Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier: Nw6o21lONS7Q3hLWIvf0HyCPqhd7lFUVG6cmdeg/tvE=
Subject key identifier: 8A:01:FF:FE:F3:FD:FD:D7:F1:9B:84:7B:F2:DA:0E:65:B4:BD:E3:3C
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 01A0EDAF54903F920D0AA04217243FE6D585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number: 0E1E
Signing time: Tue 29 Sep 2026 15:01:25 +0000
Manifest this update: Tue 29 Sep 2026 15:01:25 +0000
Manifest next update: Wed 30 Sep 2026 15:01:25 +0000
Files and hashes: 1: 8Et4wRl7tgB_17L9jG6Mdek6xDg.roa (hash: lw3WqGSEoZrvxn7wZkoN4525cvxLItsQZGDX6ZhkS8I=)
2: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: ZicxgnckkxSdm+e4Y0SMOZumq+h9vxD2cYShs1yJIvc=)
3: Gcm3mTulA6LRvNkW38ibYEgtom4.roa (hash: NDdsNqJPO5+KERP1vetA3EoWo8gEcy/Atr+ErCOi2Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 15:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:af:54:90:3f:92:0d:0a:a0:42:17:24:3f:e6:d5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Sep 29 15:01:25 2026 GMT
Not After : Sep 30 15:01:25 2026 GMT
Subject: CN=8a01fffef3fdfdd7f19b847bf2da0e65b4bde33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5b:af:ea:7e:b2:a9:53:bf:de:ea:a3:1b:d2:
ac:9d:c8:14:20:f7:83:96:0b:7a:fa:f3:1b:93:b5:
b9:48:78:84:e9:c4:68:60:b2:59:5e:3e:e5:fe:f2:
27:b6:f2:3a:10:20:f5:5c:07:87:63:70:16:87:c2:
22:19:98:10:bd:15:af:55:e0:ce:50:14:f0:4d:98:
29:6f:b5:72:6b:34:3f:1e:3a:0c:b2:2d:ef:66:26:
06:44:46:40:a4:d7:d3:eb:e7:d9:ee:8c:74:a4:d4:
0a:ba:c8:39:60:29:66:30:fb:65:44:03:5e:0e:e6:
17:bf:a8:89:d9:a1:6a:47:41:6d:b0:9b:30:10:71:
e7:dd:00:56:c7:e7:58:c6:da:23:86:84:4e:be:aa:
96:d7:40:f8:23:df:1b:40:e0:cc:b5:03:3c:1e:dc:
d5:b3:b0:d1:97:b1:90:f1:e6:59:19:31:52:4c:0e:
6a:23:59:99:b6:2c:c3:1c:37:0e:76:f8:a7:0d:8b:
5d:cf:d4:db:32:83:7a:3a:f8:ae:e1:92:91:cd:76:
73:cf:e0:b3:49:5b:ed:47:d2:ab:e2:74:ca:a2:86:
86:d7:5c:5e:e5:df:04:00:2c:a9:50:3c:c4:fb:79:
7e:5e:01:9c:31:f7:06:43:37:4b:31:d6:21:46:31:
a6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:01:FF:FE:F3:FD:FD:D7:F1:9B:84:7B:F2:DA:0E:65:B4:BD:E3:3C
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:91:48:fc:e3:16:1a:41:f4:04:47:00:d8:58:bc:ef:e3:0a:
40:cb:c7:4e:f0:4f:47:22:7d:c3:92:01:78:76:ec:bb:5e:39:
0d:75:f1:48:90:ea:9d:3b:be:02:22:35:9c:91:95:82:d0:03:
a6:f9:b2:42:8e:db:b0:67:11:23:df:82:33:f7:d9:f7:45:5a:
5f:5b:c4:e6:ad:b8:79:19:5d:d5:e2:f4:13:23:84:e3:7e:01:
ab:2f:2d:b3:d8:29:57:32:71:05:7a:f3:5d:69:21:07:31:37:
27:66:2e:0c:f2:68:ec:94:82:ae:b7:d8:ec:8b:7f:24:cf:e6:
03:45:07:d6:86:46:6f:34:ea:3a:b3:94:39:cd:f7:5b:96:f4:
2d:bf:95:d0:64:b6:90:81:8b:70:0d:39:8e:5c:43:dd:7b:b4:
be:e8:66:ad:5b:d7:87:42:c7:24:9c:29:3c:6d:41:d3:c2:ee:
51:5a:66:d6:1c:96:bc:f7:e0:4f:84:d4:78:3a:0e:b6:4e:e8:
9d:59:77:b9:db:57:5e:fb:d3:98:b5:dd:33:32:30:cf:fc:70:
53:b2:ea:64:4a:25:89:aa:6a:43:f3:db:99:0a:31:a2:7b:26:
01:4d:83:a1:1f:aa:26:1f:ac:d7:19:ed:2f:10:3d:6f:60:f8:
d0:9b:64:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 22:32:39 2026 by rpki-client