Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
File: geTmB1l46pR2tkHOAIx4erKOXRM.mft (raw, json)
Hash identifier: C4daaHbg/nNGpsTDOsr9MeeDq7mMY5DVqi0itgSsZLY=
Subject key identifier: 4D:62:01:5F:C2:B4:1D:85:D6:EE:90:56:A9:48:2F:58:2E:B8:46:E9
Authority key identifier: 81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
Certificate issuer: /CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Certificate serial: 019EB5E9B39E02C8BC6A5F07C5B0B942E6DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
Manifest number: 1954
Signing time: Thu 11 Jun 2026 09:00:52 +0000
Manifest this update: Thu 11 Jun 2026 09:00:52 +0000
Manifest next update: Fri 12 Jun 2026 09:00:52 +0000
Files and hashes: 1: geTmB1l46pR2tkHOAIx4erKOXRM.crl (hash: VXlZGTPunH/BZY8WXsdEMQagzScZ4XTdy8tIqYEkMXY=)
2: pTTs0nVlMn5tHpy7oYuUSfXDe4g.roa (hash: xSZGhc6azC4w2f74UgWS1yPxNx1RtAZpsoy3M6zVKGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:e9:b3:9e:02:c8:bc:6a:5f:07:c5:b0:b9:42:e6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Validity
Not Before: Jun 11 09:00:52 2026 GMT
Not After : Jun 12 09:00:52 2026 GMT
Subject: CN=4d62015fc2b41d85d6ee9056a9482f582eb846e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:45:4d:0d:dc:b4:61:2d:2c:d8:5a:a4:af:
0e:2f:ce:aa:2d:79:a6:cc:64:92:bf:12:64:98:0f:
5e:b7:ed:a5:0c:a4:ed:0f:4a:27:05:87:81:7a:4c:
99:f8:73:49:fc:7c:a3:54:cf:3c:31:ee:84:db:a2:
4a:fb:59:b1:25:d2:7a:14:72:07:c1:87:97:2e:c5:
d4:3d:25:80:13:35:58:12:43:b8:8a:02:c3:f0:c5:
0b:e8:a1:a9:01:43:13:cb:5d:b2:37:34:d7:ed:d4:
33:99:d6:4c:ad:b5:df:78:e8:66:49:5c:3b:26:31:
c8:bd:83:d9:28:84:bf:e3:02:ac:42:9e:bc:b9:4a:
78:ef:66:71:29:cd:70:7f:51:ad:74:9e:f7:06:0b:
ac:2b:e6:8c:ab:b8:a1:29:cb:f3:31:cf:85:33:30:
59:90:37:bb:2c:3f:7e:cc:54:bd:da:99:a0:26:7f:
10:22:59:d2:cd:d6:50:25:f4:60:22:c3:eb:ec:76:
33:55:45:7d:a0:b1:ff:97:d3:85:84:ca:e4:2e:ad:
ff:aa:c0:e7:e9:86:e0:f6:cb:3e:80:2b:60:df:9f:
c6:59:b6:ef:30:db:79:e1:96:69:48:59:b7:8c:34:
cf:8b:63:fe:70:2b:1c:fd:fe:d8:5d:c8:cb:50:71:
d1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:62:01:5F:C2:B4:1D:85:D6:EE:90:56:A9:48:2F:58:2E:B8:46:E9
X509v3 Authority Key Identifier:
keyid:81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:38:ea:53:a1:fc:81:eb:07:f5:f2:be:f8:62:02:9a:c9:67:
72:d1:5a:7b:44:dd:a0:d1:ba:e3:08:b2:d0:00:3a:b5:bd:d0:
fe:e1:9b:45:36:35:e5:5f:6a:c6:a0:75:fc:44:78:a4:a2:5e:
69:2d:0c:aa:16:31:63:62:10:d3:8d:38:09:a5:2c:2e:79:db:
35:77:dd:c6:cc:30:5c:04:77:d9:c1:f4:15:26:2f:ce:9c:56:
ee:b8:d8:c6:37:54:fe:9a:3b:39:d6:9d:11:5d:a2:87:30:5b:
29:9f:b0:66:85:89:da:bd:39:cb:28:26:e0:14:13:29:43:00:
5c:fc:d4:35:01:5a:7b:be:f6:bd:6e:5b:f3:f6:e5:31:37:df:
fc:44:45:0e:61:fd:1f:6c:ba:fe:45:8d:d7:f6:0d:45:0e:38:
da:a6:3c:de:8e:e5:6b:8f:d6:89:12:e4:cc:cc:fa:f4:2d:27:
08:48:0e:0c:85:40:eb:b3:68:bf:7c:2d:30:ba:2e:cd:0a:f9:
b7:e2:99:ac:5a:0a:0d:26:ea:b4:0e:41:cc:cb:23:f3:39:72:
43:4c:8c:df:25:a2:26:84:40:d4:ba:49:bf:d7:e3:d4:32:d0:
78:7a:f6:67:3e:bf:f9:b8:fd:fd:db:94:7d:b3:70:40:26:f1:
03:22:80:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:23 2026 by rpki-client