Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
File: gePml83W4iWsWxFhzfcE3pz8JlU.mft (raw, json)
Hash identifier: cXC5+ni2bKDmhhBqrcFbzsmKuAi3eEHmXAVqJJrDIxU=
Subject key identifier: 57:79:DF:9A:C8:51:70:05:3F:CA:F2:19:D4:8A:2D:92:71:C8:3C:91
Authority key identifier: 81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
Certificate issuer: /CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Certificate serial: 01A170C9BEE7A1BE46444F2CF55B523F299E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
Manifest number: 0E91
Signing time: Sun 25 Oct 2026 02:00:32 +0000
Manifest this update: Sun 25 Oct 2026 02:00:32 +0000
Manifest next update: Mon 26 Oct 2026 02:00:32 +0000
Files and hashes: 1: E7jBDIqyZ11WO82f30hyB6Wv9ok.roa (hash: 4z+3nqji4gh4yjW7JtX0cO45G+UJjdxxeL8xg5cXbQc=)
2: gePml83W4iWsWxFhzfcE3pz8JlU.crl (hash: g4URV0RrjgXDxqMma56XBsArNSqcpwUJQl4UjUP4IdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:c9:be:e7:a1:be:46:44:4f:2c:f5:5b:52:3f:29:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Validity
Not Before: Oct 25 02:00:32 2026 GMT
Not After : Oct 26 02:00:32 2026 GMT
Subject: CN=5779df9ac85170053fcaf219d48a2d9271c83c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:37:5b:77:07:d7:91:01:34:7a:d5:89:7e:
95:fb:25:9f:54:fb:c0:fa:4e:b0:4a:0f:80:e7:1b:
ac:b0:40:0b:7e:35:d4:5c:48:3c:18:83:13:41:d1:
10:8c:a1:aa:41:b4:f6:55:49:7e:df:10:b4:bd:9a:
d8:33:6f:58:77:8f:d6:39:4d:15:d5:a1:ed:84:fb:
df:fb:0d:5d:00:6e:49:82:37:28:1c:c3:cd:33:4d:
b2:e8:e9:8f:3e:12:b6:d4:bc:cc:08:b8:00:8d:3c:
89:97:9b:ab:09:11:fb:6d:df:78:cb:ea:41:a6:fe:
2e:25:77:36:88:80:70:01:02:ae:c0:6c:8f:bb:47:
b6:64:ae:11:0b:b8:6d:e6:13:ba:d1:3f:4b:88:21:
fa:08:bb:b7:4f:71:cc:c5:bd:51:02:0f:83:dd:09:
07:97:ad:98:83:53:1e:cd:10:f2:20:61:1f:a2:99:
41:91:82:10:0b:2b:97:fa:c2:e0:0e:67:12:b3:cf:
3a:10:6d:fa:01:55:95:ff:1a:ff:92:4d:93:04:f2:
bd:1a:92:0a:62:80:5c:10:42:ac:57:67:54:db:03:
0a:fd:b9:3a:dc:8e:a5:f1:fc:e3:a0:3e:6e:f7:57:
e4:95:e6:d6:cc:4e:22:05:e8:8d:c6:54:78:f4:02:
8d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:79:DF:9A:C8:51:70:05:3F:CA:F2:19:D4:8A:2D:92:71:C8:3C:91
X509v3 Authority Key Identifier:
keyid:81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5d:aa:98:00:bf:56:a0:5a:ab:0a:4e:40:55:9d:43:88:ba:
23:ee:7a:68:76:e9:50:08:ad:ee:41:9c:b5:04:2d:f2:51:99:
93:9a:b0:77:57:e5:47:45:33:b4:bb:a1:98:ea:22:0f:29:98:
5e:f3:71:0b:21:60:a6:fb:52:14:68:cb:8e:fe:8f:5b:3c:8b:
eb:64:9a:73:5a:10:e8:dd:4e:0d:38:ca:b8:95:20:cc:93:1b:
6d:49:b7:a2:39:bd:50:68:47:56:3e:ac:a0:21:8a:9c:32:61:
61:85:fe:78:2b:0b:e0:76:75:ab:7d:61:37:cb:7a:a4:40:97:
bd:b6:db:78:23:33:d3:d2:94:63:98:d7:34:0a:6a:55:38:8e:
9a:cb:c7:a6:81:d6:d1:96:ef:5c:ac:2e:6b:1b:ea:1c:da:09:
f2:b5:62:06:1b:e6:0d:6e:05:59:ea:0f:40:b9:d7:72:ec:08:
26:e1:df:85:3a:da:60:7d:1b:db:02:2d:32:b0:6b:c3:23:b2:
8a:39:ea:c1:88:de:ea:c1:d2:55:e7:c5:cf:18:59:9e:b9:71:
c1:60:28:57:ba:ea:98:0b:12:ab:9a:3e:51:89:dd:e7:25:77:
86:7d:59:6d:0f:a9:9d:fd:61:76:0e:83:f2:b1:4f:1f:3c:45:
69:d7:12:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:51:12 2026 by rpki-client