Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
File: ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json)
Hash identifier: luUDq9ALOdZW1ZSKi11iujQinnOBdP1BPsxB+JXngAk=
Subject key identifier: 01:7F:F3:B8:C9:9A:D5:D0:25:01:07:54:86:73:A2:D8:02:64:CB:E0
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 019CAAC679747CA26B3ECAE598161D4440A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
Manifest number: 1863
Signing time: Sun 01 Mar 2026 19:00:59 +0000
Manifest this update: Sun 01 Mar 2026 19:00:59 +0000
Manifest next update: Mon 02 Mar 2026 19:00:59 +0000
Files and hashes: 1: 1-NC7tshaF2ypJ8_MjHNn7wk6ylg.roa (hash: jCwzjmjn98JT6TSQJ5ZYF1MDhZK9lKwwZgcySCCZS8w=)
2: 5c7H8SSd8WodyqmqDN5GvggoaoM.roa (hash: qBOLerlIJoa7BKt/R5Lw677HOskLz3tOFy/2jSf7/WU=)
3: AQBZKKUw0CfqLnDcy9hcMLkcBVQ.roa (hash: e8Nsfm4NARCM4kcuUWqaXIOJHBmE9O9GAIR9R4lcjmA=)
4: VuSedNq080u42oe8PtK90QTYvdk.roa (hash: ZZTjW9ToPnYbK8YX5tY0XOAbcYCc6gHAC9O1wsgeddc=)
5: XiqMdLxfKoUjx95VMJtJvMxAZvY.roa (hash: SXoL5HuxIAiQquuEruAdXQNKyAHRVH7HOzbYGfTqh5A=)
6: bVitBPgZXTQtQI1h9qes3hDRRxY.roa (hash: tqq2V5OTdPLeDjlXCD6tq05OTPazJPQl/dxmKD2F5i4=)
7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: tfadDZ7HCyPLpuNuyhVQT3YLdBK7pjvm4riYfO+lofk=)
8: nQU1rY2ErLKpGm3xNOk2Vd6maac.roa (hash: I6X6MYBEOfSMB0M7TNs7z1Yj80MN+WqIyp43IIumKAY=)
9: zT2SVobKOrqCSSH6tmxWYylcNJ0.roa (hash: +n2XEQtkvSldlIzuGKqZcGU0lIa7VYbzPW0ct3CZyds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:79:74:7c:a2:6b:3e:ca:e5:98:16:1d:44:40:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Mar 1 19:00:59 2026 GMT
Not After : Mar 2 19:00:59 2026 GMT
Subject: CN=017ff3b8c99ad5d0250107548673a2d80264cbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:30:fe:14:5c:96:96:06:31:28:b7:3e:e0:c6:
3a:7a:31:2f:52:33:e9:59:61:19:c8:a1:af:64:08:
8a:04:4f:b2:ad:7e:e1:cb:04:af:83:d3:dd:25:70:
04:84:5f:53:d8:77:31:4c:12:0b:35:97:d3:ac:a2:
c0:84:1c:aa:6f:15:b2:22:ea:97:22:fd:8b:6d:8f:
55:05:19:26:91:c9:0a:bc:fd:bb:20:03:6a:8e:cd:
66:19:5d:5a:cb:be:1f:b2:73:d9:97:92:ff:91:4a:
d4:c9:e2:6a:86:db:ee:2f:58:22:2b:16:9f:7f:e0:
1d:48:a7:5a:b3:46:88:89:7e:f5:aa:79:6f:60:df:
51:8f:94:12:f7:74:7d:a6:cb:61:5c:ef:e7:e0:a9:
41:d7:81:ab:68:67:69:09:f4:b9:fc:58:63:55:22:
8d:42:2f:2a:7d:0f:9c:19:84:d8:2c:e3:f7:91:1b:
e7:eb:12:94:8d:d8:1f:fa:3d:b2:c6:14:0e:df:5d:
dd:5e:ee:7d:a2:3c:81:ff:f4:96:53:60:c7:02:d9:
c3:d5:61:e0:c0:ce:48:46:5b:8d:9b:3e:37:92:ac:
12:ce:a5:14:57:e6:a5:c9:6e:dc:4b:dd:00:78:a1:
0e:c6:18:fe:78:6b:75:78:f8:ae:49:4c:a8:af:9a:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7F:F3:B8:C9:9A:D5:D0:25:01:07:54:86:73:A2:D8:02:64:CB:E0
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d4:77:38:4d:99:f4:3e:38:06:b5:e8:b8:69:b0:5d:31:0e:
24:10:57:e7:5f:e0:85:2f:6e:85:ad:dc:fd:de:36:a4:8c:3c:
55:ac:5e:d0:67:67:cd:f2:13:8e:70:a8:b2:ea:eb:d6:28:f8:
a7:46:1e:4d:f3:5d:f5:b6:80:61:b7:bd:85:65:cb:f2:ba:3f:
de:4d:7b:43:c2:0a:51:df:80:e6:6c:0b:41:3f:74:f2:ea:3c:
be:22:04:cb:dc:8a:f0:5e:d7:22:5f:5c:d9:b3:05:65:dd:bd:
30:93:95:85:86:43:a2:8d:fc:59:e8:ba:b9:ec:56:6d:2b:8b:
3c:a6:5d:e2:f9:2b:58:10:06:60:94:6b:3f:98:b9:ed:9d:09:
3a:c7:81:91:ec:d4:74:a6:6c:18:a8:09:ad:97:bb:fa:af:44:
b2:7d:28:8b:7a:8f:c5:7e:a2:3f:ed:ee:6e:89:25:5f:4d:d1:
88:d8:98:97:fe:8c:83:b8:98:ba:f4:2a:2e:79:e2:41:fb:b3:
ce:c4:c1:da:5d:71:c2:10:8c:e2:6a:61:36:7f:d3:31:34:34:
4d:df:7e:64:fd:94:b7:e3:0a:1f:3d:6d:ff:73:8f:31:13:2d:
8e:a5:22:ac:25:cc:61:19:24:3a:5c:ae:d0:01:1f:e6:f8:9c:
71:40:a4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:18 2026 by rpki-client