Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
File: ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json)
Hash identifier: LC75S4XkwmEClpMT0Zho0fkckVywXICd71reZprI0wA=
Subject key identifier: 09:66:68:D4:29:62:A3:C9:C8:35:4C:E1:CF:8E:67:75:F8:8B:AD:FD
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 019CACB4DA83E76830B8CC9907D7C8E6B265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
Manifest number: 1864
Signing time: Mon 02 Mar 2026 04:00:59 +0000
Manifest this update: Mon 02 Mar 2026 04:00:59 +0000
Manifest next update: Tue 03 Mar 2026 04:00:59 +0000
Files and hashes: 1: 1-NC7tshaF2ypJ8_MjHNn7wk6ylg.roa (hash: jCwzjmjn98JT6TSQJ5ZYF1MDhZK9lKwwZgcySCCZS8w=)
2: 5c7H8SSd8WodyqmqDN5GvggoaoM.roa (hash: qBOLerlIJoa7BKt/R5Lw677HOskLz3tOFy/2jSf7/WU=)
3: AQBZKKUw0CfqLnDcy9hcMLkcBVQ.roa (hash: e8Nsfm4NARCM4kcuUWqaXIOJHBmE9O9GAIR9R4lcjmA=)
4: VuSedNq080u42oe8PtK90QTYvdk.roa (hash: ZZTjW9ToPnYbK8YX5tY0XOAbcYCc6gHAC9O1wsgeddc=)
5: XiqMdLxfKoUjx95VMJtJvMxAZvY.roa (hash: SXoL5HuxIAiQquuEruAdXQNKyAHRVH7HOzbYGfTqh5A=)
6: bVitBPgZXTQtQI1h9qes3hDRRxY.roa (hash: tqq2V5OTdPLeDjlXCD6tq05OTPazJPQl/dxmKD2F5i4=)
7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: fbw4/0nLtpPwSTMVU3v0mFtVFag3syPZAymm2jFXRZw=)
8: nQU1rY2ErLKpGm3xNOk2Vd6maac.roa (hash: I6X6MYBEOfSMB0M7TNs7z1Yj80MN+WqIyp43IIumKAY=)
9: zT2SVobKOrqCSSH6tmxWYylcNJ0.roa (hash: +n2XEQtkvSldlIzuGKqZcGU0lIa7VYbzPW0ct3CZyds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:da:83:e7:68:30:b8:cc:99:07:d7:c8:e6:b2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Mar 2 04:00:59 2026 GMT
Not After : Mar 3 04:00:59 2026 GMT
Subject: CN=096668d42962a3c9c8354ce1cf8e6775f88badfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fe:e9:6f:13:c3:d2:97:2e:91:75:ce:95:8f:
11:47:32:36:45:fd:2a:9f:d3:73:5e:fe:ea:7c:fc:
33:a7:b2:f2:c7:95:bb:41:96:82:d1:b0:df:61:bb:
67:77:f4:19:a2:e0:f7:88:3c:fd:b4:3e:20:8e:83:
8e:16:82:2d:95:0f:59:0a:2b:22:68:46:ea:ee:39:
65:c4:6e:c1:4e:26:0b:77:cb:33:49:93:55:4b:4f:
9a:b5:bf:4a:02:ca:71:5b:ce:6a:96:6d:ac:91:56:
d5:e5:2e:3e:93:94:ce:38:b0:aa:86:52:89:df:48:
2a:ac:7c:42:79:f8:1e:e6:39:33:d7:51:f1:5f:14:
f1:f6:80:da:6b:b7:e1:d2:d5:69:6a:ad:27:e9:77:
29:70:17:fa:4b:73:bd:d4:c0:e7:23:fe:40:f2:1c:
e2:06:e0:f8:78:85:0a:66:38:3f:70:ed:ae:95:fb:
a0:c3:16:bd:0f:09:d2:02:1c:59:2b:fd:6a:11:c2:
3f:13:59:5a:d6:e1:2a:ca:22:ca:58:89:83:59:9c:
62:9f:23:50:e2:f7:7b:d2:2f:2e:9c:05:25:29:1c:
e1:0b:fc:93:d6:1c:5c:c2:3a:38:11:99:9f:52:c7:
24:ce:8a:f5:05:7f:e2:75:6d:18:6b:df:cd:c9:d5:
69:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:66:68:D4:29:62:A3:C9:C8:35:4C:E1:CF:8E:67:75:F8:8B:AD:FD
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:df:05:c0:0a:12:4f:5e:c0:5b:53:eb:e1:e8:eb:ca:d5:61:
b3:37:b7:8c:69:6c:93:83:0d:f9:43:2e:39:49:0e:56:44:a0:
d6:9f:94:99:ee:e8:2b:0f:84:a4:c5:10:e7:1f:46:6a:de:09:
c8:1f:7d:71:86:22:0a:10:6e:de:89:31:89:e2:16:6e:10:1b:
4d:a0:89:0a:1a:20:d2:60:6b:81:20:04:f2:45:1e:0b:ef:c2:
e0:f3:73:ce:e6:30:a8:db:54:1c:04:e3:0c:a3:b4:d8:e4:f9:
d2:a7:45:13:7a:21:19:61:78:a8:18:d4:d7:2d:3e:dd:10:5d:
81:38:64:1a:c7:5d:ad:90:33:6c:3d:ab:b8:db:a8:df:77:c6:
ff:ba:2b:8d:82:60:9d:ce:e1:0e:ed:a5:23:1e:0d:57:e2:9e:
ad:50:01:7c:6d:e8:36:7d:e9:b9:bf:0b:c1:75:da:50:83:ae:
f7:79:4f:aa:48:74:7d:bc:4c:5e:ed:ca:99:cc:6c:1c:fa:98:
88:3a:d6:e5:93:72:7f:60:7e:4a:11:02:02:06:84:35:e4:d3:
a5:7a:06:05:7c:24:a5:7d:7f:12:bc:6a:70:9b:67:d9:db:06:
5e:de:d0:2d:2a:96:9b:53:87:ab:07:e7:a1:db:7d:b8:4a:70:
65:29:99:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystNqD52gwuMyZB9fI5rJlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZWVkNDA5MTM4M2Q5ZWQ0MDU2ZDlmNGVmZjdkMjYyMmRk
Y2UyMDUwHhcNMjYwMzAyMDQwMDU5WhcNMjYwMzAzMDQwMDU5WjAzMTEwLwYDVQQD
EygwOTY2NjhkNDI5NjJhM2M5YzgzNTRjZTFjZjhlNjc3NWY4OGJhZGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1f7pbxPD0pcukXXOlY8RRzI2Rf0q
n9NzXv7qfPwzp7Lyx5W7QZaC0bDfYbtnd/QZouD3iDz9tD4gjoOOFoItlQ9ZCisi
aEbq7jllxG7BTiYLd8szSZNVS0+atb9KAspxW85qlm2skVbV5S4+k5TOOLCqhlKJ
30gqrHxCefge5jkz11HxXxTx9oDaa7fh0tVpaq0n6XcpcBf6S3O91MDnI/5A8hzi
BuD4eIUKZjg/cO2ulfugwxa9DwnSAhxZK/1qEcI/E1la1uEqyiLKWImDWZxinyNQ
4vd70i8unAUlKRzhC/yT1hxcwjo4EZmfUsckzor1BX/idW0Ya9/NydVpewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlmaNQpYqPJyDVM4c+OZ3X4i639MB8GA1UdIwQY
MBaAFIHu1AkTg9ntQFbZ9O/30mIt3OIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2Et
ODcyYjM3MTBjMmExLzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2EtODcyYjM3MTBjMmEx
LzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMN8FwAoS
T17AW1Pr4ejrytVhsze3jGlsk4MN+UMuOUkOVkSg1p+Ume7oKw+EpMUQ5x9Gat4J
yB99cYYiChBu3okxieIWbhAbTaCJChog0mBrgSAE8kUeC+/C4PNzzuYwqNtUHATj
DKO02OT50qdFE3ohGWF4qBjU1y0+3RBdgThkGsddrZAzbD2ruNuo33fG/7orjYJg
nc7hDu2lIx4NV+KerVABfG3oNn3pub8LwXXaUIOu93lPqkh0fbxMXu3KmcxsHPqY
iDrW5ZNyf2B+ShECAgaENeTTpXoGBXwkpX1/ErxqcJtn2dsGXt7QLSqWm1OHqwfn
odt9uEpwZSmZLQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:49 2026 by rpki-client