Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier: PDqf6+Sv2N8S4Tf8mVALIw9eKoeVdArRR/ft2sleeXM=
Subject key identifier: D9:A3:31:3B:C3:8E:8A:A5:15:A2:81:6B:BA:70:1B:1F:2A:1C:D2:62
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 019EC18023230E4AC5FB493093B3973924A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number: 0CFE
Signing time: Sat 13 Jun 2026 15:01:00 +0000
Manifest this update: Sat 13 Jun 2026 15:01:00 +0000
Manifest next update: Sun 14 Jun 2026 15:01:00 +0000
Files and hashes: 1: 8Et4wRl7tgB_17L9jG6Mdek6xDg.roa (hash: lw3WqGSEoZrvxn7wZkoN4525cvxLItsQZGDX6ZhkS8I=)
2: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: rGO6kOwHDaMEPVqoC0Kx3xPZqrIxHGjdHHSecgyupDg=)
3: Gcm3mTulA6LRvNkW38ibYEgtom4.roa (hash: NDdsNqJPO5+KERP1vetA3EoWo8gEcy/Atr+ErCOi2Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:23:23:0e:4a:c5:fb:49:30:93:b3:97:39:24:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Jun 13 15:01:00 2026 GMT
Not After : Jun 14 15:01:00 2026 GMT
Subject: CN=d9a3313bc38e8aa515a2816bba701b1f2a1cd262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f6:6a:e7:4f:cb:51:aa:e1:e7:a1:b5:57:57:
18:50:ac:36:94:f3:cf:a6:d5:30:13:41:2e:9e:46:
67:8a:51:86:32:c1:c7:e8:50:f7:da:eb:3c:6f:e6:
64:32:e4:0f:40:0a:9d:c4:b7:60:0d:40:e9:ee:81:
ca:e1:a1:bf:1f:64:e6:4f:fd:63:44:7c:e2:74:8a:
b3:54:36:2e:50:74:ee:b7:10:9c:c4:68:7b:20:e4:
18:8e:20:64:3a:bd:be:75:8b:80:ab:37:f9:97:ff:
46:0b:f7:d8:0f:34:3e:8b:17:76:53:df:60:8e:14:
59:51:c9:b4:1d:1e:01:db:62:78:ce:fc:32:c2:7c:
68:55:f7:86:6e:bc:c1:05:58:c6:a7:64:8e:37:93:
fb:9e:38:ee:4f:fd:d6:6a:37:84:98:c1:74:14:cc:
d5:db:71:e3:a5:b8:d2:d1:8b:e5:69:c1:18:c7:c8:
4f:c5:7e:25:ff:22:21:cd:6f:6f:dd:03:ce:00:9e:
3c:d6:b7:25:8c:bb:af:b0:2e:2f:3b:62:6e:16:42:
e9:6f:91:60:25:53:c5:c9:52:25:77:2a:42:d5:1f:
90:29:e1:ff:c9:a2:59:96:04:52:5f:66:65:36:50:
3e:fd:9e:35:f5:6b:82:63:ea:94:60:4d:bb:4d:c3:
fd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A3:31:3B:C3:8E:8A:A5:15:A2:81:6B:BA:70:1B:1F:2A:1C:D2:62
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a1:e4:63:6b:a9:87:12:c5:d1:60:d1:4b:92:0b:13:25:06:
70:53:49:26:64:08:ee:b5:19:59:d8:df:0a:12:74:31:d4:f1:
14:a9:41:40:82:45:24:3f:87:60:a8:ec:e2:58:ba:98:4f:2b:
91:2d:05:cf:9c:4d:53:e7:da:8c:32:e5:c5:36:d3:71:31:40:
74:dc:0f:0e:56:3b:6f:67:ef:69:69:5a:96:44:0b:03:10:51:
ab:99:63:da:bd:0c:4c:58:12:79:01:7b:d9:f8:99:9a:0f:fa:
49:63:dc:ea:b7:a8:29:2c:e5:c5:9e:aa:6d:65:63:d6:b2:1b:
1c:7a:ee:29:64:e7:d2:c0:16:eb:49:e2:cb:69:29:db:0c:66:
3b:e6:0b:bc:7e:d5:26:5f:de:5c:14:92:5a:0f:0b:8d:ea:d1:
24:47:58:07:79:94:f7:6b:6a:0a:14:bf:9c:f4:fd:76:33:b8:
61:a3:d2:83:46:22:62:37:77:20:e2:95:3a:f7:a1:8c:c3:c7:
c4:b1:75:a2:0c:02:e3:2b:6c:cf:68:c4:ce:37:92:0b:bf:3d:
3d:a3:75:28:01:b7:b1:1f:25:f8:7d:c7:dc:46:e0:28:ff:be:
46:9b:f0:57:38:62:85:0c:c0:9e:a5:fe:4e:5e:71:72:a0:6a:
23:e2:96:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:54:15 2026 by rpki-client