Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
File: GEe1nSHqNrMGL8qAznXBYWr1EZo.mft (raw, json)
Hash identifier: qTDyij4HFEx+j/ghahtcgzQ2zvd1Xr2m7Z/8KNwm2SI=
Subject key identifier: 1A:E4:85:E0:47:63:DF:DC:36:68:E8:E2:60:52:E0:B7:8A:FD:3A:54
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 01A0C8FD83B44F46E3AEEB4D42098B587CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
Manifest number: 1A8E
Signing time: Tue 22 Sep 2026 12:00:52 +0000
Manifest this update: Tue 22 Sep 2026 12:00:52 +0000
Manifest next update: Wed 23 Sep 2026 12:00:52 +0000
Files and hashes: 1: GEe1nSHqNrMGL8qAznXBYWr1EZo.crl (hash: tXOu0DuNEeMjepxRFRzQTANBczwPeXLtWQopXV4Fus8=)
2: Gll7cy-kn16EuQChyjd5kxJVar8.roa (hash: rAFOy1sEoOQYL6xEmxiSqkBDTDW6pzDgHlfqHYvviWQ=)
3: NbBpfQGsHkSsujFNmwYaCRxCh_M.roa (hash: JJcHtuXrwzjuiCppA+Z6JQDHbPH63cB9zvzIpG1UH3U=)
4: VG14tR93nrCtNgYNhIfw5ASK5b8.roa (hash: Tcz678dunbruTrkYTbdv98GThScQ5vNKS1fF8cX93JE=)
5: em-wCAvCHoRc_h-xPjZ1v-f-PJU.roa (hash: PgYRRROxFEoYAKT7r9ipsKpTh4ssV5nRRFlWjSGCkb0=)
6: jEjMvlS0E3-JaxbZrtShhCPLCJ8.roa (hash: cNkIwV71ok/w0KC8pKnGuUP130XxoF34h2rE4wB3M+0=)
7: q9_YDIRra6aFcMc0ByB5ssvbp7c.roa (hash: Aqh+b9LnXWSFB27cNYCIor6EI4XZue2eU7FkAjMEl08=)
8: s0K3J9Hfz8f1sftMuRidCQOAQhk.roa (hash: 1kkEqiEjaCO/BAeUP7qyZJOwB2fegbQON/HmveFaeBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:83:b4:4f:46:e3:ae:eb:4d:42:09:8b:58:7c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Sep 22 12:00:52 2026 GMT
Not After : Sep 23 12:00:52 2026 GMT
Subject: CN=1ae485e04763dfdc3668e8e26052e0b78afd3a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:93:26:fc:2e:37:4a:96:74:74:b0:fa:39:
c0:c0:ae:88:94:90:74:d5:19:50:53:6f:d9:b7:ef:
a7:56:c9:05:b0:22:bd:a8:43:ba:48:30:30:da:0f:
43:1a:85:d9:6d:08:12:c8:f1:8e:3c:2f:26:aa:cd:
5b:60:82:89:38:b0:6d:19:92:ac:2f:db:12:0d:70:
47:27:09:69:f9:39:34:ba:0a:2e:6e:63:c8:6a:57:
34:b5:f6:0e:85:b3:f9:0c:04:c0:e4:69:de:56:d5:
71:36:6e:e7:a9:b6:a1:88:c9:82:48:fa:88:b7:62:
ef:07:2f:5d:84:92:b7:75:cb:32:4c:8b:75:7a:28:
69:98:e5:16:d2:a8:c4:71:51:db:3f:16:82:05:f1:
43:77:6d:92:27:eb:3f:0b:97:6f:66:fc:d4:c4:e6:
f4:a6:cf:d9:c6:90:6f:cb:0c:20:7e:8b:c7:7a:39:
6a:66:7b:95:3a:e8:df:0a:82:a9:3e:02:d0:5d:0f:
c3:8a:8d:14:41:dc:1c:54:90:5c:e2:7a:dd:2b:73:
c0:21:1e:69:97:89:c4:c5:2f:26:30:b0:57:8f:03:
cf:57:7f:3c:dd:67:ac:b7:76:b5:8a:b8:6a:00:d7:
a0:bb:f7:50:58:52:8f:9f:d2:54:4e:52:c2:52:da:
4d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E4:85:E0:47:63:DF:DC:36:68:E8:E2:60:52:E0:B7:8A:FD:3A:54
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2f:b9:eb:d1:04:6f:e2:11:89:bb:6d:92:a5:16:a1:44:bc:
d3:86:45:31:53:e9:35:a8:f6:bb:97:1b:c6:47:c3:36:67:df:
88:26:ea:f3:39:53:0b:1d:5a:89:57:db:aa:ca:20:39:ad:eb:
15:14:99:83:0a:26:5f:ca:28:8e:da:88:c3:c0:b3:94:f0:e2:
b7:43:8a:d3:01:be:53:71:62:7c:6b:6e:6d:89:df:02:11:8c:
f8:14:c2:fc:bc:2c:7f:74:8e:25:b4:29:34:b5:23:fa:cf:27:
d6:b2:b6:da:8d:2a:a4:38:7a:90:23:b1:28:e9:5f:85:94:83:
7d:2f:c3:79:ad:35:bf:43:cc:b1:2c:26:2d:e7:58:8d:24:3f:
38:cb:85:20:6b:3d:1d:78:8f:77:c2:b6:45:ee:0a:cc:5d:8f:
a5:16:30:b0:24:b0:e2:c8:53:8a:e6:47:df:1a:cd:17:39:94:
08:d3:ba:36:5c:a1:a7:02:a7:b5:5e:6c:f9:7d:33:20:62:8d:
6a:7b:11:82:4e:28:92:09:1b:a5:01:05:9b:30:44:f0:43:fe:
ac:89:c9:26:bb:51:96:41:00:9f:14:aa:27:35:6c:f1:ff:3f:
9c:be:c4:03:a5:4d:f0:ab:a4:d4:3c:44:98:db:9d:62:37:99:
a5:a9:de:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:42:10 2026 by rpki-client