Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
File: geTmB1l46pR2tkHOAIx4erKOXRM.mft (raw, json)
Hash identifier: MeDrnYrXbZ0NPAb+CcZxiyGsVSFKwOkM32zpkg0SYLI=
Subject key identifier: 60:1A:A0:C3:46:C7:C0:60:95:50:EE:05:88:30:ED:76:E2:D4:04:42
Authority key identifier: 81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
Certificate issuer: /CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Certificate serial: 019CAC7DB4E3F78AE2FE6A00E2A7FE41BA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 03:00:45 +0000
Manifest this update: Mon 02 Mar 2026 03:00:45 +0000
Manifest next update: Tue 03 Mar 2026 03:00:45 +0000
Files and hashes: 1: geTmB1l46pR2tkHOAIx4erKOXRM.crl (hash: F9nKdO+SlREl8+HgiC9UrN21jp9+cHZ4FqKfUMbiwTs=)
2: pTTs0nVlMn5tHpy7oYuUSfXDe4g.roa (hash: xSZGhc6azC4w2f74UgWS1yPxNx1RtAZpsoy3M6zVKGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:b4:e3:f7:8a:e2:fe:6a:00:e2:a7:fe:41:ba:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Validity
Not Before: Mar 2 03:00:45 2026 GMT
Not After : Mar 3 03:00:45 2026 GMT
Subject: CN=601aa0c346c7c0609550ee058830ed76e2d40442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:eb:9f:6a:43:ae:6b:4a:ac:7d:0a:14:55:1c:
f4:0f:f2:32:43:ba:e5:7e:d5:c0:aa:23:84:29:2a:
d4:5f:7d:4d:81:23:e0:a2:04:bd:a9:bd:f0:97:c8:
0b:98:b6:7a:05:11:47:d8:a8:4c:9e:67:d1:18:e6:
94:8a:67:fd:49:f8:32:82:e4:3b:a7:01:02:c3:5f:
21:23:57:e3:de:1f:2f:89:f9:b3:9d:6a:f7:c5:b7:
03:0f:55:97:9c:49:e8:9f:5b:c3:ca:6c:7d:da:22:
20:cb:f3:d3:ab:da:29:f8:7f:cb:3e:12:59:09:f3:
5c:67:55:84:45:13:18:af:26:5b:37:e7:4b:a0:6d:
53:b0:61:3d:a9:3a:26:ee:f7:7a:d1:c6:4b:49:7c:
25:4c:08:20:7e:b4:fd:56:8c:75:d2:3f:77:a9:cb:
a6:67:0a:ab:dd:fa:11:fa:5e:5c:3e:17:51:6e:19:
81:f4:94:11:3e:6a:83:be:3a:1d:80:a8:3b:b4:ba:
a1:88:3a:32:65:06:d1:9b:7b:e5:e9:f9:5c:b5:5a:
1a:21:9f:d1:54:e5:e7:d1:08:61:cb:5a:51:08:cd:
f9:be:12:ef:88:1f:7b:bd:f2:4c:3e:de:54:cb:0c:
e4:e0:21:19:e3:e2:02:4c:99:31:22:6a:39:8e:0f:
a1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1A:A0:C3:46:C7:C0:60:95:50:EE:05:88:30:ED:76:E2:D4:04:42
X509v3 Authority Key Identifier:
keyid:81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e8:19:1b:63:c1:cd:bc:7b:69:e0:3d:98:5e:9b:71:ef:5f:
2e:b3:d9:2d:d5:68:f8:b1:ca:51:b8:4a:ea:50:73:68:2f:12:
ca:c3:8a:5a:81:9e:86:bc:0d:60:4a:56:fb:b3:83:7d:ab:33:
58:01:c1:e9:03:13:fe:c8:85:1b:64:e7:ee:e2:84:f1:49:ea:
eb:44:3f:75:88:98:2c:15:95:f8:ff:34:1a:75:83:53:7c:ba:
76:fd:1d:6d:79:4c:20:86:a8:e1:be:70:73:6a:26:56:be:b9:
98:9e:42:a2:3f:5c:d6:ec:2e:e2:8d:f3:de:24:f8:8d:8a:fc:
34:70:7c:d6:d4:3f:a7:75:1f:dd:57:cf:93:c5:d5:cc:46:5c:
be:f0:96:22:5d:91:cf:5c:65:47:f1:95:f8:75:b9:65:47:a9:
95:95:9b:ac:93:05:94:1e:e4:b4:ff:b0:aa:f9:07:93:7d:cc:
91:5d:80:de:77:b9:61:51:61:a2:ab:31:88:53:08:ce:9e:74:
de:71:e1:3c:3f:48:62:fc:86:45:4e:c8:05:fd:03:ed:91:06:
53:76:7c:28:86:a5:dc:50:45:00:92:ca:5e:72:fc:31:d9:ce:
61:1a:76:08:51:d1:bf:17:f6:19:b3:c2:2e:8e:af:4c:4b:48:
c1:f4:fe:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:41 2026 by rpki-client