Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
File: GeBhVfweN2UrK3nJpTbS5hRNBPc.mft (raw, json)
Hash identifier: quAKD2dmOKyasWk/MUPVrpv9nwqePlkbHtL0dlHWyVs=
Subject key identifier: 23:82:70:5A:FA:95:19:AB:23:17:06:81:6B:04:C7:8F:C1:55:3F:D6
Authority key identifier: 19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7
Certificate issuer: /CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7
Certificate serial: 019D382E93912AEC6FD463B1906798D5E330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
Manifest number: 10FC
Signing time: Sun 29 Mar 2026 06:01:09 +0000
Manifest this update: Sun 29 Mar 2026 06:01:09 +0000
Manifest next update: Mon 30 Mar 2026 06:01:09 +0000
Files and hashes: 1: GeBhVfweN2UrK3nJpTbS5hRNBPc.crl (hash: HKVetJhAwwB3M7a3mj6atpzKIT9bpWdnhq+3dbKCZo8=)
2: HeGk-IHyFVfngqTZrq64SEROS-g.asa (hash: iPeK08TTc0azSBNIXksSX2K6e4Xwya8gagulAlcBjp0=)
3: zLsfLFOJpnTtg3F4KVVDlPfhrD4.roa (hash: lvwGobToDcZgHYg/+bZlkIQ8ZdF7bln38m78tCC4O58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:93:91:2a:ec:6f:d4:63:b1:90:67:98:d5:e3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7
Validity
Not Before: Mar 29 06:01:09 2026 GMT
Not After : Mar 30 06:01:09 2026 GMT
Subject: CN=2382705afa9519ab231706816b04c78fc1553fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:a5:c9:42:d9:bd:de:b6:90:97:ed:14:bb:
92:62:b6:f3:7d:8b:7f:39:7e:42:77:8c:33:b6:f6:
6b:3a:a0:0c:a8:fb:e4:4e:29:c1:3e:7b:84:2f:b9:
4a:ff:0a:6c:35:11:7c:01:c4:07:44:00:c5:05:6c:
0f:f1:cc:99:c4:3d:cf:52:99:f9:d1:4f:af:a1:25:
44:2d:1b:dd:da:61:50:90:ec:09:61:c5:68:63:54:
f1:5d:3a:3b:36:1b:67:1e:b9:fe:cc:5c:8b:8e:7b:
c3:33:7c:7d:85:df:26:cf:38:b2:52:63:70:9f:4a:
b1:e1:0e:7d:f9:9c:d3:8a:2b:12:07:29:14:23:c2:
44:f3:9c:d2:26:71:fe:1e:d3:7e:ac:c8:0e:e4:40:
cf:06:a2:b6:f9:ff:7f:32:4f:7d:08:90:62:39:cd:
20:b9:3b:5a:e1:7c:98:10:21:84:8b:6b:dc:2c:ad:
1e:ef:a3:8e:6b:1c:62:a1:17:84:bf:62:bc:73:b0:
84:bb:dc:df:a3:16:15:73:8a:6c:61:b4:21:a4:b3:
54:d8:9f:9c:2f:b9:2f:c8:28:eb:f5:9f:47:8f:94:
1a:0d:78:54:97:6a:fe:3b:1b:cd:c2:d5:69:c8:b5:
34:72:a1:84:06:88:90:5b:41:f5:72:ca:9e:72:54:
af:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:82:70:5A:FA:95:19:AB:23:17:06:81:6B:04:C7:8F:C1:55:3F:D6
X509v3 Authority Key Identifier:
keyid:19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b5:9f:01:d2:d8:db:6a:b8:ee:23:84:36:f2:2c:55:15:d0:
a0:2d:05:e4:75:8d:2d:bb:3c:6f:d6:1c:5b:d1:d4:1a:d8:af:
03:a6:39:7a:58:07:e9:ba:96:36:92:65:b5:8f:05:c2:ad:95:
ac:ae:c9:f9:bf:da:aa:80:d8:78:bb:5d:86:13:7e:b5:0c:19:
ce:e9:2f:94:68:95:c7:51:3c:32:5e:bf:81:88:46:66:31:d0:
fd:4d:4d:3d:63:13:51:1e:bb:ae:b0:dd:59:2a:a4:54:67:00:
58:1d:9d:8b:0f:14:4a:5c:45:ae:88:a4:cb:cb:a1:bf:ae:af:
a8:d9:2d:95:cc:19:18:5f:80:0d:9a:f0:70:33:65:f9:e1:a9:
bc:59:bb:6b:c2:03:1f:ac:b3:b5:a1:64:a6:f0:65:60:ae:a9:
86:fc:59:52:81:ba:0a:84:30:f2:51:f2:72:ba:8d:8d:42:78:
d6:cc:f8:0f:55:cb:f6:b6:28:0c:5a:f7:f2:fc:71:6a:9a:9e:
12:ea:08:c6:ee:0f:53:96:a4:a7:e2:9a:1b:a4:37:90:65:cd:
c4:3e:8f:df:3c:9d:f5:b1:d8:3a:a9:64:91:1a:ac:00:cd:2b:
27:16:aa:38:c7:04:ac:ce:9c:a1:07:19:a5:3f:63:34:c3:d8:
a0:31:83:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:25 2026 by rpki-client