Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
File: ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json)
Hash identifier: AgBtBJgkPGGksV9LWkSCvfjoRX2rhxdF0bYONM+XK0c=
Subject key identifier: 85:7D:36:18:EB:0F:68:97:2A:72:BC:FD:27:46:B1:42:B4:92:D2:B9
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 019FAB633274F4182EA187DC4230C1302E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
Manifest number: 19F3
Signing time: Wed 29 Jul 2026 01:00:32 +0000
Manifest this update: Wed 29 Jul 2026 01:00:32 +0000
Manifest next update: Thu 30 Jul 2026 01:00:32 +0000
Files and hashes: 1: AQBZKKUw0CfqLnDcy9hcMLkcBVQ.roa (hash: e8Nsfm4NARCM4kcuUWqaXIOJHBmE9O9GAIR9R4lcjmA=)
2: Us-vXa-60ckWPiugXWQ_x4JuseE.roa (hash: enmgWwaQKeKIKYlxJaQsj5pZN2wULNXLovWU/A2zDQ4=)
3: VuSedNq080u42oe8PtK90QTYvdk.roa (hash: ZZTjW9ToPnYbK8YX5tY0XOAbcYCc6gHAC9O1wsgeddc=)
4: XiqMdLxfKoUjx95VMJtJvMxAZvY.roa (hash: SXoL5HuxIAiQquuEruAdXQNKyAHRVH7HOzbYGfTqh5A=)
5: Z9B94VUuwMzLp1J1_UmV3P3-Bog.roa (hash: b0gWVuQa3wcBnwLUc4jIKMufXEjkfGFHau8pBV9DYlo=)
6: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: nKVHZTvg2fyLNVZN0649a9ubGq3qJM5Wdecm99CYV28=)
7: mYgjhTH0BS3qrs0ZjiO_8_EBYtI.roa (hash: CgpuCBWQUKpo80yS5uyAF0yCv9LrXxgg9n9BYvmd7yM=)
8: nQU1rY2ErLKpGm3xNOk2Vd6maac.roa (hash: I6X6MYBEOfSMB0M7TNs7z1Yj80MN+WqIyp43IIumKAY=)
9: nopQAUQRG4jx5x4s6u3QK-MZsbg.roa (hash: RDH8P9E/bjc7kW3A05V8yS4BKO/L6buzS6KDDdD3BXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:32:74:f4:18:2e:a1:87:dc:42:30:c1:30:2e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Jul 29 01:00:32 2026 GMT
Not After : Jul 30 01:00:32 2026 GMT
Subject: CN=857d3618eb0f68972a72bcfd2746b142b492d2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:5f:14:16:15:42:47:a1:bc:12:2e:62:89:
bd:72:48:c1:c9:1a:08:b6:88:72:3d:aa:84:76:e6:
5d:7b:57:30:40:cb:e6:14:81:35:3a:30:75:f7:48:
27:6e:17:34:0e:5d:2a:a8:c4:0c:cd:8c:97:ee:f2:
30:8a:aa:20:06:74:2d:df:60:6a:9c:27:72:5e:52:
f3:49:63:21:b7:32:7e:29:86:d5:91:fb:d2:07:b3:
fe:29:e6:45:3d:ed:c1:9b:92:62:ee:ee:76:d7:77:
7c:b1:4a:6b:88:b5:21:68:86:de:5c:55:b5:ba:1f:
ef:9c:00:32:0c:e3:31:f8:cd:38:a5:37:f9:4b:50:
a0:3c:dd:24:a0:01:b5:38:6f:35:f4:54:c4:0c:3d:
17:e2:e9:67:1c:c7:15:44:d6:c0:7a:c3:33:81:d3:
54:45:c7:ce:ce:ac:83:33:ed:47:43:35:bc:9c:57:
c7:f0:98:4f:f4:99:dc:da:be:cc:c0:81:a8:e1:cc:
55:68:fa:25:b0:d3:ba:9b:d4:a8:f7:87:3d:ba:1c:
3b:17:39:be:af:41:ae:e2:70:de:55:e7:9f:87:9a:
64:88:fd:46:9f:88:16:e5:bc:11:4c:3d:1e:fe:a0:
2f:14:34:d5:18:90:bc:66:b9:10:aa:db:da:1c:86:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7D:36:18:EB:0F:68:97:2A:72:BC:FD:27:46:B1:42:B4:92:D2:B9
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:df:be:b5:4e:e2:5c:88:f1:53:5f:4a:1f:ce:fa:7c:01:c7:
49:05:6a:6d:b5:8a:8a:ee:27:fe:d7:c1:3c:19:76:2c:8a:f3:
e9:f3:56:72:d3:7c:a5:24:70:e7:6d:bd:70:d3:3a:87:94:54:
a0:66:d7:af:52:fd:e7:e4:ae:20:95:ec:51:38:f9:dd:5b:fb:
b8:7f:5d:0f:4b:d1:3b:da:4f:31:43:a0:7c:0e:83:ec:34:82:
58:14:32:61:c9:91:46:d2:c9:14:f4:0e:96:2a:66:c5:73:f3:
87:37:b7:8f:3e:71:48:cf:9f:fc:71:25:ac:31:6b:75:f3:0a:
f6:17:9f:85:ea:e5:ec:03:91:3d:de:35:ca:54:a5:96:1b:74:
5a:0d:d4:c8:1d:42:31:0b:a6:65:d0:63:59:67:8e:b9:1d:28:
d7:c2:2b:98:51:79:b1:da:41:c9:4f:8f:ef:f6:ee:11:1c:a5:
04:50:20:21:db:de:ed:1b:a0:9f:59:0b:28:d0:4c:d1:a5:e3:
73:fd:3d:25:eb:01:e5:71:7f:bd:10:97:79:36:5d:02:3f:07:
68:4c:06:72:eb:4a:30:2f:c6:b9:6d:96:a9:c9:6c:16:be:e3:
b3:db:22:fb:ba:af:a3:20:16:c5:2e:f1:fb:90:b9:80:fd:af:
7d:bd:d8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:10:43 2026 by rpki-client