Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
File: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft (raw, json)
Hash identifier: MOPEUBLjX3qO0u3bkprP0iskO22LkjjLCwrVQlJdlR4=
Subject key identifier: FB:0E:22:AD:53:3F:51:F8:45:34:01:82:41:EA:BE:DB:C0:DD:A8:7C
Authority key identifier: 19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56
Certificate issuer: /CN=19e3d11f72ddbed8361285b499b932191203b756
Certificate serial: 019D28BB88CC9EE69653BE1267834D6B3DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
Manifest number: 077B
Signing time: Thu 26 Mar 2026 06:01:12 +0000
Manifest this update: Thu 26 Mar 2026 06:01:12 +0000
Manifest next update: Fri 27 Mar 2026 06:01:12 +0000
Files and hashes: 1: DKPrKwEm9w_rRG3TMuhv1McAamk.roa (hash: 4OtFjtxkmUmlHY70yrx1zCjgip8Y0WBSl5BdZAXK0TQ=)
2: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl (hash: 6kYJhkAH37Rp1/UogR3B3UcY7V+A3YRFE4+lTwr569A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:88:cc:9e:e6:96:53:be:12:67:83:4d:6b:3d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e3d11f72ddbed8361285b499b932191203b756
Validity
Not Before: Mar 26 06:01:12 2026 GMT
Not After : Mar 27 06:01:12 2026 GMT
Subject: CN=fb0e22ad533f51f84534018241eabedbc0dda87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:31:b5:30:22:c9:e9:a9:ee:9a:e0:26:9b:c0:
c4:f7:09:57:74:8c:17:80:9a:b2:ce:41:d1:98:e0:
9a:59:bc:0c:cf:43:25:f5:09:41:36:6e:30:67:dd:
9f:f3:d6:b0:e9:fb:e1:5a:7a:f4:c2:6b:f5:53:7c:
f5:fa:4a:20:d5:43:f4:f1:ee:a2:10:93:56:f5:26:
60:ee:d3:d0:ae:06:68:f6:69:f5:ec:9e:84:77:8e:
90:ed:21:13:fb:f3:c7:1d:6c:61:47:1e:0f:d0:a7:
1e:e1:d7:32:be:bd:0a:88:e9:70:2c:41:64:62:1a:
77:bc:55:89:8b:bd:ab:f1:75:6d:6b:73:d4:14:f5:
ba:0a:18:3c:f0:2c:29:78:46:48:38:45:15:20:12:
63:39:34:ac:85:00:ed:b9:eb:83:6c:a4:7c:20:97:
3d:f3:7b:2e:b0:b9:d1:63:00:99:8c:75:8c:7f:26:
2b:fe:a0:74:d4:f3:74:fe:ae:f7:f8:3b:70:7a:73:
7f:4f:e4:36:c5:e1:d4:fe:a9:7b:b8:f7:81:7b:e2:
10:fb:d6:89:f4:d6:76:51:f6:81:68:27:b7:6d:2a:
61:07:a2:7b:53:07:b6:22:63:b3:7c:9e:97:99:9a:
8f:0a:ab:a6:ff:56:6b:f5:dd:54:b5:1c:f4:cb:5c:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0E:22:AD:53:3F:51:F8:45:34:01:82:41:EA:BE:DB:C0:DD:A8:7C
X509v3 Authority Key Identifier:
keyid:19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:16:e3:ef:51:26:74:64:8a:1a:36:72:af:49:ff:57:a3:2d:
a6:7f:d3:83:18:28:f1:21:24:fa:7d:8d:8b:7e:60:c5:03:0f:
c6:14:f8:ff:1d:b5:dd:01:9e:bc:6c:fc:f6:ae:8f:3b:1c:9e:
11:67:49:f0:a0:34:62:1a:5c:1f:40:15:c3:c0:c2:6e:bc:34:
85:3a:4c:99:d8:47:63:61:fb:43:6a:33:86:11:19:99:0d:ba:
f3:49:cc:c6:34:41:d8:e9:f4:38:b8:4f:21:a9:43:dc:69:ff:
2d:02:22:e4:65:46:20:49:5b:e1:5e:0f:81:74:54:88:92:e8:
49:ac:10:a1:11:8e:14:bf:ce:1a:b8:1c:5b:59:1b:01:b9:5f:
66:44:e7:8c:1f:be:ae:83:5e:e2:70:7b:a2:eb:77:03:54:28:
56:20:5f:cb:de:eb:d7:19:39:c4:25:52:38:65:aa:e0:1c:41:
82:e8:3d:51:63:64:e1:67:5d:b7:1a:e8:f0:81:54:a4:95:d9:
ba:f1:c6:70:17:cd:3f:30:8f:df:c2:37:dd:23:ab:94:1b:a1:
33:83:4d:1f:3c:8f:12:61:c9:e5:5f:31:e3:f5:d0:b8:eb:b6:
1c:6f:1e:90:8c:6f:5c:dd:e9:c3:20:a9:71:83:b7:c2:a0:0e:
50:a9:12:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:30 2026 by rpki-client