Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
File: gePml83W4iWsWxFhzfcE3pz8JlU.mft (raw, json)
Hash identifier: 2L/hSX1HhytwGp8vgw6KqLAef0+g39pP5KGT6VT1wJA=
Subject key identifier: 59:6A:AD:C3:5F:4E:B7:49:69:4C:8B:8E:58:FF:BF:41:6D:A0:5C:52
Authority key identifier: 81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
Certificate issuer: /CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Certificate serial: 01A104A4ED5A642E73D671B6B4535B20C61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
Manifest number: 0E59
Signing time: Sun 04 Oct 2026 02:01:19 +0000
Manifest this update: Sun 04 Oct 2026 02:01:19 +0000
Manifest next update: Mon 05 Oct 2026 02:01:19 +0000
Files and hashes: 1: E7jBDIqyZ11WO82f30hyB6Wv9ok.roa (hash: 4z+3nqji4gh4yjW7JtX0cO45G+UJjdxxeL8xg5cXbQc=)
2: gePml83W4iWsWxFhzfcE3pz8JlU.crl (hash: jgxcJFn95lmXByysJhVQPuk2fuRtEqqH1FwSCQteow0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:a4:ed:5a:64:2e:73:d6:71:b6:b4:53:5b:20:c6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Validity
Not Before: Oct 4 02:01:19 2026 GMT
Not After : Oct 5 02:01:19 2026 GMT
Subject: CN=596aadc35f4eb749694c8b8e58ffbf416da05c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7b:bb:f8:ba:dc:db:83:9e:4b:cd:d5:72:bf:
bc:a6:e6:f2:be:00:c6:47:d7:87:4a:8e:5b:7f:56:
f7:a3:7f:bb:cd:9f:5a:0e:b3:ef:2c:65:7d:cf:1d:
10:ee:f8:27:46:01:38:da:36:83:89:20:c8:09:b2:
03:08:3c:b9:34:a4:f5:23:65:c0:d4:c6:a1:15:c0:
2a:69:59:8f:0c:f1:14:51:a6:e3:e2:2b:04:9a:46:
d1:e7:03:54:7a:7e:c1:f8:39:38:52:2b:f8:6b:f2:
66:88:03:df:7d:fd:31:fc:a3:0a:66:9c:60:16:71:
5a:be:c8:ed:f0:43:51:8e:e2:67:e1:56:4c:75:9e:
37:61:7b:13:87:b0:18:14:2e:8c:81:61:aa:bf:8f:
9a:16:4a:25:cc:5f:be:b2:fe:23:47:86:d9:a0:dc:
5a:7a:78:73:86:74:55:4a:d9:87:ba:6e:5e:13:51:
24:f5:dc:a4:d2:f3:93:30:e6:34:5b:b6:5d:db:6d:
30:85:40:e4:89:05:3b:5d:06:18:ab:98:2c:66:c3:
ad:03:11:a0:19:30:e6:60:6e:2b:02:26:f4:ff:b5:
f6:e4:c1:d7:de:45:b5:42:b6:6b:22:42:91:20:d7:
6c:b0:41:26:4d:82:7e:28:0c:54:73:f7:c7:af:8c:
63:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6A:AD:C3:5F:4E:B7:49:69:4C:8B:8E:58:FF:BF:41:6D:A0:5C:52
X509v3 Authority Key Identifier:
keyid:81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d7:9b:d7:28:e1:57:be:19:05:56:f7:10:37:a9:20:a0:fe:
26:13:07:33:db:19:99:7a:13:9c:4b:85:77:12:80:b1:3e:60:
02:bb:d3:1b:d0:8f:01:35:c0:c0:d1:5f:34:6e:7f:18:72:6f:
4a:cf:7c:1d:f1:52:9b:84:00:31:c9:0b:55:37:ec:b5:27:27:
a6:95:18:d5:f6:05:7e:1e:b5:a7:55:10:52:67:1f:af:79:5c:
07:5e:01:b6:26:6c:2f:f8:0f:36:fc:89:e8:93:ac:f8:60:22:
12:04:c6:96:40:29:53:88:5b:aa:19:8d:e1:ca:50:e7:ee:62:
62:12:a2:c8:c6:1d:76:16:dc:e8:d6:af:d8:40:91:1c:15:11:
00:c7:42:b5:b8:20:17:3c:0d:17:fc:a2:a5:7b:c5:2c:49:dc:
ca:e1:35:42:ac:b0:35:5d:a3:44:17:9c:4f:d7:df:f4:d6:07:
5e:af:49:42:12:e7:ef:5f:ca:6e:72:db:42:dc:58:a1:25:2e:
0d:e8:4d:16:18:97:3c:fa:79:a4:8e:91:b9:dd:3b:36:a9:91:
29:ae:4c:23:83:c0:98:59:c5:9e:3a:38:59:8d:92:6e:36:53:
f9:78:03:3b:93:d9:51:78:ef:da:3c:ed:19:ef:df:7c:8c:99:
b9:ab:f0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:43:26 2026 by rpki-client