Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
File: Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft (raw, json)
Hash identifier: b6EAKdCRdxIcmO44lnTxAxcRaI5jAT42pOjVa3UMgfM=
Subject key identifier: 2B:CF:86:E1:A2:1D:7E:9A:52:D1:30:2D:70:C5:F0:63:45:40:F8:03
Authority key identifier: 19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
Certificate issuer: /CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Certificate serial: 019D9A7495649332BC0A28718FF8973A25FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
Manifest number: 0971
Signing time: Fri 17 Apr 2026 08:00:24 +0000
Manifest this update: Fri 17 Apr 2026 08:00:24 +0000
Manifest next update: Sat 18 Apr 2026 08:00:24 +0000
Files and hashes: 1: Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl (hash: /vyYafzFYEqscGx7yTvbR0ONpsIHZUysAztJIjVk9L8=)
2: yr7773JgZS-hoqRaLKVR30gkXMA.roa (hash: eoiybvDzfPEaKghr3+3isj8k5HkO1EDFC+psSZmz2v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:95:64:93:32:bc:0a:28:71:8f:f8:97:3a:25:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Validity
Not Before: Apr 17 08:00:24 2026 GMT
Not After : Apr 18 08:00:24 2026 GMT
Subject: CN=2bcf86e1a21d7e9a52d1302d70c5f0634540f803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f4:7e:90:69:0c:8b:7f:e8:95:f0:e8:f4:a1:
f0:2d:7e:76:cb:46:03:37:11:34:b6:01:fd:54:3b:
11:1a:de:7f:8f:10:f0:a0:63:c1:03:1a:10:fa:75:
60:db:6f:c8:ab:6e:d4:72:08:b3:ac:2d:40:46:92:
89:aa:23:0a:38:f0:79:5f:25:6e:29:fd:ec:5b:5d:
48:3e:e8:b8:ee:19:18:e8:e7:02:64:67:dc:d6:ae:
0d:b9:08:ad:a1:ff:70:82:a0:e3:19:2f:96:d9:a7:
7a:19:7a:f3:0e:9e:ac:20:c9:91:e8:26:c9:8e:6d:
77:c3:65:23:69:26:73:ae:45:a2:96:84:e4:e7:97:
2c:bc:43:fc:43:e0:31:24:86:df:ab:a4:98:a3:12:
4d:50:14:6a:59:f6:b5:f1:cc:00:ca:34:f7:10:fa:
2c:43:7b:5a:12:ac:26:64:f3:62:4a:97:22:5f:75:
33:17:2f:c8:9b:bd:ee:75:e8:95:9d:e9:b7:12:ad:
fc:a1:7c:cb:04:49:38:47:f4:66:f3:5f:26:ac:7c:
3a:91:b5:30:10:3c:f5:1d:b5:ab:e5:82:bf:68:3f:
dd:86:32:a5:b9:60:fc:39:c3:31:d0:81:4d:51:65:
50:fa:1d:75:2c:48:90:66:d0:2b:84:ff:a3:d5:1a:
33:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CF:86:E1:A2:1D:7E:9A:52:D1:30:2D:70:C5:F0:63:45:40:F8:03
X509v3 Authority Key Identifier:
keyid:19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f5:d9:e2:bf:cd:fd:2d:ea:d2:64:67:b8:e8:56:66:14:64:
83:1d:66:d9:3f:4e:1f:1d:39:47:86:20:ba:66:5f:70:c3:5a:
b2:33:0c:64:c9:91:b7:7e:11:26:74:3f:e7:0f:38:aa:ea:5b:
e0:ce:d2:13:a4:27:00:e7:23:d7:10:30:e9:08:79:ae:de:82:
df:06:85:ac:2a:f7:1f:a0:f6:8d:75:87:b6:ef:70:a4:0a:a0:
ee:a1:95:46:ca:c8:07:a3:85:37:95:43:1e:63:f0:94:de:cc:
c1:89:17:5f:49:65:ad:c3:ac:e2:42:54:bd:e3:62:f8:c5:3d:
2b:8d:23:3e:27:51:56:48:60:5b:a3:97:31:de:d5:00:b7:cd:
23:1a:12:a0:d4:9d:65:ec:27:b7:ee:b4:b2:cf:d6:eb:3d:2a:
36:3b:04:1c:f0:b1:a5:2e:9e:28:12:df:74:a6:9d:c6:e4:70:
46:53:05:05:52:94:ac:3e:4a:f7:d2:72:75:74:2f:bf:9d:a2:
b7:1d:07:03:cf:80:5f:48:59:6a:d5:6c:b1:4c:bb:fc:1f:b9:
5c:e6:43:e6:fa:05:62:70:87:7c:e6:95:a7:36:54:48:0b:df:
59:42:39:7e:d6:81:1d:70:16:e7:35:75:28:3e:0e:d8:18:4f:
a3:5b:c6:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adJVkkzK8Cihxj/iXOiX7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZWU2MTllZjk2YTNhZmQwMmZjMmQ1ZDAwM2E5NDdlNGQy
ZDU5MGEwHhcNMjYwNDE3MDgwMDI0WhcNMjYwNDE4MDgwMDI0WjAzMTEwLwYDVQQD
EygyYmNmODZlMWEyMWQ3ZTlhNTJkMTMwMmQ3MGM1ZjA2MzQ1NDBmODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfR+kGkMi3/olfDo9KHwLX52y0YD
NxE0tgH9VDsRGt5/jxDwoGPBAxoQ+nVg22/Iq27UcgizrC1ARpKJqiMKOPB5XyVu
Kf3sW11IPui47hkY6OcCZGfc1q4NuQitof9wgqDjGS+W2ad6GXrzDp6sIMmR6CbJ
jm13w2UjaSZzrkWiloTk55csvEP8Q+AxJIbfq6SYoxJNUBRqWfa18cwAyjT3EPos
Q3taEqwmZPNiSpciX3UzFy/Im73udeiVnem3Eq38oXzLBEk4R/Rm818mrHw6kbUw
EDz1HbWr5YK/aD/dhjKluWD8OcMx0IFNUWVQ+h11LEiQZtArhP+j1RozbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvPhuGiHX6aUtEwLXDF8GNFQPgDMB8GA1UdIwQY
MBaAFBnuYZ75ajr9AvwtXQA6lH5NLVkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2U1aG52bHFPdjBDX0MxZEFEcVVmazB0V1FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85ZWQ2ZDQtN2EwZC00MmI0LTk2ZTEt
ZWIyNzdhMjBmMjdmLzEvR2U1aG52bHFPdjBDX0MxZEFEcVVmazB0V1FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC85ZWQ2ZDQtN2EwZC00MmI0LTk2ZTEtZWIyNzdhMjBmMjdm
LzEvR2U1aG52bHFPdjBDX0MxZEFEcVVmazB0V1FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPXZ4r/N
/S3q0mRnuOhWZhRkgx1m2T9OHx05R4YgumZfcMNasjMMZMmRt34RJnQ/5w84qupb
4M7SE6QnAOcj1xAw6Qh5rt6C3waFrCr3H6D2jXWHtu9wpAqg7qGVRsrIB6OFN5VD
HmPwlN7MwYkXX0llrcOs4kJUveNi+MU9K40jPidRVkhgW6OXMd7VALfNIxoSoNSd
Zewnt+60ss/W6z0qNjsEHPCxpS6eKBLfdKadxuRwRlMFBVKUrD5K99JydXQvv52i
tx0HA8+AX0hZatVssUy7/B+5XOZD5voFYnCHfOaVpzZUSAvfWUI5ftaBHXAW5zV1
KD4O2BhPo1vGcA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:49 2026 by rpki-client