Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
File: GeBhVfweN2UrK3nJpTbS5hRNBPc.mft (raw, json)
Hash identifier: VuFsFXIvRykRyIIexv0mdYZpLq9UNuAw5ZaMvB0YlVU=
Subject key identifier: 93:8C:1E:44:98:0C:CF:72:A0:22:47:DA:0F:81:35:BD:A9:09:E1:2B
Authority key identifier: 19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7
Certificate issuer: /CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7
Certificate serial: 01A0CBFE6B59EE1CA9C6AF58BA2E8A2EFE23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
Manifest number: 12D7
Signing time: Wed 23 Sep 2026 02:00:43 +0000
Manifest this update: Wed 23 Sep 2026 02:00:43 +0000
Manifest next update: Thu 24 Sep 2026 02:00:43 +0000
Files and hashes: 1: G6JiPbE3nBUJ-N33dcdxsZPvW8k.asa (hash: o69/deUsCiKQfW+g/VUCRajyYStgs58JVZMRBNHEFBU=)
2: GeBhVfweN2UrK3nJpTbS5hRNBPc.crl (hash: v+KaB+XC49ZQIcLZcjjEOHbfzubRZB39wVzRT2wLnAg=)
3: zLsfLFOJpnTtg3F4KVVDlPfhrD4.roa (hash: lvwGobToDcZgHYg/+bZlkIQ8ZdF7bln38m78tCC4O58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:6b:59:ee:1c:a9:c6:af:58:ba:2e:8a:2e:fe:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7
Validity
Not Before: Sep 23 02:00:43 2026 GMT
Not After : Sep 24 02:00:43 2026 GMT
Subject: CN=938c1e44980ccf72a02247da0f8135bda909e12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:34:b0:a1:09:a8:f7:4a:a2:d2:ab:80:0e:
3e:ee:de:68:d8:c4:de:b2:40:80:3f:f0:53:74:5f:
dd:2d:6f:46:d2:8d:e6:54:47:11:59:c0:28:be:6c:
7d:80:dd:fc:c8:69:3d:dd:6e:2c:07:ef:97:48:e1:
1a:5c:f0:01:56:a1:1f:e0:54:91:d1:c8:a5:6f:bd:
7a:d6:d5:0c:e3:6f:53:fd:71:75:20:bf:b8:8d:cc:
8d:a5:7e:8d:2c:99:c0:ff:2c:46:d8:92:f9:10:85:
aa:92:21:ae:f5:50:56:41:85:d0:d3:05:ae:4b:18:
e2:e7:5e:82:76:57:e7:c0:87:b7:ce:d4:e3:9d:d1:
5d:de:17:c0:0c:94:03:5e:ba:b6:6f:4f:1a:ba:39:
34:0b:ab:17:d1:10:b8:36:bc:ef:b5:2b:70:bb:1e:
66:d3:a3:82:09:82:e0:d3:57:13:3d:9c:22:f3:17:
40:fd:54:d0:6e:aa:b2:86:cd:95:60:2f:74:c8:0d:
0b:bf:be:0a:a6:24:bb:0a:8f:f5:ea:8e:32:9a:dd:
f8:f2:f7:35:ec:85:c3:4e:fb:e7:82:30:13:b2:b7:
c3:d6:b8:79:a9:1f:f2:c7:18:92:cd:1c:25:6c:97:
46:fc:9e:3d:33:00:b5:f6:85:50:c4:de:19:c7:e3:
db:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8C:1E:44:98:0C:CF:72:A0:22:47:DA:0F:81:35:BD:A9:09:E1:2B
X509v3 Authority Key Identifier:
keyid:19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b5:9e:cc:5b:b5:df:bc:81:12:2f:1c:05:5c:52:93:25:7d:
e9:b3:3a:f6:f8:42:ac:53:54:6c:00:e5:1c:11:a8:d1:58:df:
31:29:d9:a6:0f:48:e0:1b:60:08:04:0b:ed:ea:72:f1:07:16:
a6:43:57:86:9e:f3:52:45:ab:59:08:91:2c:0b:f3:01:9b:53:
60:22:36:02:aa:97:62:9e:5c:ca:28:55:20:69:ac:38:ae:d4:
11:77:de:0a:34:0f:94:f5:61:e6:93:ca:ca:64:4d:53:d4:dd:
a7:ce:1a:24:e5:65:33:c0:2c:56:d1:89:82:28:d9:8a:ea:a6:
81:67:64:a7:1e:bf:70:b7:ac:39:e8:f9:89:c2:e0:5e:9c:ed:
68:e8:58:be:16:07:08:fd:2c:d5:b6:05:1f:2e:3f:7f:aa:8e:
a6:ed:cd:b5:da:03:50:69:f7:96:f2:b9:b3:bd:db:96:d1:43:
42:3c:fc:10:8f:59:a7:0f:4c:b5:bc:8e:7f:b3:5d:84:6d:24:
09:4e:04:9a:68:19:3a:98:30:35:b4:c8:f9:1f:4b:2c:70:6a:
9b:44:b3:72:69:0e:70:db:b4:30:af:92:9d:37:e0:ee:09:56:
61:b7:c2:87:88:27:c3:1d:6e:57:cf:89:e7:6e:d6:25:7d:e9:
b6:34:98:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDL/mtZ7hypxq9Yui6KLv4jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZTA2MTU1ZmMxZTM3NjUyYjJiNzljOWE1MzZkMmU2MTQ0
ZDA0ZjcwHhcNMjYwOTIzMDIwMDQzWhcNMjYwOTI0MDIwMDQzWjAzMTEwLwYDVQQD
Eyg5MzhjMWU0NDk4MGNjZjcyYTAyMjQ3ZGEwZjgxMzViZGE5MDllMTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurA0sKEJqPdKotKrgA4+7t5o2MTe
skCAP/BTdF/dLW9G0o3mVEcRWcAovmx9gN38yGk93W4sB++XSOEaXPABVqEf4FSR
0cilb7161tUM429T/XF1IL+4jcyNpX6NLJnA/yxG2JL5EIWqkiGu9VBWQYXQ0wWu
Sxji516CdlfnwIe3ztTjndFd3hfADJQDXrq2b08aujk0C6sX0RC4NrzvtStwux5m
06OCCYLg01cTPZwi8xdA/VTQbqqyhs2VYC90yA0Lv74KpiS7Co/16o4ymt348vc1
7IXDTvvngjATsrfD1rh5qR/yxxiSzRwlbJdG/J49MwC19oVQxN4Zx+PbDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOMHkSYDM9yoCJH2g+BNb2pCeErMB8GA1UdIwQY
MBaAFBngYVX8HjdlKyt5yaU20uYUTQT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2VCaFZmd2VOMlVySzNuSnBUYlM1aFJOQlBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iYjg1ZDctN2NkZS00ZTFjLWI5ZGYt
NzllZWI2MzIxZWI3LzEvR2VCaFZmd2VOMlVySzNuSnBUYlM1aFJOQlBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iYjg1ZDctN2NkZS00ZTFjLWI5ZGYtNzllZWI2MzIxZWI3
LzEvR2VCaFZmd2VOMlVySzNuSnBUYlM1aFJOQlBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7WezFu1
37yBEi8cBVxSkyV96bM69vhCrFNUbADlHBGo0VjfMSnZpg9I4BtgCAQL7epy8QcW
pkNXhp7zUkWrWQiRLAvzAZtTYCI2AqqXYp5cyihVIGmsOK7UEXfeCjQPlPVh5pPK
ymRNU9Tdp84aJOVlM8AsVtGJgijZiuqmgWdkpx6/cLesOej5icLgXpztaOhYvhYH
CP0s1bYFHy4/f6qOpu3NtdoDUGn3lvK5s73bltFDQjz8EI9Zpw9MtbyOf7NdhG0k
CU4EmmgZOpgwNbTI+R9LLHBqm0SzcmkOcNu0MK+SnTfg7glWYbfCh4gnwx1uV8+J
527WJX3ptjSYNg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:46:38 2026 by rpki-client