Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
File: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft (raw, json)
Hash identifier: JEO/VgTo89Ww2uw9yVkC3q7PmJSLaHonbO87uu5+tQI=
Subject key identifier: B4:A8:AE:D2:9D:DD:3D:36:F6:B1:AA:05:8D:7B:32:B7:98:14:B8:F2
Authority key identifier: 19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56
Certificate issuer: /CN=19e3d11f72ddbed8361285b499b932191203b756
Certificate serial: 019CC0725023B5CF96A0F3FC3510A0895D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
Manifest number: 0745
Signing time: Fri 06 Mar 2026 00:00:42 +0000
Manifest this update: Fri 06 Mar 2026 00:00:42 +0000
Manifest next update: Sat 07 Mar 2026 00:00:42 +0000
Files and hashes: 1: DKPrKwEm9w_rRG3TMuhv1McAamk.roa (hash: 4OtFjtxkmUmlHY70yrx1zCjgip8Y0WBSl5BdZAXK0TQ=)
2: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl (hash: U42iWff9Vh2OvZbnZwmqMGK5/FpjEjlew6oLC7ggLuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c0:72:50:23:b5:cf:96:a0:f3:fc:35:10:a0:89:5d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e3d11f72ddbed8361285b499b932191203b756
Validity
Not Before: Mar 6 00:00:42 2026 GMT
Not After : Mar 7 00:00:42 2026 GMT
Subject: CN=b4a8aed29ddd3d36f6b1aa058d7b32b79814b8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:ff:73:ab:ff:ef:7e:f5:f7:c3:74:c8:1e:
47:17:03:c8:cf:7f:c3:17:43:78:3d:b6:bb:45:0f:
73:43:54:7c:b4:b6:a8:03:b2:29:c2:d7:d7:0d:15:
0f:ea:1d:fe:77:ff:97:fa:bc:8c:c7:5d:60:54:04:
aa:ff:d0:44:79:85:ac:a3:e6:67:6e:fb:a6:02:5f:
1a:98:33:2b:fc:fa:22:ff:e4:d1:a9:14:32:a2:a2:
b0:22:17:c7:67:4d:07:43:e8:b9:03:f9:05:00:9f:
ee:d0:10:a8:7a:57:52:04:fc:82:f4:1c:c5:c2:7e:
aa:97:c3:ef:25:c3:fa:40:54:59:e3:4a:81:57:2a:
6b:09:51:8f:f1:a4:fc:12:1b:2f:38:db:de:f4:40:
6e:79:cb:d4:26:8a:d5:59:f1:d7:b3:14:f0:fe:25:
1e:8e:1b:bf:75:17:cc:35:c4:64:62:9a:47:07:01:
d4:a1:20:b1:f9:fc:0a:0a:80:ca:63:7d:cd:57:81:
25:8e:84:63:49:a6:05:87:9e:7d:76:a5:39:dd:d1:
66:3d:34:bb:30:cb:a1:05:05:68:3f:8c:5a:3e:7c:
dd:1e:35:e1:2e:7b:1b:af:6c:4d:1d:ab:aa:65:d6:
43:a5:ce:5c:0b:4b:1c:90:a6:dc:f4:0b:5a:25:f3:
25:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A8:AE:D2:9D:DD:3D:36:F6:B1:AA:05:8D:7B:32:B7:98:14:B8:F2
X509v3 Authority Key Identifier:
keyid:19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d1:e7:df:73:87:ac:2b:ea:57:b5:ad:bb:e7:03:32:e4:05:
6e:d0:53:09:28:7e:b4:58:d5:3f:46:93:b2:9c:0f:8e:d7:a1:
9a:6f:9b:2f:ce:3a:61:5f:54:28:a1:8a:f8:f0:c7:b6:ec:c4:
6e:d0:2c:2a:14:4b:18:80:2c:7e:92:08:c7:f5:78:62:51:a3:
25:6c:ad:d9:38:da:62:42:f1:cc:17:f5:aa:25:3d:e0:5c:2a:
b2:39:97:50:b1:3e:49:e1:fa:1c:c9:92:b8:97:3f:ed:a2:95:
82:c5:c2:8f:de:fa:54:60:21:e3:0c:71:3e:20:f9:16:1b:62:
03:25:29:bf:6f:7a:cc:7e:79:74:f8:b2:f3:d5:e5:13:4f:ba:
18:9a:42:f0:b7:4c:dd:68:ca:5a:f8:5e:f0:da:a5:90:bd:ec:
d2:c3:f8:46:31:3e:60:bd:0f:c7:5c:e7:36:4c:c7:04:2e:49:
89:ed:d1:7d:b5:5e:e3:2b:64:de:fe:50:f6:9b:96:3f:0c:a3:
0e:01:de:e1:f3:7b:2a:8c:0d:40:aa:f9:89:fe:da:b9:7f:ff:
e5:d7:54:db:a6:20:d8:98:54:9f:88:df:6a:23:6b:72:9a:25:
58:7e:c3:eb:8b:90:9a:fe:14:e7:56:f5:98:02:f4:b9:9f:c6:
7c:ad:be:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzAclAjtc+WoPP8NRCgiV0NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZTNkMTFmNzJkZGJlZDgzNjEyODViNDk5YjkzMjE5MTIw
M2I3NTYwHhcNMjYwMzA2MDAwMDQyWhcNMjYwMzA3MDAwMDQyWjAzMTEwLwYDVQQD
EyhiNGE4YWVkMjlkZGQzZDM2ZjZiMWFhMDU4ZDdiMzJiNzk4MTRiOGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTX/c6v/737198N0yB5HFwPIz3/D
F0N4Pba7RQ9zQ1R8tLaoA7IpwtfXDRUP6h3+d/+X+ryMx11gVASq/9BEeYWso+Zn
bvumAl8amDMr/Poi/+TRqRQyoqKwIhfHZ00HQ+i5A/kFAJ/u0BCoeldSBPyC9BzF
wn6ql8PvJcP6QFRZ40qBVyprCVGP8aT8EhsvONve9EBuecvUJorVWfHXsxTw/iUe
jhu/dRfMNcRkYppHBwHUoSCx+fwKCoDKY33NV4EljoRjSaYFh559dqU53dFmPTS7
MMuhBQVoP4xaPnzdHjXhLnsbr2xNHauqZdZDpc5cC0sckKbc9AtaJfMlLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSortKd3T029rGqBY17MreYFLjyMB8GA1UdIwQY
MBaAFBnj0R9y3b7YNhKFtJm5MhkSA7dWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2VQUkgzTGR2dGcyRW9XMG1ia3lHUklEdDFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jNWY3YjgtZDJjMS00NmRlLTlkYjQt
MDY5YmZhZjJiY2U0LzEvR2VQUkgzTGR2dGcyRW9XMG1ia3lHUklEdDFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9jNWY3YjgtZDJjMS00NmRlLTlkYjQtMDY5YmZhZjJiY2U0
LzEvR2VQUkgzTGR2dGcyRW9XMG1ia3lHUklEdDFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtHn33OH
rCvqV7Wtu+cDMuQFbtBTCSh+tFjVP0aTspwPjtehmm+bL846YV9UKKGK+PDHtuzE
btAsKhRLGIAsfpIIx/V4YlGjJWyt2TjaYkLxzBf1qiU94FwqsjmXULE+SeH6HMmS
uJc/7aKVgsXCj976VGAh4wxxPiD5FhtiAyUpv296zH55dPiy89XlE0+6GJpC8LdM
3WjKWvhe8NqlkL3s0sP4RjE+YL0Px1znNkzHBC5Jie3RfbVe4ytk3v5Q9puWPwyj
DgHe4fN7KowNQKr5if7auX//5ddU26Yg2JhUn4jfaiNrcpolWH7D64uQmv4U51b1
mAL0uZ/GfK2+vA==
-----END CERTIFICATE-----
Generated at Fri Mar 6 03:46:08 2026 by rpki-client