Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
File: Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft (raw, json)
Hash identifier: FQluyt1fbH55kY4gm2Q0p0D903GCN0Kgg5wYrYOB6gQ=
Subject key identifier: B5:26:D1:BD:87:35:05:46:56:95:6D:30:69:03:B1:8A:D5:1F:08:C1
Authority key identifier: 19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
Certificate issuer: /CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Certificate serial: 019D39E5F3A96A8CD05A85B78BF854C38B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
Manifest number: 093F
Signing time: Sun 29 Mar 2026 14:01:04 +0000
Manifest this update: Sun 29 Mar 2026 14:01:04 +0000
Manifest next update: Mon 30 Mar 2026 14:01:04 +0000
Files and hashes: 1: Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl (hash: iaJi1Os2itDMFFO9neduMvdxHym5UjgOVrNqTKSwlCc=)
2: yr7773JgZS-hoqRaLKVR30gkXMA.roa (hash: eoiybvDzfPEaKghr3+3isj8k5HkO1EDFC+psSZmz2v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:f3:a9:6a:8c:d0:5a:85:b7:8b:f8:54:c3:8b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Validity
Not Before: Mar 29 14:01:04 2026 GMT
Not After : Mar 30 14:01:04 2026 GMT
Subject: CN=b526d1bd8735054656956d306903b18ad51f08c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:34:d5:7d:b2:3a:45:2f:13:ea:d6:05:3e:80:
55:1e:dc:df:32:91:7e:b5:8f:e4:e6:7e:1d:0e:e0:
c6:8a:15:b6:75:c8:ed:9f:f9:ec:68:d1:eb:5e:94:
de:ba:30:e4:b1:91:e3:4d:e4:ec:fc:0d:3c:a8:5c:
3e:a2:1c:37:0e:3c:ae:b8:7d:87:59:cb:fe:0e:8d:
2f:65:e2:7c:a7:bc:39:1b:78:e7:6a:09:25:d8:32:
49:4e:a9:8c:14:0b:17:51:90:63:d0:b7:20:16:62:
1a:20:b6:db:fd:d6:eb:80:31:e6:7b:8e:d1:8e:97:
3c:83:3b:03:a5:c6:35:a0:68:16:bd:7c:1d:f8:60:
c5:d7:86:1f:f2:18:36:37:2e:da:10:13:25:e6:7c:
6c:d6:c2:76:c7:41:99:dc:d6:72:30:a2:4c:09:90:
cf:85:37:88:62:31:7c:43:d1:6b:1b:56:92:21:45:
b6:5c:8d:d4:89:db:b7:5d:39:44:53:ea:75:0a:d0:
f9:28:57:df:98:1b:7d:fc:62:4c:f9:3b:ee:59:06:
52:eb:18:73:6b:7a:43:84:38:47:ed:df:9e:65:04:
af:6b:ad:93:ee:3d:36:11:10:e6:59:22:64:db:cf:
65:6d:fe:a7:a3:3b:84:13:0c:5d:84:47:00:5b:e6:
94:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:26:D1:BD:87:35:05:46:56:95:6D:30:69:03:B1:8A:D5:1F:08:C1
X509v3 Authority Key Identifier:
keyid:19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d9:d3:18:bb:6f:63:b8:d3:b7:dd:c2:85:20:42:86:e6:ca:
77:6f:9a:49:4b:26:c8:35:fd:06:52:28:87:a5:13:f2:99:fc:
6d:14:54:4a:b2:11:64:49:25:94:75:14:f5:79:13:90:7b:06:
50:be:28:ae:b5:e8:b3:82:44:3e:1b:06:07:eb:28:4b:8e:20:
82:c4:0e:7c:f3:11:ed:8c:2a:4d:b3:5d:e7:ce:c3:d7:e5:7f:
16:35:f2:5f:65:44:ce:47:8d:c1:46:be:c5:0b:b1:ed:95:ca:
81:3b:6c:d9:1e:7d:e7:d8:47:a7:dd:43:99:78:0c:6a:22:09:
61:d9:4a:ab:4a:74:b1:6a:51:30:58:b3:e8:e4:13:f9:ad:69:
22:2f:31:03:82:53:54:9c:25:61:df:71:e7:4d:e9:fa:e8:1b:
51:a9:f2:c6:be:7f:19:ec:c3:11:01:c1:3e:96:aa:99:a2:84:
fa:6c:79:92:34:92:dd:30:05:3c:ac:69:20:12:8b:f8:22:7d:
0e:90:77:06:b0:90:8f:af:88:8e:19:58:59:b3:c7:2b:2c:1e:
8c:9c:69:f5:6c:c3:4a:84:aa:bd:6f:1e:ff:bb:91:90:db:ba:
55:af:bf:86:16:51:1d:98:05:a6:11:42:9d:84:95:17:11:3c:
88:09:43:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:32:19 2026 by rpki-client