Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
File: Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft (raw, json)
Hash identifier: t+VDjheRTcABgeKeFfdjMtPdtojJ9+CpIQYVoBJeHOY=
Subject key identifier: 35:60:61:D2:71:C1:B1:3A:48:F4:24:7C:DF:13:F6:CE:AF:97:41:0D
Authority key identifier: 19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
Certificate issuer: /CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Certificate serial: 019CACEBB1B4D5D464E8581D0D5BE7AB58CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
Manifest number: 08F6
Signing time: Mon 02 Mar 2026 05:00:53 +0000
Manifest this update: Mon 02 Mar 2026 05:00:53 +0000
Manifest next update: Tue 03 Mar 2026 05:00:53 +0000
Files and hashes: 1: Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl (hash: gy7HqbeS5nRF4s2ZNsQoXmanSun7tPNIrEQgZ040HW4=)
2: yr7773JgZS-hoqRaLKVR30gkXMA.roa (hash: eoiybvDzfPEaKghr3+3isj8k5HkO1EDFC+psSZmz2v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:b1:b4:d5:d4:64:e8:58:1d:0d:5b:e7:ab:58:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Validity
Not Before: Mar 2 05:00:53 2026 GMT
Not After : Mar 3 05:00:53 2026 GMT
Subject: CN=356061d271c1b13a48f4247cdf13f6ceaf97410d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c6:6c:43:51:57:07:c0:aa:7c:06:57:83:a3:
7a:9a:c1:29:6e:6c:35:12:42:dc:ba:50:12:7e:18:
34:a7:97:9b:15:88:e3:94:bb:cb:65:db:97:71:09:
98:a2:a3:a9:91:de:b6:f4:07:a6:01:bf:9a:cf:f7:
19:83:b4:8e:4f:2f:53:bf:05:31:10:be:7b:f8:af:
02:d8:04:d4:a2:eb:30:ae:af:69:f8:a2:9c:9c:34:
5d:6d:39:e5:03:9a:23:4c:1e:47:7a:01:66:3e:7e:
0a:72:96:e1:c3:6e:29:f7:f6:42:76:47:6f:63:55:
a5:16:e8:5c:e2:c0:47:88:fe:3f:c3:17:fb:e7:8a:
2f:fb:cb:23:b2:f1:2e:a8:d8:e8:70:61:8b:2b:4a:
df:b2:15:be:69:38:2a:e8:d1:30:9c:18:89:4c:74:
7a:a4:f8:4f:37:ff:cc:73:a4:24:b8:23:ac:20:76:
d2:30:1b:64:84:ab:83:e5:e6:db:91:e2:26:9d:be:
b9:2d:51:56:be:f5:60:df:46:9e:f0:3a:9c:5b:39:
9c:ff:5d:7d:28:c0:be:c6:d2:8f:60:1f:09:d6:19:
32:86:2b:96:09:c2:0c:b9:0d:f0:75:bd:02:c3:be:
e0:17:b7:4b:be:14:89:ac:7e:86:1f:50:b4:20:34:
87:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:60:61:D2:71:C1:B1:3A:48:F4:24:7C:DF:13:F6:CE:AF:97:41:0D
X509v3 Authority Key Identifier:
keyid:19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d7:85:43:b7:8e:45:b3:64:67:25:7b:09:e4:9e:ae:98:f6:
24:84:ea:b7:56:82:80:c7:03:ab:00:e6:6d:81:40:3b:44:07:
52:19:33:65:3e:10:83:59:68:06:00:5d:9a:f9:b8:4c:f3:b7:
02:8d:62:78:c7:f9:ad:df:4f:62:01:a9:79:10:3b:8e:8a:b5:
80:67:54:2d:69:5c:cb:ca:92:73:a5:f2:b8:83:e9:8a:20:74:
3c:3e:06:86:37:59:24:06:0a:93:27:88:29:ac:30:ad:99:66:
d0:c7:e4:88:cd:e2:2b:fa:b8:79:ce:75:d6:3c:d0:56:b2:b9:
d3:34:82:41:c6:04:c3:5a:7b:cd:04:a0:d1:67:36:ed:4c:f9:
ab:93:27:85:60:8c:23:b9:ed:ad:ed:b9:21:d9:71:80:51:5e:
f3:da:f8:3a:1e:bb:5f:bb:73:52:3c:ec:19:79:d7:c8:9b:f4:
b6:dd:20:98:b3:05:3d:01:b6:bf:6e:4b:d2:c8:ed:a9:7d:34:
65:79:88:e0:62:41:e4:b0:54:33:d8:80:03:cf:a0:04:0e:1a:
64:d6:7f:17:04:9e:27:9d:5c:6d:0f:1b:4a:58:8f:40:9e:7f:
61:33:9f:a8:61:c4:cd:17:84:c1:2b:e6:49:af:3f:16:06:c8:
b9:9f:f9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:24 2026 by rpki-client