Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
File: GEe1nSHqNrMGL8qAznXBYWr1EZo.mft (raw, json)
Hash identifier: R8Nvvtqrpw6SnxP66JRV/1Z+Tc0x8rA3KrEy/2wNPjo=
Subject key identifier: 4F:98:F3:4D:F9:0F:CA:9F:40:32:27:BB:47:BF:1C:81:7D:44:C1:AC
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 01A1193D537E9A611F0CA5FEA76D9C3E04AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
Manifest number: 1ABA
Signing time: Thu 08 Oct 2026 02:00:11 +0000
Manifest this update: Thu 08 Oct 2026 02:00:11 +0000
Manifest next update: Fri 09 Oct 2026 02:00:11 +0000
Files and hashes: 1: GEe1nSHqNrMGL8qAznXBYWr1EZo.crl (hash: CSohVusSMLwZ8J5Y4qkviygTSGcf5nboB/Qdt7qUXMM=)
2: Gll7cy-kn16EuQChyjd5kxJVar8.roa (hash: rAFOy1sEoOQYL6xEmxiSqkBDTDW6pzDgHlfqHYvviWQ=)
3: NbBpfQGsHkSsujFNmwYaCRxCh_M.roa (hash: JJcHtuXrwzjuiCppA+Z6JQDHbPH63cB9zvzIpG1UH3U=)
4: Sdk2Dm6z03KwrwtbEuqT0J43F_U.roa (hash: U3idiZCDE3LetRk2OAwvE51zhAy6sUsYBrkrt0UEO/M=)
5: VG14tR93nrCtNgYNhIfw5ASK5b8.roa (hash: Tcz678dunbruTrkYTbdv98GThScQ5vNKS1fF8cX93JE=)
6: WwD_aPwzHRX9pxVOcwvqQrQkKZE.roa (hash: VP+wMFWNdI27cBYAd0s7QNmXqe9NJoY1bxK8XR8/LAQ=)
7: q9_YDIRra6aFcMc0ByB5ssvbp7c.roa (hash: Aqh+b9LnXWSFB27cNYCIor6EI4XZue2eU7FkAjMEl08=)
8: s0K3J9Hfz8f1sftMuRidCQOAQhk.roa (hash: 1kkEqiEjaCO/BAeUP7qyZJOwB2fegbQON/HmveFaeBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:3d:53:7e:9a:61:1f:0c:a5:fe:a7:6d:9c:3e:04:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Oct 8 02:00:11 2026 GMT
Not After : Oct 9 02:00:11 2026 GMT
Subject: CN=4f98f34df90fca9f403227bb47bf1c817d44c1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:af:a5:fd:14:a9:b5:f1:51:bd:fe:da:1f:08:
9c:f9:35:3f:b5:92:b3:6c:40:8c:e1:31:d6:56:0a:
1b:33:c4:99:0b:59:20:66:8c:71:34:08:f4:71:93:
dd:b1:11:4a:32:cf:f1:23:e3:55:a4:eb:9a:20:c5:
12:f2:36:36:56:13:ec:28:c0:f4:98:71:46:59:05:
de:ba:b8:c4:49:45:ca:81:45:e0:0e:e3:d7:46:08:
c6:01:d6:95:d5:8c:b8:03:9f:b5:2d:4b:4f:be:54:
31:60:91:4d:6e:81:7b:eb:1f:04:6e:81:79:be:33:
1d:d9:e1:f8:5c:e9:a0:8f:33:37:a4:3e:d6:90:89:
ce:eb:a8:f9:92:cc:ae:d8:bf:e2:62:5f:78:ac:ae:
f1:65:d4:8c:ee:a7:c2:9f:fe:6c:50:46:61:4e:4f:
75:91:26:a2:88:c5:01:1e:ed:55:29:2e:e9:90:b4:
83:d7:0d:7e:27:14:3a:03:36:ff:fd:1a:cc:93:9f:
ec:d3:44:24:67:bf:8e:fd:2a:cd:f2:d5:b1:a9:3f:
16:28:b1:00:20:a0:4d:45:e2:18:3c:be:e0:c3:0b:
bb:c6:08:f5:b8:f2:42:a4:8a:72:a0:3c:1b:3f:d1:
53:81:f7:d9:b9:09:95:25:cb:ab:17:2a:83:a4:38:
6e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:98:F3:4D:F9:0F:CA:9F:40:32:27:BB:47:BF:1C:81:7D:44:C1:AC
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ce:92:32:5a:e2:ef:3a:8f:e1:43:db:a5:67:18:4d:d3:30:
a2:dc:06:a8:ec:ba:b5:a1:7c:86:f2:32:36:3a:ff:8f:23:aa:
58:b1:73:66:be:f7:e2:0c:53:ec:bf:99:f3:81:51:0f:4b:17:
7c:25:59:e5:52:20:c2:4b:06:a7:cd:77:75:4a:ba:8f:d1:e0:
d0:d5:1b:1c:d2:fd:25:4c:93:19:27:11:c1:70:d8:26:41:20:
f9:ad:74:cc:54:f5:73:32:07:a4:68:ff:b1:0f:03:c2:74:7a:
4b:64:c0:55:99:a0:c0:e7:ac:f8:15:dd:ee:38:47:92:88:b0:
ab:a2:60:cd:83:77:f2:6b:83:2d:3c:eb:6e:ff:16:dd:2a:65:
5f:63:fa:ac:20:38:97:ee:32:18:a7:c3:32:60:70:da:54:78:
f5:f2:03:cc:85:40:66:b5:25:79:4d:8e:cc:98:cc:85:28:da:
d0:18:56:6c:d9:df:3a:9b:57:61:ba:23:aa:c8:56:36:a4:a7:
a6:3c:84:0d:f2:75:7f:4c:6c:2d:a0:a6:35:8b:f4:90:61:42:
d4:06:e2:59:42:cf:1f:ff:0a:cd:ac:7d:f3:3a:8c:58:14:2b:
23:dd:4c:b6:78:f7:f5:0a:e2:b6:04:2d:2e:96:5b:e1:bd:08:
53:a7:bd:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEZPVN+mmEfDKX+p22cPgSsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NDdiNTlkMjFlYTM2YjMwNjJmY2E4MGNlNzVjMTYxNmFm
NTExOWEwHhcNMjYxMDA4MDIwMDExWhcNMjYxMDA5MDIwMDExWjAzMTEwLwYDVQQD
Eyg0Zjk4ZjM0ZGY5MGZjYTlmNDAzMjI3YmI0N2JmMWM4MTdkNDRjMWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4q+l/RSptfFRvf7aHwic+TU/tZKz
bECM4THWVgobM8SZC1kgZoxxNAj0cZPdsRFKMs/xI+NVpOuaIMUS8jY2VhPsKMD0
mHFGWQXeurjESUXKgUXgDuPXRgjGAdaV1Yy4A5+1LUtPvlQxYJFNboF76x8EboF5
vjMd2eH4XOmgjzM3pD7WkInO66j5ksyu2L/iYl94rK7xZdSM7qfCn/5sUEZhTk91
kSaiiMUBHu1VKS7pkLSD1w1+JxQ6Azb//RrMk5/s00QkZ7+O/SrN8tWxqT8WKLEA
IKBNReIYPL7gwwu7xgj1uPJCpIpyoDwbP9FTgffZuQmVJcurFyqDpDhutQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+Y8035D8qfQDInu0e/HIF9RMGsMB8GA1UdIwQY
MBaAFBhHtZ0h6jazBi/KgM51wWFq9RGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zODI0Y2QtZTUyNy00YWRjLWE0MTIt
ZjkxYmI1MTc5MjE3LzEvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8zODI0Y2QtZTUyNy00YWRjLWE0MTItZjkxYmI1MTc5MjE3
LzEvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVs6SMlri
7zqP4UPbpWcYTdMwotwGqOy6taF8hvIyNjr/jyOqWLFzZr734gxT7L+Z84FRD0sX
fCVZ5VIgwksGp813dUq6j9Hg0NUbHNL9JUyTGScRwXDYJkEg+a10zFT1czIHpGj/
sQ8DwnR6S2TAVZmgwOes+BXd7jhHkoiwq6JgzYN38muDLTzrbv8W3SplX2P6rCA4
l+4yGKfDMmBw2lR49fIDzIVAZrUleU2OzJjMhSja0BhWbNnfOptXYbojqshWNqSn
pjyEDfJ1f0xsLaCmNYv0kGFC1AbiWULPH/8Kzax98zqMWBQrI91Mtnj39QritgQt
LpZb4b0IU6e9zQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 05:35:26 2026 by rpki-client