Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
File: GEe1nSHqNrMGL8qAznXBYWr1EZo.mft (raw, json)
Hash identifier: EO5cR+CozbL/Ks1bGs/S3S9ohHg1F0VTJx7x00K19/A=
Subject key identifier: 99:B2:73:B4:B3:90:74:AE:3D:6F:3D:F3:11:2C:A7:EA:A6:67:53:4A
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 01A0D872B763823CABB392E8CAAA8B03F015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
Manifest number: 1A96
Signing time: Fri 25 Sep 2026 12:03:11 +0000
Manifest this update: Fri 25 Sep 2026 12:03:11 +0000
Manifest next update: Sat 26 Sep 2026 12:03:11 +0000
Files and hashes: 1: GEe1nSHqNrMGL8qAznXBYWr1EZo.crl (hash: MRAyE28Igei4w/0J4XHjT6oFVv0aEXI9SjbR9Vg1pD8=)
2: Gll7cy-kn16EuQChyjd5kxJVar8.roa (hash: rAFOy1sEoOQYL6xEmxiSqkBDTDW6pzDgHlfqHYvviWQ=)
3: NbBpfQGsHkSsujFNmwYaCRxCh_M.roa (hash: JJcHtuXrwzjuiCppA+Z6JQDHbPH63cB9zvzIpG1UH3U=)
4: VG14tR93nrCtNgYNhIfw5ASK5b8.roa (hash: Tcz678dunbruTrkYTbdv98GThScQ5vNKS1fF8cX93JE=)
5: em-wCAvCHoRc_h-xPjZ1v-f-PJU.roa (hash: PgYRRROxFEoYAKT7r9ipsKpTh4ssV5nRRFlWjSGCkb0=)
6: jEjMvlS0E3-JaxbZrtShhCPLCJ8.roa (hash: cNkIwV71ok/w0KC8pKnGuUP130XxoF34h2rE4wB3M+0=)
7: q9_YDIRra6aFcMc0ByB5ssvbp7c.roa (hash: Aqh+b9LnXWSFB27cNYCIor6EI4XZue2eU7FkAjMEl08=)
8: s0K3J9Hfz8f1sftMuRidCQOAQhk.roa (hash: 1kkEqiEjaCO/BAeUP7qyZJOwB2fegbQON/HmveFaeBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 12:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:b7:63:82:3c:ab:b3:92:e8:ca:aa:8b:03:f0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Sep 25 12:03:11 2026 GMT
Not After : Sep 26 12:03:11 2026 GMT
Subject: CN=99b273b4b39074ae3d6f3df3112ca7eaa667534a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:4c:91:9f:0f:82:ad:b3:69:86:15:4e:c9:
f6:de:b7:6f:ab:62:cf:68:69:77:1b:73:70:a5:7d:
9d:b0:b3:a8:96:e6:6a:4a:39:49:67:e9:ea:23:1e:
15:ac:da:45:ee:14:3a:60:5a:1a:82:23:a3:c2:28:
7b:80:1a:5f:e1:55:e5:13:57:a3:14:bd:3e:90:4b:
eb:88:bb:88:f7:4e:ab:61:cb:8b:4c:93:df:95:ed:
05:7f:e3:ac:41:3a:14:47:92:11:7b:ce:d1:6a:69:
02:55:b4:47:b1:a0:29:91:5d:a2:40:50:06:7a:2f:
34:e9:ca:04:bd:92:56:19:cd:3b:69:96:c4:15:f2:
15:ed:05:cf:2d:33:dc:16:3e:5f:e3:e1:7a:87:9b:
67:f7:f2:5b:c2:c5:fe:2c:38:00:96:47:8e:69:2a:
59:ca:82:26:87:96:92:82:50:f2:df:1b:ba:cd:9f:
f1:86:2e:6c:21:79:34:55:2f:69:a5:6d:2d:48:dc:
58:9e:b6:fe:9f:20:e6:7e:7b:ad:45:c2:6b:50:25:
3c:ac:03:b8:66:7f:39:5e:11:be:92:c9:0a:8e:84:
47:ae:fe:35:6c:c6:91:06:ce:16:d8:5d:57:96:99:
e3:3a:ee:66:d1:5e:88:78:ff:59:aa:0b:8c:fb:0c:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B2:73:B4:B3:90:74:AE:3D:6F:3D:F3:11:2C:A7:EA:A6:67:53:4A
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:bc:b9:75:8b:66:84:5f:c3:d7:9d:70:53:7f:40:e0:a8:fd:
ac:52:b2:9e:92:25:7c:cc:06:79:e1:d4:57:27:dd:97:4b:cc:
b3:58:a1:23:48:c2:f3:66:f2:24:cc:cd:07:7b:8e:a7:9a:41:
18:ec:5d:e1:68:9d:52:e8:1d:4e:c5:b4:e9:96:76:51:62:b2:
2b:bc:35:e9:88:13:a1:e3:be:7a:1a:d4:6d:4c:31:8c:86:51:
a0:58:d3:97:bf:79:88:ea:e4:59:ba:53:31:bb:50:66:cf:bf:
99:e3:3c:c6:50:6a:1c:04:36:cc:60:fa:77:44:7d:ff:3c:a8:
42:78:50:64:21:a5:b0:b5:89:ba:61:bd:a5:d5:2e:46:11:fc:
7a:e9:7d:95:0b:9c:1b:9b:14:43:c0:37:c1:3d:b7:e2:98:14:
42:4e:86:18:fb:2e:3c:7f:5a:f1:73:e9:69:d6:a6:71:1e:2e:
5f:a2:d8:ec:bf:35:d0:b9:ee:b1:91:48:d8:9c:a3:34:fb:21:
dc:04:fd:58:a4:77:9b:58:19:0c:68:c4:5b:47:80:fb:17:c7:
3c:d9:e9:f9:c1:64:4f:91:14:72:5e:bf:ab:2e:6f:f6:e2:b3:
38:a9:99:61:9b:da:aa:ae:a3:09:61:72:2e:7f:10:6e:f8:bd:
af:c3:90:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:04:27 2026 by rpki-client