Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
File: gePml83W4iWsWxFhzfcE3pz8JlU.mft (raw, json)
Hash identifier: 567PGTj0JAeFa9TAmntubCC963tlrZTWGG+4QihU4to=
Subject key identifier: AB:D2:D2:C0:D0:00:ED:D2:C5:B3:24:EC:67:AD:D4:02:D6:ED:56:9F
Authority key identifier: 81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
Certificate issuer: /CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Certificate serial: 019D375216D0FB238E102944333E3578FFA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
Manifest number: 0C61
Signing time: Sun 29 Mar 2026 02:00:19 +0000
Manifest this update: Sun 29 Mar 2026 02:00:19 +0000
Manifest next update: Mon 30 Mar 2026 02:00:19 +0000
Files and hashes: 1: E7jBDIqyZ11WO82f30hyB6Wv9ok.roa (hash: 4z+3nqji4gh4yjW7JtX0cO45G+UJjdxxeL8xg5cXbQc=)
2: gePml83W4iWsWxFhzfcE3pz8JlU.crl (hash: 0jQJfQI78ODeEGlsJpO6r4eoDPIxzEYNmzN/XmeYvns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:16:d0:fb:23:8e:10:29:44:33:3e:35:78:ff:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Validity
Not Before: Mar 29 02:00:19 2026 GMT
Not After : Mar 30 02:00:19 2026 GMT
Subject: CN=abd2d2c0d000edd2c5b324ec67add402d6ed569f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:07:46:5b:6d:44:b4:90:d9:25:35:b6:10:13:
f5:98:4f:84:dc:10:1e:a6:c9:15:02:a9:2d:4c:b9:
93:42:39:dd:97:96:78:05:ea:0d:b8:14:04:c3:e4:
f5:93:6f:ed:1a:8f:15:a5:5c:a9:9b:4f:cd:f3:07:
86:f7:50:db:56:6f:b8:36:53:fd:20:64:9d:e8:8d:
9e:6f:f9:ea:be:19:1c:39:25:02:3d:02:46:c0:73:
fa:a7:fd:1a:69:48:e9:06:f1:91:5b:c5:78:33:53:
b9:cf:03:7a:08:74:e2:66:5b:0e:63:81:2f:8f:98:
7f:ae:9a:d3:a8:96:dc:51:d5:51:3f:c5:87:42:be:
1c:ee:41:b1:d6:9d:e8:18:70:ec:45:b6:a1:fe:e0:
03:1b:64:22:74:e1:cd:72:97:db:63:eb:2a:9b:47:
6d:d1:11:d1:30:1b:43:f8:2a:16:a6:45:e7:8d:60:
39:bf:a3:74:9a:e7:a0:9e:15:45:91:8c:de:2d:5e:
a0:6a:5c:e6:7c:88:1d:80:d9:de:19:97:e5:c4:db:
d2:21:79:bf:cd:d4:8b:9a:cf:21:96:5c:1e:b3:21:
70:d6:8c:f2:28:aa:bc:6e:3b:61:bf:c2:c1:93:87:
68:99:b8:c0:d1:80:88:a8:cd:35:78:50:2c:92:97:
a6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D2:D2:C0:D0:00:ED:D2:C5:B3:24:EC:67:AD:D4:02:D6:ED:56:9F
X509v3 Authority Key Identifier:
keyid:81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:89:87:32:68:56:1b:e7:11:6d:cb:45:f4:22:4d:d5:09:b8:
98:f3:e6:4f:f6:d1:94:95:66:6d:05:7b:66:d9:a5:0a:55:d7:
ec:de:be:9c:0a:bd:ec:17:f7:fa:07:49:3c:29:3d:21:3c:72:
90:4f:13:7d:09:a8:b4:94:f5:43:c1:68:24:d6:a9:62:40:23:
b7:e9:cc:24:a0:0d:ec:f8:07:8f:88:fe:d9:c2:20:c1:78:57:
8b:5f:41:cb:31:17:fe:6b:30:e4:2e:bb:bf:84:47:ed:77:68:
5c:e7:6f:06:e2:a9:e9:28:e1:8d:33:c3:42:ce:9d:bd:67:82:
3f:32:f0:36:f8:d3:b0:9b:d0:0f:23:07:d2:55:c5:63:a4:fd:
c6:97:fb:37:12:01:4a:a6:b0:ef:89:ef:20:6c:57:ed:35:9d:
70:1f:83:1f:c0:ad:99:27:32:22:63:10:bf:9d:ef:c8:42:55:
88:ee:b7:3f:f6:8f:9e:6a:59:4b:3a:18:1f:ac:f8:32:a6:bd:
94:c8:75:9a:2e:69:f8:e4:83:e1:73:e6:34:77:7a:a6:3b:bc:
cf:13:2a:82:f7:09:04:31:26:05:02:dd:51:12:bb:b2:8d:93:
09:4a:05:c9:7a:9f:f7:e5:24:10:e6:8d:53:f2:10:36:2e:dc:
2e:79:d9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:02 2026 by rpki-client