Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
File: geTmB1l46pR2tkHOAIx4erKOXRM.mft (raw, json)
Hash identifier: u+DX7w3NtsQ2zWRvnckFuTopXo77rqDUUYEzEaKox3Y=
Subject key identifier: 16:E0:E2:99:80:FF:3B:80:4A:C2:D6:72:B0:D4:F7:22:1A:05:93:B2
Authority key identifier: 81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
Certificate issuer: /CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Certificate serial: 019D3789A037DB10D712E2644CF25AFEFEDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 03:00:59 +0000
Manifest this update: Sun 29 Mar 2026 03:00:59 +0000
Manifest next update: Mon 30 Mar 2026 03:00:59 +0000
Files and hashes: 1: geTmB1l46pR2tkHOAIx4erKOXRM.crl (hash: q3o6zFw9culdC8x/A8WOKgvn6e40fTA2JtrqDCSXS/c=)
2: pTTs0nVlMn5tHpy7oYuUSfXDe4g.roa (hash: xSZGhc6azC4w2f74UgWS1yPxNx1RtAZpsoy3M6zVKGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:a0:37:db:10:d7:12:e2:64:4c:f2:5a:fe:fe:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Validity
Not Before: Mar 29 03:00:59 2026 GMT
Not After : Mar 30 03:00:59 2026 GMT
Subject: CN=16e0e29980ff3b804ac2d672b0d4f7221a0593b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:0c:cd:de:5a:4a:43:6a:c2:a8:78:d1:2a:
db:ac:a9:29:c8:8c:7f:86:92:27:17:fa:5e:52:ef:
cd:8d:97:e9:13:72:c7:1d:89:c1:c9:80:1b:a7:6b:
78:2f:f3:44:c0:8e:d8:dd:d3:39:74:cf:ac:2d:fd:
17:14:eb:fa:c9:df:85:e7:f3:61:66:0e:a4:6d:43:
4b:b0:38:82:41:8f:fa:14:79:ef:4b:de:31:90:ad:
82:e7:4d:e3:bb:ea:c1:04:6a:de:5e:b3:d8:4a:4b:
73:33:a9:18:60:80:16:6c:ae:21:ea:db:01:63:e4:
f2:57:f7:1d:83:53:25:63:62:87:18:b0:65:6c:f3:
ec:3d:2b:ef:08:ca:cf:b6:3f:73:0f:15:4c:d1:fe:
b0:16:c1:48:9f:d4:ae:a3:05:f8:b3:30:54:8e:ac:
59:2c:4b:9b:63:f6:74:55:55:54:5c:15:e9:b2:91:
03:2c:67:1f:76:c8:c6:6b:c4:a6:30:f0:d6:d3:01:
61:7c:63:74:b8:f4:97:c6:b4:98:d5:99:5e:26:51:
9d:77:27:c8:de:c6:d5:65:cb:49:99:f2:4f:ab:e5:
76:25:b5:9b:ca:f5:8c:93:fe:26:be:9a:ed:82:b2:
aa:5e:31:99:1a:17:d9:56:e7:3d:e4:b5:3f:1b:a3:
1a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E0:E2:99:80:FF:3B:80:4A:C2:D6:72:B0:D4:F7:22:1A:05:93:B2
X509v3 Authority Key Identifier:
keyid:81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5b:dc:1c:50:da:73:6e:e9:84:f5:04:cc:8d:89:06:6b:4e:
59:9a:ef:6e:12:80:5e:98:52:cc:68:6b:21:c3:22:ee:49:d1:
74:98:bd:a4:55:5b:f5:8a:64:31:4e:c7:ae:d3:00:38:6b:b3:
3d:be:95:52:eb:09:71:6d:b9:91:f7:7b:e6:7d:a0:a3:36:4d:
e9:d6:17:53:b1:3f:25:25:40:ee:c2:fd:b5:b5:d2:a9:08:9e:
42:ab:ec:9c:a6:fe:b9:20:7c:5e:e1:a1:57:b3:d8:0c:8b:a2:
ac:2f:9b:fb:d7:47:69:3f:85:1b:15:b5:cc:c3:f8:9d:99:90:
e6:95:50:79:cf:d2:38:78:f6:ae:86:bf:ef:ef:ab:a8:9e:57:
a2:30:3e:92:05:22:ed:f7:99:00:14:fe:db:68:d8:53:93:7a:
9d:5a:e3:92:a2:24:e7:b0:b7:c3:7c:db:73:28:3c:58:5e:39:
30:31:fb:2c:92:10:4e:32:45:fc:ac:99:83:10:74:24:ba:de:
e0:c9:89:fd:45:ad:8f:dc:18:56:62:f6:7a:22:74:4b:73:c1:
67:e5:85:d1:db:ee:25:95:d5:b1:b3:ad:76:81:82:c2:27:dd:
c3:fe:6c:93:6f:52:d7:ff:e5:4a:5f:41:d0:62:75:84:eb:a3:
45:d3:4a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:07 2026 by rpki-client