Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
File: geTmB1l46pR2tkHOAIx4erKOXRM.mft (raw, json)
Hash identifier: FUrnvyMUAGctDtp9fEmsp69JUjHUVDbU61pmXLtHAZ8=
Subject key identifier: A1:44:A0:E1:D3:39:17:5A:02:D7:99:85:B9:57:60:CF:08:48:93:3F
Authority key identifier: 81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
Certificate issuer: /CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Certificate serial: 01A08B3146B70829CC8CF38F5D22DE40772D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
Manifest number: 1A47
Signing time: Thu 10 Sep 2026 12:00:57 +0000
Manifest this update: Thu 10 Sep 2026 12:00:57 +0000
Manifest next update: Fri 11 Sep 2026 12:00:57 +0000
Files and hashes: 1: geTmB1l46pR2tkHOAIx4erKOXRM.crl (hash: 83N2OYvd/YiOSHwtnZ6jbZH1g1QfO6i00iegrpTOcjk=)
2: pTTs0nVlMn5tHpy7oYuUSfXDe4g.roa (hash: xSZGhc6azC4w2f74UgWS1yPxNx1RtAZpsoy3M6zVKGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:46:b7:08:29:cc:8c:f3:8f:5d:22:de:40:77:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Validity
Not Before: Sep 10 12:00:57 2026 GMT
Not After : Sep 11 12:00:57 2026 GMT
Subject: CN=a144a0e1d339175a02d79985b95760cf0848933f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:c3:55:e7:4d:f6:13:72:67:bb:8e:bd:cb:
b3:39:08:09:f8:50:a5:a2:00:d8:29:78:43:3f:52:
95:84:8c:21:0c:de:ac:5b:31:6d:fc:d6:bf:9f:9f:
62:ba:4a:13:fd:35:97:4a:fe:03:4f:f3:9a:a0:4b:
30:17:21:cc:fc:10:0f:54:bb:dd:bc:8a:67:7f:76:
a4:6a:3e:06:e7:0d:16:55:75:f1:eb:f5:81:8a:2c:
37:71:9f:53:1b:4d:74:e4:7e:50:0f:6c:3a:16:ba:
55:8e:f1:af:ef:b4:34:de:de:aa:6f:28:ce:a7:ee:
4a:9b:b3:15:f4:b4:bd:30:2a:fb:36:bf:06:14:28:
22:90:f2:9d:fa:af:11:73:9f:3e:9c:f8:55:f3:a8:
ce:db:f1:be:dd:59:90:14:04:f4:2e:aa:db:61:79:
99:1f:40:4f:28:40:1e:07:5b:7c:0a:90:23:95:6f:
97:18:6b:bd:27:30:7f:20:91:cd:20:48:cb:66:b2:
3b:9f:56:48:90:35:e8:ac:84:4e:f3:f0:eb:4e:ae:
7a:2c:fa:e0:19:34:b5:ee:90:2d:d4:98:df:38:41:
e6:0c:77:ea:73:cb:82:b7:b7:b1:55:8b:97:4a:00:
ac:5b:9b:65:ed:1a:c2:04:48:98:65:74:8c:5f:ce:
f9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:44:A0:E1:D3:39:17:5A:02:D7:99:85:B9:57:60:CF:08:48:93:3F
X509v3 Authority Key Identifier:
keyid:81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:30:f8:dc:02:e8:03:d5:07:ce:dc:1b:aa:dc:a5:57:14:56:
41:59:28:fb:2e:19:43:00:26:54:7c:5b:ea:06:57:e7:c3:5e:
1c:0d:b3:d1:b8:ad:8c:66:51:56:b3:b0:20:a9:72:f5:44:9c:
fa:56:65:82:04:a9:0b:95:3d:77:eb:aa:48:d1:fd:c4:df:b5:
4e:2c:9a:81:ca:93:9b:b6:80:e9:77:74:b1:e7:52:40:62:bb:
2b:74:61:76:f2:80:01:5e:8a:da:a6:bc:02:45:24:d1:07:9e:
98:0a:ea:6e:22:af:7d:ae:0a:23:3e:2f:fe:12:52:37:3b:66:
c4:b6:80:77:35:70:3d:ef:a6:81:58:62:ab:7f:ba:04:e4:61:
b8:0d:84:b1:c1:19:6b:00:e7:f3:51:2a:aa:65:62:73:de:99:
b9:85:17:0e:c2:ee:40:f0:05:7d:9c:ef:35:23:22:2e:4d:91:
b7:dd:fb:74:9c:4e:1b:07:10:82:4b:7a:bd:ec:57:d5:94:ce:
c4:f8:a0:0c:c8:25:61:a2:b3:1e:c7:12:97:ad:fa:e7:34:70:
3c:88:36:7e:66:fd:51:4d:32:79:db:a6:52:ec:69:d1:23:cc:
bf:cd:a6:67:16:9e:d2:c3:71:b0:e8:23:ff:df:5b:fd:6e:ed:
4c:16:4f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:12:14 2026 by rpki-client