Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
File: GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft (raw, json)
Hash identifier: dQZRsgD6ZzZlzkHPjg5w71hL/tVztS2LB+JcdDSmy8k=
Subject key identifier: DE:5D:D5:50:93:72:31:85:DF:50:88:6C:78:80:1B:2C:30:C1:BE:7B
Authority key identifier: 19:E5:79:FD:74:60:9D:26:8C:CB:CF:B8:2F:53:A5:A4:D0:61:35:B0
Certificate issuer: /CN=19e579fd74609d268ccbcfb82f53a5a4d06135b0
Certificate serial: 019D99D04E7164F63949A3A17478D8580090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
Manifest number: 0688
Signing time: Fri 17 Apr 2026 05:00:58 +0000
Manifest this update: Fri 17 Apr 2026 05:00:58 +0000
Manifest next update: Sat 18 Apr 2026 05:00:58 +0000
Files and hashes: 1: GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl (hash: 0VGsv2bMMrjVAzNm4oQjP/PHVDl4c9zvzmDn0wsKDEo=)
2: RNg5Iw6hK9lFknD64uFpzzZFifw.roa (hash: MPWSSdeEZMH3BcEWDJHSPzUc1H1Qu6OWSelB4NXhiuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:4e:71:64:f6:39:49:a3:a1:74:78:d8:58:00:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e579fd74609d268ccbcfb82f53a5a4d06135b0
Validity
Not Before: Apr 17 05:00:58 2026 GMT
Not After : Apr 18 05:00:58 2026 GMT
Subject: CN=de5dd55093723185df50886c78801b2c30c1be7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0d:3b:ba:2c:cd:e4:c9:b7:a5:85:22:00:f3:
8f:35:0c:80:4f:8b:43:54:5d:5c:14:2a:2a:62:42:
32:39:a5:65:ec:3b:db:22:d5:43:b5:3c:f2:cd:35:
0c:d4:73:21:61:ea:cd:6d:df:2a:c8:72:f5:52:5c:
56:3c:e0:31:5b:65:5c:3b:cb:39:38:1a:33:51:73:
98:a2:02:db:c7:b8:b4:d9:d4:bd:51:e9:8c:cd:4f:
da:09:49:93:50:8f:c3:d9:cc:f2:b0:c9:21:78:a4:
3b:02:b0:a2:78:49:43:9d:b0:05:a6:68:f6:a0:bf:
e5:6b:38:1d:bb:c4:98:6b:e2:91:fa:02:a9:aa:b8:
ee:51:d3:ed:d3:6e:81:87:41:8c:a1:2b:a1:f5:ed:
5a:43:e4:34:17:9e:77:19:91:bb:7e:ed:1f:23:c3:
2e:7d:f1:70:1c:bf:c6:9c:69:08:c0:d0:83:96:39:
23:d9:a0:4f:b7:eb:e6:f5:1f:bf:c6:11:87:78:68:
ad:2b:b2:f9:37:44:50:07:a0:ef:f9:2d:4c:5f:f5:
78:80:f6:21:3c:1c:b3:02:7b:d0:33:ba:53:62:95:
75:66:ac:89:c2:a6:c3:78:5d:a3:de:36:e0:48:49:
ad:25:6b:1c:83:f2:21:52:90:f0:c1:1a:68:87:83:
81:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5D:D5:50:93:72:31:85:DF:50:88:6C:78:80:1B:2C:30:C1:BE:7B
X509v3 Authority Key Identifier:
keyid:19:E5:79:FD:74:60:9D:26:8C:CB:CF:B8:2F:53:A5:A4:D0:61:35:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:7c:ce:da:80:d4:83:85:61:cf:44:34:5a:68:b0:71:1b:ed:
91:87:6f:82:53:2a:fe:0e:dc:f2:83:00:fc:c1:75:87:4a:cc:
ab:f8:e9:cf:f3:08:33:9d:d8:50:21:1f:45:16:fa:eb:6a:f2:
87:d4:d4:dc:43:21:82:bb:3d:70:c4:6b:bd:7d:da:bb:71:19:
06:a5:36:e0:c2:02:b2:e4:65:e1:58:6b:6c:7c:7a:54:73:90:
0e:5a:42:ac:1f:ba:ff:00:ab:a2:96:8c:da:04:51:6d:36:81:
99:a6:4d:89:09:fd:e8:4e:ac:29:52:9e:f2:6f:c0:ad:c0:b4:
87:b8:cd:14:77:d0:04:0e:5a:e7:c8:6c:3d:58:cd:02:38:c5:
7b:2d:49:52:4d:5f:c5:69:86:a8:f8:e7:44:87:56:c1:c2:74:
08:ec:35:0d:ae:9f:98:7b:88:39:ff:1e:14:88:d6:fc:68:b8:
fa:db:8f:3b:18:9c:54:62:ac:72:9f:6e:47:9f:e3:cb:ab:bb:
a4:76:e6:45:5f:4a:a1:10:72:8e:3a:8e:8b:e9:ab:99:fb:ce:
d8:28:1a:87:6f:64:b1:f5:22:f9:5d:be:d2:74:f9:3d:96:16:
ac:bc:f5:cc:1e:69:c4:80:1a:c2:82:58:27:b1:3b:4a:1f:cd:
a4:bf:5e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:10 2026 by rpki-client