Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
File: ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json)
Hash identifier: 2KNYQfi9TmlJgdU7FLiWA79mywinlYlT2f7BUEit4fY=
Subject key identifier: 59:B1:E6:BC:AF:81:0F:7B:77:AF:0A:CE:46:7F:DC:E5:70:6F:D2:A5
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 01A00439795007AA712A7A8030F5F24CB9A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
Manifest number: 1A21
Signing time: Sat 15 Aug 2026 07:01:10 +0000
Manifest this update: Sat 15 Aug 2026 07:01:10 +0000
Manifest next update: Sun 16 Aug 2026 07:01:10 +0000
Files and hashes: 1: AQBZKKUw0CfqLnDcy9hcMLkcBVQ.roa (hash: e8Nsfm4NARCM4kcuUWqaXIOJHBmE9O9GAIR9R4lcjmA=)
2: Us-vXa-60ckWPiugXWQ_x4JuseE.roa (hash: enmgWwaQKeKIKYlxJaQsj5pZN2wULNXLovWU/A2zDQ4=)
3: VuSedNq080u42oe8PtK90QTYvdk.roa (hash: ZZTjW9ToPnYbK8YX5tY0XOAbcYCc6gHAC9O1wsgeddc=)
4: XiqMdLxfKoUjx95VMJtJvMxAZvY.roa (hash: SXoL5HuxIAiQquuEruAdXQNKyAHRVH7HOzbYGfTqh5A=)
5: Z9B94VUuwMzLp1J1_UmV3P3-Bog.roa (hash: b0gWVuQa3wcBnwLUc4jIKMufXEjkfGFHau8pBV9DYlo=)
6: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: OOxiR0RZmga3chlpNfxQmmPenGsXfehHyrMMzD9r69c=)
7: mYgjhTH0BS3qrs0ZjiO_8_EBYtI.roa (hash: CgpuCBWQUKpo80yS5uyAF0yCv9LrXxgg9n9BYvmd7yM=)
8: nQU1rY2ErLKpGm3xNOk2Vd6maac.roa (hash: I6X6MYBEOfSMB0M7TNs7z1Yj80MN+WqIyp43IIumKAY=)
9: nopQAUQRG4jx5x4s6u3QK-MZsbg.roa (hash: RDH8P9E/bjc7kW3A05V8yS4BKO/L6buzS6KDDdD3BXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:39:79:50:07:aa:71:2a:7a:80:30:f5:f2:4c:b9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Aug 15 07:01:10 2026 GMT
Not After : Aug 16 07:01:10 2026 GMT
Subject: CN=59b1e6bcaf810f7b77af0ace467fdce5706fd2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d8:75:db:a0:6f:23:39:53:0b:c6:de:26:ed:
6a:a1:59:43:34:0b:8f:07:87:e3:4f:88:3b:2e:e4:
22:a2:b9:c5:57:75:61:dd:52:3b:a4:fe:31:f9:8a:
7e:59:41:1d:87:6a:08:3f:56:97:49:8e:5a:c9:5b:
f3:99:83:8e:b5:d7:35:cb:9d:07:50:dd:7f:2e:ed:
0d:16:dc:b7:08:e8:8e:53:4b:d7:f1:fc:e3:2a:29:
97:4c:56:54:f1:29:2a:87:47:4b:1f:3e:0d:6c:b4:
f8:12:7e:88:5b:e7:7e:c4:13:6b:13:2f:f0:21:f3:
66:83:fb:0c:e4:a8:f6:6a:d3:46:91:2e:9c:33:99:
7f:31:48:5d:96:1e:f1:f8:28:66:02:55:3e:2f:71:
de:5e:81:24:e5:23:19:67:3a:15:10:69:43:fd:90:
01:54:4f:2e:54:6a:13:a7:e2:e5:c9:ad:35:5c:14:
2a:63:7f:75:e8:e3:16:e9:ad:6c:60:30:70:17:89:
ea:b9:7a:e6:e2:62:5a:9c:43:f0:32:f3:7b:0e:1c:
0d:47:d1:a0:19:4b:bf:21:72:43:34:c4:e1:65:53:
3c:2b:d6:0d:e6:41:52:d7:26:33:4f:61:3f:41:23:
8b:4f:99:54:a4:52:1a:b6:4b:ee:b4:d7:bf:81:a7:
a4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B1:E6:BC:AF:81:0F:7B:77:AF:0A:CE:46:7F:DC:E5:70:6F:D2:A5
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:fc:ab:74:3b:7f:c4:7e:7b:95:72:07:57:8c:41:b9:33:6d:
9d:34:26:1c:b6:94:48:23:08:71:86:e6:46:c9:fc:5b:8e:f1:
c3:4d:2c:3b:5b:23:a1:35:bf:31:c0:b9:f8:0e:ca:18:2b:38:
f9:56:fc:6a:4e:0d:c0:db:0a:12:43:72:61:08:f8:33:f7:ab:
b4:fc:89:0e:ea:59:40:37:ab:5a:1d:e0:af:33:8e:fc:6b:58:
97:67:f9:1a:f5:0b:aa:d8:f5:8c:a0:d1:52:7b:83:8e:c2:b6:
25:25:06:96:ea:10:da:f8:46:5f:ab:32:70:d5:1b:fa:38:de:
cd:31:f8:3f:f8:60:80:ae:dc:d2:3f:2e:34:82:7e:f7:af:43:
10:a0:bf:bd:35:bf:99:d3:51:6d:5e:f4:d9:23:58:5b:b2:12:
c3:46:2d:42:aa:33:72:8e:b6:f5:ae:9b:43:0a:1e:7d:ea:33:
11:af:12:4f:4a:80:43:c9:31:03:97:3a:a4:36:c7:c2:a0:d5:
d3:e7:51:ea:f0:aa:86:73:0c:71:80:86:89:ba:93:6b:0d:16:
4f:4b:d8:45:13:c1:8c:6f:56:8c:83:67:44:d9:f4:46:55:32:
f7:08:c5:66:9f:e6:09:99:83:be:77:83:f4:57:7e:98:ee:7e:
e1:8f:08:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 13:44:28 2026 by rpki-client