Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
File: GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft (raw, json)
Hash identifier: FY0DdkxEW9Yzp5j5uAthxD9vOxO8fgBdn+5wUyhjqA4=
Subject key identifier: 09:91:0D:BC:73:EA:BB:70:29:28:61:E2:68:68:98:33:F7:7F:2E:0B
Authority key identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
Certificate issuer: /CN=184c7c0364f1093cfc584c93037024104fb4854a
Certificate serial: 019CAA219DE97224C2E14D1FF81A482C5ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
Manifest number: 123D
Signing time: Sun 01 Mar 2026 16:00:55 +0000
Manifest this update: Sun 01 Mar 2026 16:00:55 +0000
Manifest next update: Mon 02 Mar 2026 16:00:55 +0000
Files and hashes: 1: GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl (hash: T21io/YyrgqJsCIlbkzksP1f93ftoV7I3+xzUN4b5SI=)
2: UQ_3tdEvusxpKm6g-bRZq8tkD4E.roa (hash: s1CWyQo9MuJT6cKRpUhun2W2gEgTiwk/dhUNwuJXn1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:9d:e9:72:24:c2:e1:4d:1f:f8:1a:48:2c:5a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184c7c0364f1093cfc584c93037024104fb4854a
Validity
Not Before: Mar 1 16:00:55 2026 GMT
Not After : Mar 2 16:00:55 2026 GMT
Subject: CN=09910dbc73eabb70292861e268689833f77f2e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:7e:7f:ed:17:ef:6d:5f:62:69:1b:61:f7:
ad:37:e0:0e:89:60:5f:34:b2:4c:74:e7:0a:94:3c:
21:8e:f4:98:7c:cc:d6:2a:1e:5a:ab:26:35:ae:26:
3c:33:47:34:3f:64:4a:82:5a:ae:e1:13:80:dd:a8:
08:88:fa:95:73:03:be:2b:1a:67:74:d8:a1:5f:78:
b3:fd:11:3e:23:f6:f0:98:62:2c:ff:ed:95:ff:91:
b4:40:77:69:9a:fe:1e:7e:8c:54:d1:f3:30:fd:e8:
a4:13:5f:1a:45:7d:85:db:10:21:94:26:de:75:ec:
37:38:9e:0e:63:a2:9b:ac:d7:e9:74:e3:9e:b7:b9:
5e:0d:0c:dc:08:a2:96:70:85:55:4a:b3:13:65:1c:
87:f5:71:ad:6b:8d:81:64:11:75:c4:12:ad:e1:14:
9c:ed:2a:1e:a9:f5:74:c1:b3:90:65:e3:c6:64:ca:
83:27:3d:94:c4:06:44:3f:6e:d1:0b:f1:8f:1e:52:
e2:4b:ab:3d:12:9d:70:a2:08:48:d8:65:67:6e:5a:
fd:2d:f5:05:f5:b5:6f:44:4a:9b:9b:09:e6:1c:29:
10:b6:0e:26:fc:96:48:40:d7:85:ee:78:2d:44:5e:
9a:21:7b:f4:4d:5d:94:ac:36:f0:5c:03:7f:74:8f:
97:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:91:0D:BC:73:EA:BB:70:29:28:61:E2:68:68:98:33:F7:7F:2E:0B
X509v3 Authority Key Identifier:
keyid:18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4c:d4:ec:07:bd:40:87:c5:85:c0:a8:67:c3:31:d3:42:d3:
77:7f:00:2d:4d:2e:7e:ee:bf:fa:32:1e:1f:1d:78:a7:8e:e1:
f5:86:5a:15:d3:bf:9a:29:38:55:99:09:08:1a:fd:c1:a0:ca:
53:56:58:39:df:cc:ef:5f:23:19:33:fc:74:47:b5:10:41:40:
bf:92:c1:bb:d2:08:7a:3a:14:10:32:2d:4b:7a:03:1c:76:e7:
20:f6:1a:94:52:5e:bc:34:1d:14:9f:88:a9:57:b2:66:d2:7b:
ca:85:4d:f8:2f:b9:39:4d:7f:42:1d:fd:3c:df:34:b3:58:b6:
9f:dd:93:0c:74:04:d8:f1:09:bd:20:18:de:6c:d7:d3:cb:e7:
8a:22:13:70:80:45:22:8e:60:9c:f6:2b:5b:21:c5:e7:84:a8:
c3:18:a4:76:7c:08:fa:47:15:43:07:16:4c:5a:80:d1:60:7b:
67:14:5d:2f:b8:d1:2d:f9:4f:50:a2:ec:ba:14:bf:73:0a:bf:
ba:59:b2:4b:db:03:8a:46:8c:0d:79:e7:11:3f:8e:fb:d7:7a:
e1:68:20:7b:f6:af:00:4a:b1:5f:a5:ac:85:23:b6:c1:68:36:
a9:40:a6:85:fd:da:0c:a4:77:2d:a3:12:d9:ec:06:05:5b:61:
51:4e:bd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:47 2026 by rpki-client