Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
File: gePml83W4iWsWxFhzfcE3pz8JlU.mft (raw, json)
Hash identifier: vr8bMOwW87YGCAWZnP1uOcDQKbwmB1TOILSY1HlSEiI=
Subject key identifier: C8:8E:13:9C:20:11:32:78:FF:AC:BD:E6:3A:7F:66:29:AA:5A:D4:3D
Authority key identifier: 81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
Certificate issuer: /CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Certificate serial: 019CAE34E5A9D27B95FE10B6E323D1C1172B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
Manifest number: 0C1A
Signing time: Mon 02 Mar 2026 11:00:28 +0000
Manifest this update: Mon 02 Mar 2026 11:00:28 +0000
Manifest next update: Tue 03 Mar 2026 11:00:28 +0000
Files and hashes: 1: E7jBDIqyZ11WO82f30hyB6Wv9ok.roa (hash: 4z+3nqji4gh4yjW7JtX0cO45G+UJjdxxeL8xg5cXbQc=)
2: gePml83W4iWsWxFhzfcE3pz8JlU.crl (hash: XkBKkTzcgWJoOGwuQb/ZDXWrAEHKM9drP+r8yaNSkRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:34:e5:a9:d2:7b:95:fe:10:b6:e3:23:d1:c1:17:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Validity
Not Before: Mar 2 11:00:28 2026 GMT
Not After : Mar 3 11:00:28 2026 GMT
Subject: CN=c88e139c20113278ffacbde63a7f6629aa5ad43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:41:ab:65:17:42:e4:e8:56:7a:7d:0d:e5:
f3:57:bb:69:ae:ff:07:ab:38:b1:e0:41:c3:14:05:
d5:97:f3:ad:9e:7f:d0:a2:2f:a4:00:2f:60:4b:44:
32:09:eb:51:32:15:c4:39:ac:bc:0b:80:eb:b2:cc:
c9:c9:f4:02:f0:dd:c4:28:6e:1a:f0:2f:46:f4:60:
e7:09:3e:36:e5:c6:a5:74:a9:02:e1:9e:d0:cf:ea:
dc:7a:9c:43:26:03:f7:2f:f2:22:17:01:97:75:c4:
03:85:b0:82:77:be:df:ce:05:1a:91:dd:90:36:2a:
97:55:ca:dc:c9:a6:bf:25:cc:93:90:da:61:46:42:
fe:e9:6c:cd:e2:a6:60:40:ab:5c:bc:96:75:ac:8d:
91:13:bc:d3:1a:0d:ed:95:19:6b:e6:72:00:70:f0:
c4:df:b0:70:e7:bd:19:ee:5d:90:be:ca:f1:d2:8d:
f7:39:b3:e0:a7:4e:a1:bf:04:e3:69:bc:06:5d:54:
f4:25:16:55:bc:ef:d6:41:ed:df:b4:f4:cb:b6:74:
34:51:2e:6e:fd:fa:e9:f3:51:8f:30:dc:e9:05:22:
01:34:f0:c6:0b:bb:4d:17:61:b9:a2:39:81:65:85:
0a:52:b5:dc:7c:63:6c:eb:d6:72:4f:21:3e:ce:26:
d0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8E:13:9C:20:11:32:78:FF:AC:BD:E6:3A:7F:66:29:AA:5A:D4:3D
X509v3 Authority Key Identifier:
keyid:81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:64:03:45:2f:01:6c:30:ba:4b:8f:7c:a8:eb:2b:3a:0d:b0:
60:a5:88:64:8d:0f:c8:2d:ed:78:3d:9a:7d:44:a1:8e:5e:ad:
e0:30:aa:d7:70:55:41:95:34:92:48:27:0c:26:c1:71:28:9f:
a5:d3:9f:6b:7c:b3:6f:08:90:c4:28:bb:3f:1f:ce:75:3a:47:
31:31:bd:bc:0a:8e:7f:5b:ac:18:3a:de:62:6b:62:82:1e:bf:
2a:73:89:70:7c:10:6c:d6:84:a7:b5:1c:65:18:c0:cc:6e:66:
23:e6:28:ee:ec:a6:8d:9c:91:4f:d5:5f:f9:53:d8:41:cd:9a:
98:09:86:62:6b:39:33:9e:23:dc:a9:e5:4d:a9:ed:ed:68:cd:
f0:51:73:d8:1e:9d:3e:ca:26:4d:7d:0f:15:de:c8:bb:b4:a5:
ba:f4:20:61:a4:75:bd:21:cd:d4:c6:76:98:b9:7f:f8:b8:6b:
eb:5f:95:c1:74:96:aa:35:a9:54:54:3f:88:dc:c9:8a:f0:c1:
15:f3:cf:ac:4d:8d:24:f3:bd:7a:8e:d1:ce:7a:81:2e:dc:30:
ff:68:e7:8d:90:bf:29:01:b9:3a:1b:b5:64:ae:60:27:29:96:
33:09:32:52:2e:98:fe:6a:12:ab:8b:94:20:59:7c:c0:4e:17:
9e:29:f9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:34 2026 by rpki-client