Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
File: geTmB1l46pR2tkHOAIx4erKOXRM.mft (raw, json)
Hash identifier: 6N0b2i9yGQWxvJmQ+SOPr6H3JeEy4sXbSMCwDdl7GJY=
Subject key identifier: DB:7A:3F:CB:F8:1C:D7:27:C7:CE:12:63:20:FC:2D:5B:B1:29:5A:9C
Authority key identifier: 81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
Certificate issuer: /CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Certificate serial: 01A0DA5F5C8F6E10BBCF34628E4F6889D1D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 21:01:17 +0000
Manifest this update: Fri 25 Sep 2026 21:01:17 +0000
Manifest next update: Sat 26 Sep 2026 21:01:17 +0000
Files and hashes: 1: geTmB1l46pR2tkHOAIx4erKOXRM.crl (hash: cXAefKyGuI3vqq88vFep5cQVtsut3KumgojLWpki3UM=)
2: pTTs0nVlMn5tHpy7oYuUSfXDe4g.roa (hash: xSZGhc6azC4w2f74UgWS1yPxNx1RtAZpsoy3M6zVKGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:5c:8f:6e:10:bb:cf:34:62:8e:4f:68:89:d1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Validity
Not Before: Sep 25 21:01:17 2026 GMT
Not After : Sep 26 21:01:17 2026 GMT
Subject: CN=db7a3fcbf81cd727c7ce126320fc2d5bb1295a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:ea:53:12:8e:f8:64:92:0a:d3:f7:09:61:
f2:84:55:9c:02:9f:b3:c9:ae:7e:86:15:f0:c4:3c:
3f:97:35:f2:5c:ca:2a:9d:c1:8d:15:e4:87:6b:26:
0d:f0:7c:11:01:9e:00:64:d9:33:76:8b:0e:b5:fd:
22:d8:45:23:2a:ab:65:5d:72:f6:35:0a:a7:83:de:
6a:18:de:5a:db:d2:af:28:f8:d0:6e:ca:6e:bd:d8:
23:21:fe:4e:b8:66:db:12:fb:6f:d8:13:d4:63:03:
8c:a5:23:57:c9:30:0e:83:04:d9:23:f5:9d:42:09:
0c:40:de:b1:7c:13:dc:9c:81:f5:68:44:4b:a2:54:
9f:1e:b5:47:1c:76:c7:28:b7:18:46:c5:65:9a:a3:
38:de:94:d0:5c:be:7d:51:41:ed:a5:22:b9:c6:ef:
93:95:7f:75:86:b6:18:dd:00:c2:1f:ef:c7:04:36:
ab:33:4a:cf:ce:36:d5:c7:bf:f2:2f:61:4d:98:4e:
79:5c:fa:cf:4c:86:a7:1a:7a:dc:8b:d9:67:7f:3e:
f6:fe:30:58:57:1d:09:9d:83:2a:0f:cc:f7:53:47:
52:68:3e:db:8e:41:de:d4:1a:34:29:ff:77:82:64:
1f:ca:47:9d:3e:b1:1c:2f:bc:e3:ba:28:36:38:f7:
48:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7A:3F:CB:F8:1C:D7:27:C7:CE:12:63:20:FC:2D:5B:B1:29:5A:9C
X509v3 Authority Key Identifier:
keyid:81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e8:14:24:e2:62:64:ff:a8:4b:e8:4e:a0:0c:4a:da:8d:8b:
5e:e8:30:35:72:ae:80:08:35:c6:f9:72:0c:f5:59:fe:f2:61:
0e:e2:dd:ad:76:f0:ea:43:e2:d0:78:6b:fa:71:8e:d5:fd:95:
6d:9c:c5:51:0c:12:f1:96:5e:1f:d0:69:41:d3:c4:54:43:8c:
26:e6:da:1e:64:4c:55:3a:d5:fb:d6:68:88:a6:17:b1:6c:45:
92:1a:35:1b:65:5b:06:37:de:ca:e7:32:8b:3e:fd:78:b9:a1:
9b:db:08:9f:94:1f:5d:bf:aa:ea:08:e6:f4:24:87:8c:31:7b:
2f:0a:25:65:75:53:7c:2c:07:5e:a4:1d:06:71:44:10:79:55:
4b:dd:88:e0:4c:be:2e:a1:57:c8:65:a5:36:fc:7f:ff:1f:4f:
48:53:77:a6:1b:e8:9c:57:53:f3:74:70:83:32:cb:70:fd:5a:
72:77:43:a4:14:c2:08:2f:86:bc:aa:66:9e:a3:bd:09:03:32:
00:5f:93:64:16:a8:03:bd:fe:0c:48:ab:f2:78:af:fe:ff:3a:
81:ea:6b:78:2e:7d:f4:07:2a:41:4f:8a:42:d2:22:4d:31:9c:
f4:f5:b1:a1:b3:06:53:7a:fb:85:be:1d:55:1d:82:97:58:c5:
59:13:56:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:07:52 2026 by rpki-client