CE0A6CC4925522B75F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number: 0D77
Signing time: Wed 29 Jul 2026 00:00:23 +0000
Manifest this update: Wed 29 Jul 2026 00:00:23 +0000
Manifest next update: Thu 30 Jul 2026 00:00:23 +0000
Files and hashes: 1: 8Et4wRl7tgB_17L9jG6Mdek6xDg.roa (hash: lw3WqGSEoZrvxn7wZkoN4525cvxLItsQZGDX6ZhkS8I=)
2: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: PElnQANmvp5BfpaEk8J7iZqcLBssNemJYoQ/UYa3jsg=)
3: Gcm3mTulA6LRvNkW38ibYEgtom4.roa (hash: NDdsNqJPO5+KERP1vetA3EoWo8gEcy/Atr+ErCOi2Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:20:be:32:45:f1:ce:0a:6c:c4:92:55:22:b7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Jul 29 00:00:23 2026 GMT
Not After : Jul 30 00:00:23 2026 GMT
Subject: CN=71c20eec4d0a8d655190a4b73225a8904c140ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:ca:ee:e8:57:ab:5b:b1:8a:d2:8f:ef:71:
41:ce:c5:b6:ba:56:29:50:ed:b9:fd:bd:ae:d4:33:
9f:f1:e6:65:0e:9c:56:99:3d:7a:d3:7a:20:53:6e:
61:66:dc:1d:94:f8:02:5d:be:9f:c1:cc:a5:01:68:
a2:6d:70:a2:d0:8c:75:1b:1a:1b:b8:5b:c2:9c:00:
af:f3:fe:18:b5:00:b3:91:12:cb:e5:b7:07:a9:a8:
ee:71:14:c3:92:c6:43:83:a1:06:58:9a:f6:76:a2:
47:ba:21:f3:89:9c:48:05:17:24:24:4e:f7:ed:33:
d2:92:fa:25:75:51:18:e1:9b:48:b8:64:b6:2f:9b:
ea:c6:1a:8d:bc:e4:b0:6b:95:77:98:93:e5:a2:f3:
96:28:22:3d:72:85:d8:00:78:c7:0b:7d:ff:06:91:
a0:8b:68:a4:1a:bd:de:f6:7f:a2:4a:d9:00:4e:86:
a6:3c:c8:be:a1:ba:e4:69:d2:a2:f3:15:e0:95:f6:
4b:c9:5a:b9:da:38:c7:93:13:ed:ed:85:4a:6d:ff:
68:e0:8d:21:e5:86:fa:38:09:3d:87:15:b7:c5:b0:
5b:0c:94:e9:b6:e5:d0:09:f2:49:36:eb:94:97:71:
96:ad:7e:7c:ba:55:49:83:12:60:41:41:46:a3:47:
10:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C2:0E:EC:4D:0A:8D:65:51:90:A4:B7:32:25:A8:90:4C:14:0A:C0
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:33:c8:bc:ab:04:81:87:c5:81:e2:ea:3f:9e:ea:d9:45:1f:
e7:9f:ea:2c:a5:1c:e6:cc:c0:05:61:65:d4:ec:3a:cd:9d:22:
bb:39:42:04:fe:13:f6:8a:fb:16:20:f5:77:7e:f3:81:a8:46:
4d:fd:c7:e9:e2:9c:73:a6:c5:10:4c:ce:ec:6e:13:1a:76:b8:
f2:64:3f:67:bb:97:0f:9b:a6:78:fe:b0:9e:c9:1c:cd:f6:62:
27:6b:e5:ef:33:08:c9:c8:27:9f:cd:d8:81:11:7e:94:9a:da:
e1:5e:9d:77:79:5f:78:d9:4c:f5:83:da:f6:87:2b:a0:75:5a:
b4:de:9e:78:29:6c:5a:eb:8b:bb:bb:92:0f:d2:67:f3:02:34:
43:c0:3d:d8:bd:b0:8c:ab:b1:e6:a8:76:12:de:ff:f6:f6:34:
d2:39:e4:28:55:b6:2f:21:53:a1:3c:33:d7:2a:e6:35:84:fa:
72:4b:28:23:f0:2e:71:95:6a:46:eb:a2:64:52:4d:4d:c8:db:
d2:a8:28:7d:a4:a4:30:1d:fd:bf:21:25:ed:1e:c3:f6:f5:5e:
6e:68:29:30:f8:bf:2f:2f:ee:25:dc:ed:07:11:69:3c:d1:6b:
38:26:34:d2:0d:04:82:78:ed:27:e8:29:e7:8b:d3:e3:34:92:
9a:8a:96:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:17:29 2026 by rpki-client