Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
File: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft (raw, json)
Hash identifier: DdThRGwo8goJCFkXcumy052V33pFJyCmoqUfy+zxPIM=
Subject key identifier: 93:8D:C1:E0:E3:58:0E:F6:2C:84:A6:A3:93:66:09:DE:56:AD:BB:B0
Authority key identifier: 19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56
Certificate issuer: /CN=19e3d11f72ddbed8361285b499b932191203b756
Certificate serial: 019CAD2267C66851DFFB9E7B472F540758DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
Manifest number: 073B
Signing time: Mon 02 Mar 2026 06:00:38 +0000
Manifest this update: Mon 02 Mar 2026 06:00:38 +0000
Manifest next update: Tue 03 Mar 2026 06:00:38 +0000
Files and hashes: 1: DKPrKwEm9w_rRG3TMuhv1McAamk.roa (hash: 4OtFjtxkmUmlHY70yrx1zCjgip8Y0WBSl5BdZAXK0TQ=)
2: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl (hash: 2ehtQl/5wc80k0lC4vdFJwk6zrO7H1DXR/wMeujqK1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:67:c6:68:51:df:fb:9e:7b:47:2f:54:07:58:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e3d11f72ddbed8361285b499b932191203b756
Validity
Not Before: Mar 2 06:00:38 2026 GMT
Not After : Mar 3 06:00:38 2026 GMT
Subject: CN=938dc1e0e3580ef62c84a6a3936609de56adbbb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:d6:6b:34:4b:f6:4b:8d:29:58:16:8f:89:
4a:cd:5a:b5:fb:8f:16:ca:4b:32:d8:ee:cb:e9:a9:
5e:04:85:74:9d:ee:1f:1b:07:c4:12:de:c7:7e:d0:
27:c8:c9:59:89:9e:ad:85:fa:86:a2:32:2e:22:36:
2a:fa:cd:16:69:7c:9c:51:de:28:e6:75:65:55:c0:
cc:ef:93:99:67:9b:d8:41:cd:0a:0d:b5:45:0d:81:
10:e0:a6:78:a2:0c:f0:ea:c5:ff:87:df:af:c2:92:
d8:0c:d5:45:e8:7d:2c:6e:77:fa:8a:e9:41:d2:47:
e6:4f:93:21:71:fa:46:87:48:ba:ad:ba:2c:d1:6a:
fb:a8:8d:47:6c:09:cc:af:e5:77:f1:d1:1d:c8:26:
27:10:01:ce:3a:8b:a1:70:ca:ec:53:d4:e6:bd:6b:
8c:65:b7:c6:72:b3:43:6e:64:07:f7:7d:e9:d8:c0:
af:78:8d:e4:27:a7:c0:9a:f4:31:06:be:6d:d4:3e:
ca:df:ba:e7:02:64:b3:9b:ab:09:76:7a:95:11:d5:
7f:5f:ea:a4:0b:f2:f7:08:74:67:7e:18:44:48:7e:
10:13:a5:f7:0e:cf:39:cd:64:c1:94:ed:dc:95:fc:
98:69:fa:86:6c:dd:32:42:01:d3:a1:e5:61:bb:8e:
a9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8D:C1:E0:E3:58:0E:F6:2C:84:A6:A3:93:66:09:DE:56:AD:BB:B0
X509v3 Authority Key Identifier:
keyid:19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:59:a0:93:4f:14:9a:a8:c5:cb:51:c3:4f:cf:f4:ea:1c:22:
4f:12:92:b7:70:5b:29:c5:19:d5:29:7f:a7:98:2e:06:9c:d7:
86:92:02:ff:bc:ea:67:85:d8:79:ac:52:ad:61:30:51:a9:8d:
70:ac:99:0f:b9:58:ee:fd:e8:d2:ee:8a:85:6e:17:a1:dc:e6:
3e:d1:42:db:9a:c0:fb:41:ce:bc:4c:a4:f6:03:95:0c:ff:f2:
db:63:c7:03:6d:54:d4:15:f9:f5:fb:bb:c2:92:65:58:1e:f8:
fd:28:93:54:98:4c:d2:cc:53:4a:be:ae:90:f2:2b:cf:12:50:
4b:a2:c7:28:da:f4:91:01:28:85:7c:5c:8a:29:cd:46:2b:ac:
c7:6c:fe:0b:2c:c9:71:fa:97:7a:01:76:4f:aa:a8:bc:69:b7:
ce:2b:c2:e3:77:5e:4b:20:4b:dd:2c:51:3d:01:c7:55:76:05:
a3:e5:ca:9b:1a:3e:98:ff:62:35:db:0d:cd:fa:81:60:2b:c9:
6f:35:09:9e:7a:75:1f:c3:bb:5e:95:d0:6e:b5:c5:db:6b:ca:
5b:c8:b7:53:ef:35:f1:c8:2b:b8:f8:31:7c:de:66:46:28:93:
c2:8f:2b:1b:d5:0c:db:35:25:68:13:d7:4b:e1:aa:2f:99:2b:
63:f2:b9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:10 2026 by rpki-client