Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
File: geTmB1l46pR2tkHOAIx4erKOXRM.mft (raw, json)
Hash identifier: T1Wrf4U5WKW+VVcU/qVsxvKkCQJQ0nqcH9iECFWq0E8=
Subject key identifier: 38:A7:99:58:B2:E5:38:D8:B1:97:65:B1:B0:31:48:7E:8A:C3:5F:DD
Authority key identifier: 81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
Certificate issuer: /CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Certificate serial: 01A0D0B6F24A29069303B9165B4495DB4DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
Manifest number: 1A6B
Signing time: Thu 24 Sep 2026 00:00:45 +0000
Manifest this update: Thu 24 Sep 2026 00:00:45 +0000
Manifest next update: Fri 25 Sep 2026 00:00:45 +0000
Files and hashes: 1: geTmB1l46pR2tkHOAIx4erKOXRM.crl (hash: JlM7QXpvCofB78/g5TTPOWRfKASBZ7hL4y1FWWW39ms=)
2: pTTs0nVlMn5tHpy7oYuUSfXDe4g.roa (hash: xSZGhc6azC4w2f74UgWS1yPxNx1RtAZpsoy3M6zVKGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:f2:4a:29:06:93:03:b9:16:5b:44:95:db:4d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Validity
Not Before: Sep 24 00:00:45 2026 GMT
Not After : Sep 25 00:00:45 2026 GMT
Subject: CN=38a79958b2e538d8b19765b1b031487e8ac35fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:26:52:96:e1:5b:59:48:54:c5:0c:b8:84:
a8:02:95:83:c4:39:9c:86:c7:b0:7c:06:20:7d:67:
b5:74:b5:22:4c:cb:75:a7:36:66:3b:f7:7d:44:c6:
4b:2a:49:35:9c:ea:a5:05:5a:09:2e:01:79:8b:2c:
34:d7:31:cc:16:d2:6c:f2:29:c5:f8:e8:bc:2d:a5:
83:96:0a:3d:96:3d:b4:54:01:5c:58:da:1e:ad:d1:
9c:6a:86:37:42:02:41:26:37:b8:2d:ee:04:db:13:
ab:5f:bb:b5:d2:14:8d:e2:85:06:a2:92:0b:b5:9f:
74:ab:e1:b2:73:32:a7:bf:8c:fb:c8:e5:b4:c5:e1:
ba:01:45:e9:ba:fd:a8:d4:fd:9d:f2:28:50:b8:47:
74:a8:88:0d:c5:e9:f3:a4:72:08:48:db:4b:b7:bb:
b8:cd:9a:54:10:9b:19:af:ae:56:7c:aa:36:85:82:
15:b2:e7:f1:48:c9:15:9a:31:d8:d6:fb:1f:2d:91:
ae:a0:83:df:65:10:f4:3b:c4:58:4c:d2:50:1f:9a:
c2:9c:58:e4:42:1e:93:7d:b1:bb:28:9e:4d:46:e5:
c6:35:8c:8c:e2:24:33:d8:04:a3:06:d7:c9:39:00:
63:c4:8e:35:4d:63:9d:08:60:e6:34:c7:35:b0:92:
60:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A7:99:58:B2:E5:38:D8:B1:97:65:B1:B0:31:48:7E:8A:C3:5F:DD
X509v3 Authority Key Identifier:
keyid:81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c4:7d:a7:2e:14:74:1f:0c:39:96:36:18:9d:91:d8:2b:6a:
08:29:43:d9:cd:14:6b:1c:e0:2b:55:3c:6b:a1:c7:b2:18:5c:
cc:43:5c:5a:03:e7:dd:b4:97:20:df:12:59:24:00:b7:3a:91:
4d:f0:bc:43:a4:d3:af:b6:d2:c0:ca:81:29:f2:a1:b1:43:a6:
cc:bc:e0:ef:e5:2c:ef:be:82:d5:0e:8d:57:bd:da:34:02:e1:
ad:23:f7:b0:0d:fd:49:13:a9:ec:a1:2f:0b:16:10:67:a7:1c:
bf:78:5f:4b:48:78:e7:d4:19:da:c9:02:f9:1d:c8:13:71:99:
ab:7e:e7:79:f8:99:01:ab:1b:08:9e:31:51:ca:ee:b2:d6:07:
17:f6:76:8d:ed:a9:1a:3a:35:ec:0a:6b:4a:cc:8a:4f:39:ed:
1d:0b:03:c3:a0:d1:69:d9:8b:3a:34:aa:af:a2:c8:98:e1:c4:
42:80:1e:a6:40:4c:17:39:0d:b6:5d:06:33:d3:1e:a4:19:bf:
eb:d9:59:c5:fa:a6:59:86:a6:8a:e4:35:c3:ad:7d:1d:7f:f9:
bd:8c:5f:16:30:d2:1f:a8:76:1b:6e:f3:07:4e:f8:43:da:8a:
d4:8c:07:2e:71:72:aa:ae:66:77:19:27:57:c6:04:c0:b7:14:
97:83:b9:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQtvJKKQaTA7kWW0SV203MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZTRlNjA3NTk3OGVhOTQ3NmI2NDFjZTAwOGM3ODdhYjI4
ZTVkMTMwHhcNMjYwOTI0MDAwMDQ1WhcNMjYwOTI1MDAwMDQ1WjAzMTEwLwYDVQQD
EygzOGE3OTk1OGIyZTUzOGQ4YjE5NzY1YjFiMDMxNDg3ZThhYzM1ZmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+smUpbhW1lIVMUMuISoApWDxDmc
hsewfAYgfWe1dLUiTMt1pzZmO/d9RMZLKkk1nOqlBVoJLgF5iyw01zHMFtJs8inF
+Oi8LaWDlgo9lj20VAFcWNoerdGcaoY3QgJBJje4Le4E2xOrX7u10hSN4oUGopIL
tZ90q+GyczKnv4z7yOW0xeG6AUXpuv2o1P2d8ihQuEd0qIgNxenzpHIISNtLt7u4
zZpUEJsZr65WfKo2hYIVsufxSMkVmjHY1vsfLZGuoIPfZRD0O8RYTNJQH5rCnFjk
Qh6TfbG7KJ5NRuXGNYyM4iQz2ASjBtfJOQBjxI41TWOdCGDmNMc1sJJgZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDinmViy5TjYsZdlsbAxSH6Kw1/dMB8GA1UdIwQY
MBaAFIHk5gdZeOqUdrZBzgCMeHqyjl0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2VUbUIxbDQ2cFIydGtIT0FJeDRlcktPWFJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83OTM3MDktZWU1OC00Zjc2LWIzMDgt
ODYyYjg2YjZlNjQyLzEvZ2VUbUIxbDQ2cFIydGtIT0FJeDRlcktPWFJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC83OTM3MDktZWU1OC00Zjc2LWIzMDgtODYyYjg2YjZlNjQy
LzEvZ2VUbUIxbDQ2cFIydGtIT0FJeDRlcktPWFJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAksR9py4U
dB8MOZY2GJ2R2CtqCClD2c0UaxzgK1U8a6HHshhczENcWgPn3bSXIN8SWSQAtzqR
TfC8Q6TTr7bSwMqBKfKhsUOmzLzg7+Us776C1Q6NV73aNALhrSP3sA39SROp7KEv
CxYQZ6ccv3hfS0h459QZ2skC+R3IE3GZq37nefiZAasbCJ4xUcrustYHF/Z2je2p
Gjo17AprSsyKTzntHQsDw6DRadmLOjSqr6LImOHEQoAepkBMFzkNtl0GM9MepBm/
69lZxfqmWYamiuQ1w619HX/5vYxfFjDSH6h2G27zB074Q9qK1IwHLnFyqq5mdxkn
V8YEwLcUl4O5cA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:23:57 2026 by rpki-client