Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.mft
File: geY5cEKnqWRfwS91nQJhldfL_Vg.mft (raw, json)
Hash identifier: A5yD0ExDQdDvjfiuc00E48JEU83sRU5OZDu93HzDUdQ=
Subject key identifier: 16:D2:D7:93:73:6B:A6:DF:3F:BE:29:2F:6A:AA:A5:3B:AD:BD:9F:1B
Authority key identifier: 81:E6:39:70:42:A7:A9:64:5F:C1:2F:75:9D:02:61:95:D7:CB:FD:58
Certificate issuer: /CN=81e6397042a7a9645fc12f759d026195d7cbfd58
Certificate serial: 019D9B50C6A5CAEB33D87140000ED0E5246E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geY5cEKnqWRfwS91nQJhldfL_Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.mft
Manifest number: 0FCD
Signing time: Fri 17 Apr 2026 12:00:55 +0000
Manifest this update: Fri 17 Apr 2026 12:00:55 +0000
Manifest next update: Sat 18 Apr 2026 12:00:55 +0000
Files and hashes: 1: geY5cEKnqWRfwS91nQJhldfL_Vg.crl (hash: ywpfJ+j8WObfnZ8nFuI+TmfH9pMqMOkQG8f/466ZF9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/geY5cEKnqWRfwS91nQJhldfL_Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:c6:a5:ca:eb:33:d8:71:40:00:0e:d0:e5:24:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e6397042a7a9645fc12f759d026195d7cbfd58
Validity
Not Before: Apr 17 12:00:55 2026 GMT
Not After : Apr 18 12:00:55 2026 GMT
Subject: CN=16d2d793736ba6df3fbe292f6aaaa53badbd9f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:23:7d:e4:2c:2f:36:f3:7b:e2:c9:a5:50:
1c:41:34:f7:f3:e9:3f:65:42:2d:c5:d5:90:50:7b:
22:b6:35:5b:be:cb:24:3d:4c:c3:81:49:f1:7a:f6:
04:5a:c8:a9:3e:4f:1f:0a:92:1d:bd:db:fc:78:e8:
2a:ba:76:cc:22:5e:f2:e5:54:11:f9:1c:78:8d:eb:
02:b8:14:be:d3:44:be:25:54:9c:52:1d:58:eb:0a:
b5:65:b6:63:b0:53:e2:ec:a7:38:4d:e3:11:4b:a8:
62:f4:5b:e0:53:e1:78:e3:02:55:7a:d8:f5:02:d2:
9d:f7:9c:72:5f:d8:d2:40:38:e2:a3:8c:5d:80:a8:
dc:83:28:0b:16:a4:96:97:95:6c:5f:18:fe:63:c5:
27:06:f0:05:6d:44:9e:b9:f0:35:94:d0:e4:40:3e:
6b:ff:c2:71:09:03:c5:f0:de:dd:67:d5:2a:c3:68:
07:21:9c:c3:fb:7e:57:ab:c0:c6:77:c5:cd:de:2c:
86:ab:46:66:21:64:6a:33:dd:11:69:bc:66:de:5e:
ba:e5:bf:5c:e8:d6:e6:3f:e6:46:c2:45:05:3e:1b:
01:97:79:7a:a1:36:2f:ab:4f:3c:2c:89:07:d9:3c:
f7:8b:4e:16:10:55:45:72:62:c1:66:4e:be:75:a5:
ad:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D2:D7:93:73:6B:A6:DF:3F:BE:29:2F:6A:AA:A5:3B:AD:BD:9F:1B
X509v3 Authority Key Identifier:
keyid:81:E6:39:70:42:A7:A9:64:5F:C1:2F:75:9D:02:61:95:D7:CB:FD:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geY5cEKnqWRfwS91nQJhldfL_Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3c:c8:25:1b:e2:b1:ad:b9:cd:ce:26:f0:39:b1:fd:eb:8d:
11:a3:20:8a:49:95:34:18:4d:d4:dc:ef:42:c0:a1:81:20:97:
4c:da:ae:dc:bd:73:38:27:f4:2d:8a:4a:68:0e:4c:2d:ee:56:
f5:a6:96:4b:6f:01:cd:03:4c:68:e9:ed:84:0c:57:2f:75:df:
6d:47:22:d1:5e:47:d8:4e:96:d4:e9:e7:0e:ec:76:05:8d:b5:
88:d3:6b:a4:e9:91:68:33:1b:73:56:3f:0c:ab:c2:0f:d0:07:
88:86:d6:ee:b9:83:3c:6c:df:d4:16:13:b5:d4:39:16:10:b8:
c9:14:99:14:28:b8:87:54:1b:ec:75:89:71:38:c0:2c:cd:92:
4d:ec:69:1a:a5:9f:67:77:72:86:13:0d:bc:b4:7e:f0:9e:a5:
d8:8b:ee:8e:c6:b0:0f:ec:dc:7f:c1:cd:12:59:3c:0f:eb:2a:
2f:03:86:fb:54:36:9d:de:23:86:cb:7b:2f:67:e1:c9:4d:2a:
77:a5:90:32:ab:7d:f3:0d:47:6f:d1:85:6d:29:6f:ba:9a:b7:
83:ea:7c:0f:f5:29:45:56:8d:12:84:d9:04:c0:5b:5e:c0:4b:
e5:9b:5f:37:bd:fd:9c:a8:fd:b8:0a:63:8e:87:e5:77:6a:21:
03:9c:7b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:19:57 2026 by rpki-client