Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
File: geTmB1l46pR2tkHOAIx4erKOXRM.mft (raw, json)
Hash identifier: RuSKouQJgqKCn5CQ5s2mpqSbNi85oID4qjpY0t3baLA=
Subject key identifier: B5:36:47:61:75:6E:84:7E:CF:6B:7E:89:08:D1:CE:76:A2:08:66:80
Authority key identifier: 81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
Certificate issuer: /CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Certificate serial: 019D9A06B9FC48A5349C3CC7755BA8996729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 06:00:25 +0000
Manifest this update: Fri 17 Apr 2026 06:00:25 +0000
Manifest next update: Sat 18 Apr 2026 06:00:25 +0000
Files and hashes: 1: geTmB1l46pR2tkHOAIx4erKOXRM.crl (hash: T9/8BxDi+Cia4//sCAOyM/UEYRrOePxSop41tvmQfBM=)
2: pTTs0nVlMn5tHpy7oYuUSfXDe4g.roa (hash: xSZGhc6azC4w2f74UgWS1yPxNx1RtAZpsoy3M6zVKGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:b9:fc:48:a5:34:9c:3c:c7:75:5b:a8:99:67:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Validity
Not Before: Apr 17 06:00:25 2026 GMT
Not After : Apr 18 06:00:25 2026 GMT
Subject: CN=b5364761756e847ecf6b7e8908d1ce76a2086680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:41:fa:a9:07:bd:d2:bc:8f:91:ec:d0:b0:
fc:1b:74:5d:3d:44:5c:9a:cf:52:d4:2a:c5:38:6e:
e6:6d:bf:cb:0b:3b:ab:47:3a:da:39:1d:37:38:a1:
4f:51:45:d5:38:ec:ce:2e:a0:c6:e7:f2:fa:1f:92:
ff:89:db:75:b0:f7:e6:9d:e2:a5:25:1e:fb:71:93:
8e:4b:79:b5:84:0f:e5:f5:e4:dd:ca:bf:a1:67:af:
5a:b2:85:18:21:bc:2e:78:ee:b0:c9:b3:93:39:e8:
86:0f:20:25:4a:95:9b:84:9b:4d:76:c5:cf:be:5c:
b3:db:41:66:11:cc:45:fc:9d:5b:bb:19:1b:1b:06:
ce:0d:ae:ed:82:88:63:8c:49:df:9f:b1:43:b9:df:
1d:e9:7c:5d:a1:52:fa:e7:bc:c9:d0:64:db:77:3b:
c7:0c:59:d1:be:cb:e2:64:7c:0c:51:08:d9:2d:cf:
40:bf:9e:9c:34:e4:ae:89:82:d4:60:3d:8a:ef:8e:
93:d2:61:4d:26:30:f1:eb:ab:e8:ad:ba:10:50:46:
3f:89:01:0f:78:16:b6:6b:81:fe:0c:d7:6f:06:2a:
5c:8d:bf:b4:a3:90:fd:57:5d:69:2c:9a:54:0e:81:
59:70:2b:7a:b9:6e:b4:37:b2:bc:2e:e0:ec:e1:cc:
3b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:36:47:61:75:6E:84:7E:CF:6B:7E:89:08:D1:CE:76:A2:08:66:80
X509v3 Authority Key Identifier:
keyid:81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d2:94:d6:cb:89:b3:12:43:ec:f4:d2:26:e9:6c:97:82:af:
16:b0:fb:a5:5b:2d:8a:04:78:c0:2a:1f:c4:80:6e:cb:e6:e3:
b2:99:0d:67:df:d9:e9:48:45:88:85:c2:8c:ee:08:f9:9d:d3:
d3:9b:f7:89:0c:56:29:a4:c0:5b:38:cd:6f:99:a3:41:f6:75:
be:04:e1:85:93:55:a3:b9:87:fe:e0:7b:56:38:cb:e8:2b:21:
07:56:43:83:36:4e:9c:d1:31:bf:b0:89:d3:9b:56:a2:b1:1f:
b5:88:10:e2:49:31:c9:27:be:7f:13:5e:da:6b:8e:84:b0:b4:
5f:25:78:4b:49:37:7b:c7:03:df:a2:37:1c:4f:61:27:bf:76:
4c:8d:90:1a:5e:fd:c4:04:61:de:09:58:ce:21:5c:4f:8d:53:
4e:0e:82:e7:3f:dd:04:7a:90:33:40:6e:5e:7c:a5:43:3a:ce:
ea:cb:98:59:d5:41:88:7d:a5:db:c8:ce:86:fd:c9:a6:cf:fb:
7f:e0:34:60:bd:7d:f8:ec:d1:f0:74:eb:4e:98:b0:72:f2:f4:
0e:9c:36:ab:cf:a0:2f:51:8e:47:36:b8:39:79:6a:ed:5e:b9:
fc:c4:30:fc:f1:2b:dd:77:85:a0:64:c8:0e:bf:ec:03:38:a7:
f2:e0:d7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:55:25 2026 by rpki-client