Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
File: GeBhVfweN2UrK3nJpTbS5hRNBPc.mft (raw, json)
Hash identifier: ZUMdwmLAaIIGWqu2siGkM/P/ZO/RGzxNTv+rNRxoIsI=
Subject key identifier: 82:C2:14:EF:F2:28:0A:46:A4:C7:0B:D9:84:B5:4D:C4:AA:41:77:3D
Authority key identifier: 19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7
Certificate issuer: /CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7
Certificate serial: 019F8EA280216423AF39310F6405445474C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
Manifest number: 1232
Signing time: Thu 23 Jul 2026 11:00:41 +0000
Manifest this update: Thu 23 Jul 2026 11:00:41 +0000
Manifest next update: Fri 24 Jul 2026 11:00:41 +0000
Files and hashes: 1: GeBhVfweN2UrK3nJpTbS5hRNBPc.crl (hash: 5KnysIGisYkbhPXBbj+GA1M4FEWxHcFbnRlHkt0lFcM=)
2: HeGk-IHyFVfngqTZrq64SEROS-g.asa (hash: iPeK08TTc0azSBNIXksSX2K6e4Xwya8gagulAlcBjp0=)
3: zLsfLFOJpnTtg3F4KVVDlPfhrD4.roa (hash: lvwGobToDcZgHYg/+bZlkIQ8ZdF7bln38m78tCC4O58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:80:21:64:23:af:39:31:0f:64:05:44:54:74:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7
Validity
Not Before: Jul 23 11:00:41 2026 GMT
Not After : Jul 24 11:00:41 2026 GMT
Subject: CN=82c214eff2280a46a4c70bd984b54dc4aa41773d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b3:0b:00:cb:be:02:37:9b:ac:4b:c9:f0:88:
bc:fc:ad:8a:a0:ee:bc:9a:20:d6:ad:b0:12:b3:91:
bb:4f:4b:c2:30:c7:fa:ce:bf:d1:a1:38:00:34:50:
8c:68:bd:70:a7:eb:a4:2f:d5:1d:07:c2:b7:10:3f:
f3:ab:7d:9d:7a:69:1a:f7:65:85:7c:04:32:ad:3a:
bd:be:1e:04:bc:df:27:60:63:b4:eb:5e:60:72:0f:
18:3a:83:34:87:c6:2f:56:2a:8f:3c:15:56:1c:89:
c8:e9:05:a2:82:c0:b4:e3:12:1d:37:8a:28:6e:6a:
1d:cb:a0:0e:d1:f9:fd:75:0a:2f:6e:f3:b9:47:61:
03:e7:d2:b4:f2:bc:34:58:b4:64:cd:8c:31:ab:3a:
44:81:45:f7:78:c9:3a:24:03:2a:e6:b3:75:b9:f8:
c5:fa:aa:a9:0a:19:83:89:e3:60:2c:d6:03:c9:21:
22:0f:9f:55:06:d7:88:b0:3d:c7:db:f6:37:7f:48:
19:d3:ab:d4:77:cd:a6:09:f2:7b:8a:2a:04:f2:71:
f9:ed:fb:a8:38:54:93:e6:bb:99:45:97:64:da:2b:
6e:2f:cf:b0:49:85:79:36:db:70:d5:9b:39:93:d1:
a5:8d:f0:72:9d:23:c0:7a:a7:ee:bb:2b:59:3f:a7:
47:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C2:14:EF:F2:28:0A:46:A4:C7:0B:D9:84:B5:4D:C4:AA:41:77:3D
X509v3 Authority Key Identifier:
keyid:19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d3:3c:47:15:3c:90:ac:2e:c6:93:67:25:5e:34:d2:cf:35:
7c:8d:ec:3b:e1:a9:c4:70:2c:d8:f6:59:69:7a:22:4a:bd:51:
fd:a3:dc:cf:c9:4f:3a:67:38:f6:de:85:7e:a9:12:18:0e:11:
e4:d2:5a:ff:5d:c5:b4:1f:42:64:08:3d:b6:bf:92:3d:cf:af:
f5:a8:e3:c8:28:4e:df:dc:f5:65:02:34:2f:3a:a4:81:53:af:
8b:15:07:15:5e:dc:ea:f8:99:f6:33:f3:46:f0:b0:2f:dc:a1:
b9:25:db:60:79:cb:1e:a4:12:61:9b:33:41:18:a8:11:3a:a6:
7d:84:bc:2e:75:29:47:cf:65:f9:18:1a:ad:93:1e:e9:50:db:
27:76:15:98:f4:2b:72:ca:75:98:78:bc:f7:6f:61:69:fc:a6:
67:6e:8e:8a:d6:a4:21:b8:51:4c:5c:60:90:4b:20:f4:70:33:
78:18:00:36:09:d5:a9:33:80:ea:6f:83:d1:ae:f4:f6:51:64:
df:32:f9:c8:60:b9:68:7a:6d:71:37:7b:b1:b7:ec:f5:1c:b1:
87:5d:22:d3:f7:78:df:e9:70:55:5c:cd:61:18:c0:60:41:74:
1e:c4:06:58:14:a8:8b:58:ed:c1:bd:34:4f:6b:7a:59:7a:41:
9e:0c:d4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:06 2026 by rpki-client