Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
File: gePml83W4iWsWxFhzfcE3pz8JlU.mft (raw, json)
Hash identifier: YuCKNLJgLuS4JgbaANmGZzY/v252cjGEhIgkom2JK60=
Subject key identifier: 3F:7C:3B:C1:DB:B9:D4:1C:A8:FD:30:BB:08:59:56:AA:C9:C6:E8:18
Authority key identifier: 81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
Certificate issuer: /CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Certificate serial: 019FAAF5FF627303D62DAEDA8DF05881C696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
Manifest number: 0DA6
Signing time: Tue 28 Jul 2026 23:01:16 +0000
Manifest this update: Tue 28 Jul 2026 23:01:16 +0000
Manifest next update: Wed 29 Jul 2026 23:01:16 +0000
Files and hashes: 1: E7jBDIqyZ11WO82f30hyB6Wv9ok.roa (hash: 4z+3nqji4gh4yjW7JtX0cO45G+UJjdxxeL8xg5cXbQc=)
2: gePml83W4iWsWxFhzfcE3pz8JlU.crl (hash: p7VqYInCkPX8uhFPZlNpkDyT3SLi95l0ngz9qsm/5gQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:ff:62:73:03:d6:2d:ae:da:8d:f0:58:81:c6:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Validity
Not Before: Jul 28 23:01:16 2026 GMT
Not After : Jul 29 23:01:16 2026 GMT
Subject: CN=3f7c3bc1dbb9d41ca8fd30bb085956aac9c6e818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3f:0d:62:09:1d:7f:a7:96:4e:bb:d2:20:29:
70:c4:d0:c1:e2:01:4a:24:03:24:1e:94:a4:5e:8f:
5c:fe:00:d9:00:96:32:08:c3:dd:81:c3:15:3b:ff:
db:92:87:93:3e:1f:42:ff:54:6d:a1:30:5d:1e:a2:
98:57:71:38:c5:ea:e3:49:e4:26:3c:e3:a4:b1:28:
ea:d8:30:95:c4:3d:76:4c:07:6a:90:c2:3a:43:54:
1c:9b:2e:c4:78:e0:76:c4:bf:a8:28:df:f3:31:cf:
0f:4e:44:b7:f5:d0:ab:22:25:7b:6c:43:5a:af:4e:
f8:07:71:f3:13:f6:18:67:07:a5:27:68:64:0e:ce:
28:0e:d4:71:ef:cb:0e:5a:32:db:52:68:fc:57:59:
6f:65:53:fe:03:3a:86:e6:d6:9a:4b:37:4f:ec:76:
86:c2:7f:6e:11:c9:0c:bd:7d:de:9d:80:98:16:f7:
5e:bb:4e:c2:37:d0:a1:c0:b0:01:c6:bf:75:27:48:
aa:f9:71:6e:54:f3:d3:e5:15:c3:23:c7:40:4a:ea:
0c:f8:c3:86:5d:89:d5:87:b6:d3:37:c3:47:d8:a0:
29:3a:bc:0b:dc:83:9d:f1:19:76:55:d7:bd:37:b4:
1c:90:97:9a:c0:5a:d6:49:36:92:37:77:e3:b6:0e:
7c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7C:3B:C1:DB:B9:D4:1C:A8:FD:30:BB:08:59:56:AA:C9:C6:E8:18
X509v3 Authority Key Identifier:
keyid:81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:18:2f:5d:48:b8:38:2c:b6:1c:d8:9c:c8:84:89:09:d4:9b:
9f:c6:86:23:db:24:2a:a6:13:21:3c:c3:97:45:7f:a8:f8:42:
a5:73:28:1d:12:7a:93:ca:7a:59:7a:6c:99:5e:b4:22:44:08:
62:a4:80:d0:a2:4d:30:87:a8:9a:aa:12:92:dd:9c:be:ce:a2:
e5:53:88:9f:3b:00:6c:11:3c:65:96:57:68:41:2d:8c:b1:c0:
14:c8:a9:44:f6:c3:98:47:14:6e:04:43:3a:5e:d3:e4:db:a7:
55:e4:f5:ce:3d:9c:ec:9a:47:df:be:80:44:16:02:ed:eb:11:
72:be:43:ea:d2:e2:64:ab:8f:cb:e7:72:f6:68:72:b2:b2:6f:
3b:9c:3d:0c:30:fe:0c:77:19:bc:51:cd:f5:49:8b:1f:50:0b:
63:0d:5c:51:f8:35:4f:24:6b:57:76:f7:15:33:81:27:4a:5f:
8a:00:60:6b:8f:5e:d7:79:e6:be:a2:87:45:f4:12:93:18:3e:
78:80:f4:63:70:ce:44:28:4d:94:f4:d6:aa:0d:f0:e6:af:22:
db:9b:9d:fe:af:00:9a:69:ad:c7:cb:f9:34:87:3b:f6:e3:33:
df:cd:ac:18:a6:98:b9:c5:6d:a4:67:fb:1f:58:fd:b8:9f:85:
a0:65:5a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:49:58 2026 by rpki-client