Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
File: ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json)
Hash identifier: HzSCLYaCXPttZQAt9jU06Msl46k4Xd+NEOcjK2p5MNo=
Subject key identifier: B4:29:8E:3B:66:8D:B6:4C:6D:E1:BE:8C:07:2C:66:55:85:D6:D0:DF
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 019D3B2FA7211C9C60D6A672B09AD91D64E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
Manifest number: 18AE
Signing time: Sun 29 Mar 2026 20:01:11 +0000
Manifest this update: Sun 29 Mar 2026 20:01:11 +0000
Manifest next update: Mon 30 Mar 2026 20:01:11 +0000
Files and hashes: 1: 1-NC7tshaF2ypJ8_MjHNn7wk6ylg.roa (hash: jCwzjmjn98JT6TSQJ5ZYF1MDhZK9lKwwZgcySCCZS8w=)
2: AQBZKKUw0CfqLnDcy9hcMLkcBVQ.roa (hash: e8Nsfm4NARCM4kcuUWqaXIOJHBmE9O9GAIR9R4lcjmA=)
3: OIeDUqwKxJ57Hp4z0SriVjqHOa0.roa (hash: zgCtWjL78//MuJt8PD5olXX7a8O1W8EOEEdN7zziB7Q=)
4: VuSedNq080u42oe8PtK90QTYvdk.roa (hash: ZZTjW9ToPnYbK8YX5tY0XOAbcYCc6gHAC9O1wsgeddc=)
5: XiqMdLxfKoUjx95VMJtJvMxAZvY.roa (hash: SXoL5HuxIAiQquuEruAdXQNKyAHRVH7HOzbYGfTqh5A=)
6: bVitBPgZXTQtQI1h9qes3hDRRxY.roa (hash: tqq2V5OTdPLeDjlXCD6tq05OTPazJPQl/dxmKD2F5i4=)
7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: Fv364t5OCeq0cre1JhNN2ytM4UEWCcUhNgc3Nc+2QDo=)
8: nQU1rY2ErLKpGm3xNOk2Vd6maac.roa (hash: I6X6MYBEOfSMB0M7TNs7z1Yj80MN+WqIyp43IIumKAY=)
9: zT2SVobKOrqCSSH6tmxWYylcNJ0.roa (hash: +n2XEQtkvSldlIzuGKqZcGU0lIa7VYbzPW0ct3CZyds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3b:2f:a7:21:1c:9c:60:d6:a6:72:b0:9a:d9:1d:64:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Mar 29 20:01:11 2026 GMT
Not After : Mar 30 20:01:11 2026 GMT
Subject: CN=b4298e3b668db64c6de1be8c072c665585d6d0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:80:7c:63:b4:4b:e6:46:97:2a:b2:84:05:6b:
b6:35:52:e4:86:ad:d0:0c:c7:a8:25:40:c7:04:ca:
ee:ef:1e:70:cd:54:d9:07:68:76:14:1f:15:ce:77:
48:67:84:b2:aa:ec:8f:91:64:c7:2f:97:57:e7:07:
d4:14:40:53:9f:eb:d6:69:7a:28:e3:ce:c3:02:7e:
0b:8b:66:2b:d0:1b:42:3a:e2:a4:63:12:c9:fb:e3:
16:59:4d:07:eb:f1:ea:c9:9c:7a:d2:cc:74:4b:7a:
ce:e8:71:7d:5b:fd:17:2a:6b:ce:ea:da:b0:86:5d:
ff:8a:91:8b:6e:10:dc:03:e8:a7:8c:73:05:3c:a5:
14:24:5a:6d:a3:34:c5:0a:70:1c:40:e5:04:fa:2d:
28:6a:27:e1:43:5d:57:89:f7:d5:a8:44:2b:a1:0b:
37:0f:da:4b:98:2d:46:fe:63:ab:65:52:54:cb:14:
69:32:d6:4b:51:a6:47:e9:11:56:c4:ce:d0:cc:74:
ad:f4:46:2e:0a:d0:3d:90:e9:cc:62:7a:79:f7:04:
84:8d:b1:54:08:6b:7e:04:85:7d:6e:29:4f:94:e4:
5f:3d:7b:4f:72:69:d5:48:fc:a0:c6:d1:dd:c1:74:
7d:f1:c2:93:df:ab:76:0a:62:a5:4b:bd:48:a0:80:
7f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:29:8E:3B:66:8D:B6:4C:6D:E1:BE:8C:07:2C:66:55:85:D6:D0:DF
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6c:a5:bf:4f:a5:c7:df:b7:30:3b:dc:89:e5:23:97:5f:58:
c6:ec:62:ce:6c:e4:ad:b7:e9:01:d0:9c:51:5b:e5:8f:f9:bd:
59:ad:ac:84:7d:6c:df:f2:08:cc:c9:c9:30:fc:ee:35:67:36:
43:6f:75:c2:af:c8:c0:ca:79:24:11:c6:8e:2a:f2:3d:db:a2:
00:ab:87:3b:67:10:09:e2:f7:df:27:03:81:c6:eb:88:4d:f6:
c6:68:cd:63:73:38:07:42:4d:ef:2b:22:78:64:c4:54:dc:36:
ac:f6:8c:8e:bb:ba:19:65:93:fe:cf:73:ad:f1:c1:b7:5b:10:
ab:a7:9c:ed:37:8a:91:c0:6c:6f:74:c4:49:33:ae:55:6f:d6:
03:ac:a0:bc:56:cb:27:5a:66:f9:c9:e6:99:c5:9d:ea:ae:07:
34:cc:1c:99:4c:9a:d2:87:e6:ec:19:04:ad:ac:a0:df:65:33:
9c:f0:70:ad:7d:48:97:8c:65:68:7b:2b:f5:01:4f:32:e0:01:
80:c5:cc:cd:ee:0f:06:c4:ed:7a:24:a8:2f:98:2b:46:ce:cc:
43:c8:2b:58:39:42:7f:1b:e3:1b:7d:60:93:69:8d:b5:9f:83:
97:87:13:98:d3:09:ac:dd:49:a4:8f:48:ce:c5:54:77:75:73:
67:b0:f1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 23:41:52 2026 by rpki-client