Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
File: ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json)
Hash identifier: pjT7Ugvqt3aS3fJ7wCny/8LVIlrJHYNWlOWaoyLdRDY=
Subject key identifier: 4F:49:B8:87:52:71:55:F1:C7:1D:12:95:67:09:C4:D2:BC:FF:B6:2B
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 019D9999079FD213BFB76222D3954FB426FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
Manifest number: 18DF
Signing time: Fri 17 Apr 2026 04:00:36 +0000
Manifest this update: Fri 17 Apr 2026 04:00:36 +0000
Manifest next update: Sat 18 Apr 2026 04:00:36 +0000
Files and hashes: 1: 1-NC7tshaF2ypJ8_MjHNn7wk6ylg.roa (hash: jCwzjmjn98JT6TSQJ5ZYF1MDhZK9lKwwZgcySCCZS8w=)
2: AQBZKKUw0CfqLnDcy9hcMLkcBVQ.roa (hash: e8Nsfm4NARCM4kcuUWqaXIOJHBmE9O9GAIR9R4lcjmA=)
3: OyAWaEIsKIgv7Jn7dBkCkStVk2s.roa (hash: eO/ApCHElrIH+bplHuQ650+apMsnEMyvMRDfoJCZCkY=)
4: VuSedNq080u42oe8PtK90QTYvdk.roa (hash: ZZTjW9ToPnYbK8YX5tY0XOAbcYCc6gHAC9O1wsgeddc=)
5: XiqMdLxfKoUjx95VMJtJvMxAZvY.roa (hash: SXoL5HuxIAiQquuEruAdXQNKyAHRVH7HOzbYGfTqh5A=)
6: bVitBPgZXTQtQI1h9qes3hDRRxY.roa (hash: tqq2V5OTdPLeDjlXCD6tq05OTPazJPQl/dxmKD2F5i4=)
7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: H8GCTAevSaQLqxq8ffACm9Q7r9GKCjo1ifJN/aRv2Y0=)
8: nQU1rY2ErLKpGm3xNOk2Vd6maac.roa (hash: I6X6MYBEOfSMB0M7TNs7z1Yj80MN+WqIyp43IIumKAY=)
9: zT2SVobKOrqCSSH6tmxWYylcNJ0.roa (hash: +n2XEQtkvSldlIzuGKqZcGU0lIa7VYbzPW0ct3CZyds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:07:9f:d2:13:bf:b7:62:22:d3:95:4f:b4:26:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Apr 17 04:00:36 2026 GMT
Not After : Apr 18 04:00:36 2026 GMT
Subject: CN=4f49b887527155f1c71d12956709c4d2bcffb62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:32:e2:a2:ad:82:61:2e:9c:e6:e9:15:d0:
8f:2c:06:18:1f:b5:f2:b8:cf:7f:ec:de:13:15:63:
38:80:82:9e:48:82:83:0a:81:00:a9:ac:3a:3a:70:
6b:36:df:d1:4d:31:e6:cb:45:37:e2:c3:81:44:5a:
a5:73:02:5b:81:24:f6:a9:d5:c6:ea:ef:86:54:78:
a2:be:24:bb:a7:03:fd:6a:82:83:9f:d3:bf:3a:5e:
c6:1b:d5:04:5c:1b:cd:fd:c1:c3:91:82:1f:73:3b:
b2:2a:fa:50:e6:23:8a:27:96:bb:37:54:12:da:7b:
79:2c:0a:d0:f3:5a:cb:cc:96:53:66:4c:8a:88:5b:
42:bc:64:32:bf:a4:94:1b:3b:70:9e:e4:df:d4:d3:
a0:72:41:b2:79:ce:1d:4a:c1:27:5b:f3:7d:cc:37:
73:d1:4d:77:66:48:fb:81:d5:b3:84:c6:93:4c:61:
a1:1e:f4:17:61:da:3f:ff:18:36:4e:d7:f8:3c:5e:
a5:e6:e8:74:0e:46:a0:61:bb:cd:da:59:c0:94:c4:
4f:56:bb:75:86:4f:47:7d:d7:fe:50:da:71:7a:fc:
4a:1e:8f:d6:ef:e5:17:84:7c:2f:18:c2:ba:29:f7:
34:ec:58:dc:34:9e:9b:6b:80:07:a9:f5:45:25:8f:
0d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:49:B8:87:52:71:55:F1:C7:1D:12:95:67:09:C4:D2:BC:FF:B6:2B
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:dd:70:d5:85:12:17:ed:b0:5c:d7:a8:16:15:a9:e7:bf:3e:
0a:4e:5a:d2:1d:8d:7c:aa:32:2a:8e:1b:87:e9:6f:3d:f6:e8:
4c:3d:9e:18:02:10:4f:39:78:85:d2:e1:4c:ae:5c:83:f2:ce:
80:a4:b5:c6:08:73:58:f9:0d:7d:95:01:f5:b1:3e:6a:82:e2:
07:16:b6:b0:f1:93:e2:bc:6a:9c:42:cd:21:48:93:ca:3f:b3:
24:18:a4:fe:47:e1:71:34:4a:10:16:f2:bd:d7:a1:6d:76:b3:
8b:ec:d5:3d:85:ed:ee:2b:a5:0c:dd:4c:83:5b:76:6b:6d:30:
68:11:65:42:c1:f3:de:40:1a:60:48:93:18:ab:36:52:c5:89:
d0:34:f6:96:d2:af:a2:01:2d:43:a8:3c:3d:82:af:22:71:73:
bd:b8:30:6e:64:c0:75:67:2a:4d:ca:97:05:4b:69:a7:66:ff:
f9:fb:4d:e2:fa:d1:50:b0:82:b7:85:8a:b5:77:20:2b:fe:ad:
71:92:b4:06:06:65:fc:7f:30:51:ac:45:2c:27:33:c2:19:ba:
89:88:a9:e3:13:5a:12:4c:2c:58:84:e9:8e:f2:d9:6f:67:d3:
3f:1c:99:06:ac:cf:41:64:5c:48:6f:df:ac:96:46:c8:45:aa:
16:a1:e9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:44:57 2026 by rpki-client