Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
File: ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json)
Hash identifier: h6QdIAfooyIyDMvUrOBbBcnqijFHdsUT7YLCtkaQea8=
Subject key identifier: D7:79:FD:F3:BD:B3:F6:2C:43:96:18:C9:EE:0C:5C:A1:7E:3F:B1:6D
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 01A0C1E89214F06505D6D6090C1817FEB4DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
Manifest number: 1A84
Signing time: Mon 21 Sep 2026 03:00:39 +0000
Manifest this update: Mon 21 Sep 2026 03:00:39 +0000
Manifest next update: Tue 22 Sep 2026 03:00:39 +0000
Files and hashes: 1: 3DDg52P7n4FePE0i47AwGrPv6dM.roa (hash: JN+ncwPe3d1IMDKJefRKQ8fkZSEiIBJWK5qU4JCw5jI=)
2: AQBZKKUw0CfqLnDcy9hcMLkcBVQ.roa (hash: e8Nsfm4NARCM4kcuUWqaXIOJHBmE9O9GAIR9R4lcjmA=)
3: Us-vXa-60ckWPiugXWQ_x4JuseE.roa (hash: enmgWwaQKeKIKYlxJaQsj5pZN2wULNXLovWU/A2zDQ4=)
4: VuSedNq080u42oe8PtK90QTYvdk.roa (hash: ZZTjW9ToPnYbK8YX5tY0XOAbcYCc6gHAC9O1wsgeddc=)
5: XiqMdLxfKoUjx95VMJtJvMxAZvY.roa (hash: SXoL5HuxIAiQquuEruAdXQNKyAHRVH7HOzbYGfTqh5A=)
6: Z9B94VUuwMzLp1J1_UmV3P3-Bog.roa (hash: b0gWVuQa3wcBnwLUc4jIKMufXEjkfGFHau8pBV9DYlo=)
7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: dKHUjSLykiZKZdxrlOJCcLs0ie66dfYAIPWFCIj8TpM=)
8: mYgjhTH0BS3qrs0ZjiO_8_EBYtI.roa (hash: CgpuCBWQUKpo80yS5uyAF0yCv9LrXxgg9n9BYvmd7yM=)
9: nQU1rY2ErLKpGm3xNOk2Vd6maac.roa (hash: I6X6MYBEOfSMB0M7TNs7z1Yj80MN+WqIyp43IIumKAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:92:14:f0:65:05:d6:d6:09:0c:18:17:fe:b4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Sep 21 03:00:39 2026 GMT
Not After : Sep 22 03:00:39 2026 GMT
Subject: CN=d779fdf3bdb3f62c439618c9ee0c5ca17e3fb16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:88:aa:b3:73:f2:e3:bb:4b:83:4d:05:c9:bd:
8f:88:7b:6f:1a:3f:8b:55:33:42:e5:38:51:5f:d7:
cd:37:32:68:8b:b8:c5:33:1a:71:d8:84:8f:18:06:
4f:b0:30:29:8a:5e:e3:dd:cb:90:67:a8:95:f8:bf:
28:99:6a:eb:2c:a5:80:0f:6c:a9:c8:cb:1c:ec:62:
0f:b2:0f:2f:50:69:31:48:3b:77:99:15:4b:f1:4a:
86:b1:08:31:c9:ee:05:bc:84:1a:7d:4a:11:d4:64:
6a:90:4d:51:17:e8:87:d1:94:45:8f:d8:81:ab:c8:
b8:74:d8:41:ec:6a:7a:be:3d:10:03:34:9d:ec:14:
d6:af:34:57:d7:f0:2d:cc:18:29:8a:03:c8:89:92:
29:24:e6:d0:b3:91:c0:e6:ed:f8:d1:ce:a7:75:dd:
78:c2:fc:89:9f:a7:3d:87:9e:b9:b0:0a:d3:e0:38:
30:f3:b1:d6:40:2d:d7:d5:31:f3:39:55:42:71:a7:
30:a9:89:70:96:0f:af:ae:96:07:4d:c2:27:bb:6b:
83:bb:a5:0f:78:97:eb:e3:74:57:81:9d:9e:62:84:
78:75:e6:e1:fb:67:61:d8:ef:b7:c1:49:90:9c:e3:
45:82:1d:ce:61:a3:50:0f:c4:c1:8e:68:ad:8f:9f:
25:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:79:FD:F3:BD:B3:F6:2C:43:96:18:C9:EE:0C:5C:A1:7E:3F:B1:6D
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:bf:45:42:3b:2f:a7:47:84:ac:87:b6:4d:a7:c3:21:d0:77:
a1:82:57:8e:1a:3a:f1:19:a0:5c:ea:1b:c4:cf:26:19:74:13:
f1:69:c1:f5:db:61:f9:d1:8c:39:d3:1a:32:b9:ce:c4:21:e8:
be:58:26:1e:80:2e:f7:17:e7:86:25:b4:16:de:f8:6b:80:8e:
7c:24:59:f0:73:24:44:b3:ee:50:2b:31:4f:3f:e3:90:67:59:
53:ad:3c:31:7a:32:59:0f:76:54:a1:cf:56:15:a5:ae:31:ef:
f6:54:6c:99:1a:80:40:0a:a2:73:ea:54:1a:46:2a:a6:ed:cd:
21:77:79:ef:18:4c:b5:4e:58:e3:ad:ba:11:21:f2:3a:c7:da:
db:63:4e:3a:c3:c2:48:71:0d:79:bd:75:ce:2a:77:5d:84:a3:
69:1b:22:42:df:d0:8e:53:07:6f:ac:af:21:8e:21:5b:fc:b6:
41:87:06:03:82:68:61:80:6f:57:eb:1d:40:c1:14:65:1c:3b:
90:6f:fe:7a:78:cb:a7:c1:5d:0f:5f:42:ca:ef:f9:a4:70:1d:
2b:9c:e3:4b:0c:15:7a:e4:4c:3b:d2:89:a1:fc:7f:58:65:04:
82:ac:79:e9:07:85:09:59:00:31:80:39:a3:d2:76:3a:cf:29:
f4:ca:1b:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDB6JIU8GUF1tYJDBgX/rTdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZWVkNDA5MTM4M2Q5ZWQ0MDU2ZDlmNGVmZjdkMjYyMmRk
Y2UyMDUwHhcNMjYwOTIxMDMwMDM5WhcNMjYwOTIyMDMwMDM5WjAzMTEwLwYDVQQD
EyhkNzc5ZmRmM2JkYjNmNjJjNDM5NjE4YzllZTBjNWNhMTdlM2ZiMTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oiqs3Py47tLg00Fyb2PiHtvGj+L
VTNC5ThRX9fNNzJoi7jFMxpx2ISPGAZPsDApil7j3cuQZ6iV+L8omWrrLKWAD2yp
yMsc7GIPsg8vUGkxSDt3mRVL8UqGsQgxye4FvIQafUoR1GRqkE1RF+iH0ZRFj9iB
q8i4dNhB7Gp6vj0QAzSd7BTWrzRX1/AtzBgpigPIiZIpJObQs5HA5u340c6ndd14
wvyJn6c9h565sArT4Dgw87HWQC3X1THzOVVCcacwqYlwlg+vrpYHTcInu2uDu6UP
eJfr43RXgZ2eYoR4debh+2dh2O+3wUmQnONFgh3OYaNQD8TBjmitj58l4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNd5/fO9s/YsQ5YYye4MXKF+P7FtMB8GA1UdIwQY
MBaAFIHu1AkTg9ntQFbZ9O/30mIt3OIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2Et
ODcyYjM3MTBjMmExLzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2EtODcyYjM3MTBjMmEx
LzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo79FQjsv
p0eErIe2TafDIdB3oYJXjho68RmgXOobxM8mGXQT8WnB9dth+dGMOdMaMrnOxCHo
vlgmHoAu9xfnhiW0Ft74a4COfCRZ8HMkRLPuUCsxTz/jkGdZU608MXoyWQ92VKHP
VhWlrjHv9lRsmRqAQAqic+pUGkYqpu3NIXd57xhMtU5Y4626ESHyOsfa22NOOsPC
SHENeb11zip3XYSjaRsiQt/QjlMHb6yvIY4hW/y2QYcGA4JoYYBvV+sdQMEUZRw7
kG/+enjLp8FdD19Cyu/5pHAdK5zjSwwVeuRMO9KJofx/WGUEgqx56QeFCVkAMYA5
o9J2Os8p9Mobcg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:05:42 2026 by rpki-client