Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier: qMAj7rOm6MNcQrAtLcndWbyj1rwfckE2yllEJDn/iWQ=
Subject key identifier: E3:EE:06:E4:4F:F7:48:58:7B:5A:AF:54:FB:3D:23:CB:7C:BA:52:29
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 019D9A076DC970F49A91B7503E4814B46ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number: 0C65
Signing time: Fri 17 Apr 2026 06:01:11 +0000
Manifest this update: Fri 17 Apr 2026 06:01:11 +0000
Manifest next update: Sat 18 Apr 2026 06:01:11 +0000
Files and hashes: 1: 8Et4wRl7tgB_17L9jG6Mdek6xDg.roa (hash: lw3WqGSEoZrvxn7wZkoN4525cvxLItsQZGDX6ZhkS8I=)
2: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: h3mn1TiNHIxNaOYmz/7xblkwbP/FJ380aEVKS3MISG0=)
3: Gcm3mTulA6LRvNkW38ibYEgtom4.roa (hash: NDdsNqJPO5+KERP1vetA3EoWo8gEcy/Atr+ErCOi2Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:6d:c9:70:f4:9a:91:b7:50:3e:48:14:b4:6e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Apr 17 06:01:11 2026 GMT
Not After : Apr 18 06:01:11 2026 GMT
Subject: CN=e3ee06e44ff748587b5aaf54fb3d23cb7cba5229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:90:21:c6:59:7d:b3:74:cc:bb:8d:68:48:
1c:10:1e:f3:2b:19:10:d1:b7:ba:d9:99:42:12:69:
bb:54:1d:e0:3f:d6:15:8a:08:0c:db:3e:d7:47:29:
2d:9f:4c:f5:32:18:f3:23:4b:11:2e:2f:b4:e9:46:
a7:4e:78:a8:03:64:b2:78:14:8b:33:74:35:2f:ea:
6f:d8:73:9c:2a:86:c2:19:47:d2:15:0e:4a:0f:df:
58:d3:91:fa:23:db:d9:12:19:1d:db:f4:41:1f:a9:
ae:66:91:b6:e1:02:d7:cf:78:1e:51:f9:01:4d:a9:
64:6d:d6:b6:42:e1:e8:bf:28:7a:f1:05:67:d9:14:
69:8a:10:ec:b9:cf:a9:f8:9c:49:6f:24:a6:4c:73:
e4:19:09:ba:9f:59:c2:b3:96:27:41:b2:99:29:69:
dd:9a:ce:f6:42:2a:e2:9b:e1:2e:51:8a:86:53:e7:
1c:dc:86:ac:9d:d2:5f:38:77:d7:f3:6c:31:9b:e5:
78:34:90:73:9c:70:9c:14:db:65:25:30:49:f2:5c:
1e:df:bb:65:4a:fc:61:97:8b:64:c7:02:b0:08:6d:
4f:c9:9c:25:f4:6b:73:97:f2:84:16:bf:d0:b9:6e:
03:9b:b1:73:74:75:c4:0c:72:60:ad:fd:d7:32:92:
40:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EE:06:E4:4F:F7:48:58:7B:5A:AF:54:FB:3D:23:CB:7C:BA:52:29
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ef:1e:92:82:23:27:1a:69:ec:a0:cc:4a:c4:46:b1:5b:3b:
5d:0b:03:63:73:cb:b7:59:1c:2a:0d:64:e2:38:3e:0e:47:22:
b4:8a:b2:3f:3f:91:43:05:b6:da:10:37:77:e1:5e:3b:09:cf:
1d:6c:1a:c6:2b:25:8b:78:72:0a:c0:2b:ba:1f:5e:6b:37:79:
22:06:c6:59:81:d2:67:11:fe:c4:20:87:3c:c7:ed:1f:02:c9:
0e:33:28:10:d1:1e:4d:cc:67:96:96:2d:2a:70:03:75:e6:c5:
a1:f1:2f:68:35:7c:33:78:aa:d7:9f:9f:e6:2c:65:b0:a3:89:
cf:b7:5f:b4:e6:b9:37:3d:7c:2c:32:b4:ad:0c:ef:ea:af:4e:
f0:fb:7f:9f:41:c5:b9:14:1d:fc:7d:e5:bb:26:22:9c:53:09:
f8:80:b6:42:67:42:5a:61:2b:49:5c:f6:c2:4d:63:f6:1a:f0:
38:33:89:ee:98:f6:c5:84:21:17:72:2b:5b:62:9d:d3:c2:1c:
51:c0:65:72:79:2b:a6:1e:59:52:ba:61:ca:a3:77:7e:96:b6:
74:3f:6f:73:2f:a8:27:0c:a3:3b:fd:7b:88:72:4f:b9:8e:c1:
3d:4b:95:d7:c4:5b:fc:23:d9:25:d6:c9:98:12:35:e9:1d:6b:
6c:ef:6d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:14:08 2026 by rpki-client