Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
File: GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft (raw, json)
Hash identifier: WyCQynfLgD8sToV4yQSwk1wBCxlVnutxyp5i+FQomF0=
Subject key identifier: 76:89:58:5C:D8:24:6C:C4:9D:D9:04:24:1C:50:1C:F2:14:73:29:F6
Authority key identifier: 19:E5:79:FD:74:60:9D:26:8C:CB:CF:B8:2F:53:A5:A4:D0:61:35:B0
Certificate issuer: /CN=19e579fd74609d268ccbcfb82f53a5a4d06135b0
Certificate serial: 019D39417B433BBFC67EE6055F75257A911E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
Manifest number: 0656
Signing time: Sun 29 Mar 2026 11:01:25 +0000
Manifest this update: Sun 29 Mar 2026 11:01:25 +0000
Manifest next update: Mon 30 Mar 2026 11:01:25 +0000
Files and hashes: 1: GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl (hash: ZZpmHPU+btQlIl5023cdaGlcBqMkFi1/P4iyfENEoqM=)
2: RNg5Iw6hK9lFknD64uFpzzZFifw.roa (hash: MPWSSdeEZMH3BcEWDJHSPzUc1H1Qu6OWSelB4NXhiuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:7b:43:3b:bf:c6:7e:e6:05:5f:75:25:7a:91:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e579fd74609d268ccbcfb82f53a5a4d06135b0
Validity
Not Before: Mar 29 11:01:25 2026 GMT
Not After : Mar 30 11:01:25 2026 GMT
Subject: CN=7689585cd8246cc49dd904241c501cf2147329f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:da:54:87:2c:50:f8:2e:ad:32:bb:2f:04:84:
af:7c:0c:4a:f6:12:9c:d4:03:42:f3:75:2c:ef:12:
89:28:13:a8:b1:d2:4f:4b:3d:f8:b2:ea:d3:be:35:
70:68:a4:12:26:21:47:99:65:6e:72:34:a3:7b:7f:
9f:60:9e:6f:a9:cc:00:be:56:d4:f7:05:e5:d4:06:
59:b6:cd:50:dd:92:6b:24:d1:a4:aa:4b:7b:eb:69:
08:f1:47:f6:27:31:60:5d:d9:7e:25:8c:93:e8:26:
2b:c7:d1:20:a9:3a:d2:9c:86:18:05:ff:11:bc:8b:
27:ef:98:12:2e:65:e3:b6:63:ca:9b:48:f7:87:a1:
00:52:ee:23:df:ae:56:53:ee:1e:52:c3:bb:b9:88:
3c:23:c4:a8:ad:1d:82:36:16:fe:d3:45:21:5f:1a:
87:8b:ac:12:e2:a7:5a:f6:b4:5d:be:4f:d8:8f:76:
e6:61:be:38:f5:b8:3e:4b:af:22:9e:22:b9:fe:bf:
3c:24:31:29:ec:02:3b:fa:77:6b:c2:5a:44:30:df:
05:ec:02:eb:87:a3:42:6b:07:07:d5:55:ff:e4:3c:
8a:00:0b:73:17:7a:2d:f8:87:bb:3d:ab:b8:12:de:
0d:03:32:a0:27:8f:c2:0f:38:fb:51:a0:4f:69:9b:
ec:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:89:58:5C:D8:24:6C:C4:9D:D9:04:24:1C:50:1C:F2:14:73:29:F6
X509v3 Authority Key Identifier:
keyid:19:E5:79:FD:74:60:9D:26:8C:CB:CF:B8:2F:53:A5:A4:D0:61:35:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:cf:f0:7b:4b:ad:25:bb:dd:ee:8a:7f:95:9e:72:a5:ed:56:
f2:5f:e1:48:65:78:6a:9b:28:20:69:0a:aa:44:28:0a:8b:1c:
c3:14:90:12:09:3e:06:c0:2f:fb:8b:f8:10:cb:f1:c1:8a:49:
fd:ea:27:2e:d0:4d:f0:83:18:d1:0c:0b:6e:7f:fc:49:51:8c:
9c:99:bf:45:df:14:97:c6:c2:01:3c:15:3a:8e:73:19:03:e1:
fe:56:23:7a:76:e0:c9:9b:81:ed:4f:38:69:21:f9:62:a8:81:
af:0a:99:67:cb:33:03:f5:19:d9:7c:18:67:9c:de:ef:a7:0e:
8c:47:5b:ab:ce:c1:7d:aa:6f:93:7e:56:95:72:b3:fa:f8:ab:
e1:fa:c5:8e:e4:3e:db:67:6f:d5:d9:95:22:a3:c5:c4:d8:ee:
9b:89:5b:6e:09:1e:57:8c:f8:ac:eb:bb:25:69:27:18:15:e5:
ee:97:31:05:27:e8:23:06:7e:4b:87:96:76:3e:82:87:55:40:
4f:a0:ee:f8:fe:7a:ab:8c:c2:7a:2c:37:59:f5:cb:d6:90:fe:
d1:ad:79:32:31:17:18:6e:e1:ee:e4:b2:4d:6d:a8:da:5d:a9:
54:d6:37:7e:25:f8:a4:da:1e:55:2a:20:c7:29:bc:a1:a9:77:
f4:07:62:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QXtDO7/GfuYFX3UlepEeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZTU3OWZkNzQ2MDlkMjY4Y2NiY2ZiODJmNTNhNWE0ZDA2
MTM1YjAwHhcNMjYwMzI5MTEwMTI1WhcNMjYwMzMwMTEwMTI1WjAzMTEwLwYDVQQD
Eyg3Njg5NTg1Y2Q4MjQ2Y2M0OWRkOTA0MjQxYzUwMWNmMjE0NzMyOWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytpUhyxQ+C6tMrsvBISvfAxK9hKc
1ANC83Us7xKJKBOosdJPSz34surTvjVwaKQSJiFHmWVucjSje3+fYJ5vqcwAvlbU
9wXl1AZZts1Q3ZJrJNGkqkt762kI8Uf2JzFgXdl+JYyT6CYrx9EgqTrSnIYYBf8R
vIsn75gSLmXjtmPKm0j3h6EAUu4j365WU+4eUsO7uYg8I8SorR2CNhb+00UhXxqH
i6wS4qda9rRdvk/Yj3bmYb449bg+S68iniK5/r88JDEp7AI7+ndrwlpEMN8F7ALr
h6NCawcH1VX/5DyKAAtzF3ot+Ie7Pau4Et4NAzKgJ4/CDzj7UaBPaZvsRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaJWFzYJGzEndkEJBxQHPIUcyn2MB8GA1UdIwQY
MBaAFBnlef10YJ0mjMvPuC9TpaTQYTWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2VWNV9YUmduU2FNeTgtNEwxT2xwTkJoTmJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80ZGM0ZGUtOGU4ZC00N2ZiLTlkNWMt
NzQ4NDU0MTRlMDcxLzEvR2VWNV9YUmduU2FNeTgtNEwxT2xwTkJoTmJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC80ZGM0ZGUtOGU4ZC00N2ZiLTlkNWMtNzQ4NDU0MTRlMDcx
LzEvR2VWNV9YUmduU2FNeTgtNEwxT2xwTkJoTmJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzc/we0ut
Jbvd7op/lZ5ype1W8l/hSGV4apsoIGkKqkQoCoscwxSQEgk+BsAv+4v4EMvxwYpJ
/eonLtBN8IMY0QwLbn/8SVGMnJm/Rd8Ul8bCATwVOo5zGQPh/lYjenbgyZuB7U84
aSH5YqiBrwqZZ8szA/UZ2XwYZ5ze76cOjEdbq87Bfapvk35WlXKz+vir4frFjuQ+
22dv1dmVIqPFxNjum4lbbgkeV4z4rOu7JWknGBXl7pcxBSfoIwZ+S4eWdj6Ch1VA
T6Du+P56q4zCeiw3WfXL1pD+0a15MjEXGG7h7uSyTW2o2l2pVNY3fiX4pNoeVSog
xym8oal39AdieA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:23 2026 by rpki-client