Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
File: ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json)
Hash identifier: JHLGbi0CBhJydoNLoyx6qZFOFcjCKjEzmFHGz99PINo=
Subject key identifier: 63:49:6B:39:FB:0A:63:D2:73:9F:1D:CA:DA:90:A8:57:EF:B5:B1:82
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 01A1DDCBFFA31C1370260FDEB4CBB008165A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
Manifest number: 1B18
Signing time: Sun 15 Nov 2026 06:01:36 +0000
Manifest this update: Sun 15 Nov 2026 06:01:36 +0000
Manifest next update: Mon 16 Nov 2026 06:01:36 +0000
Files and hashes: 1: AQBZKKUw0CfqLnDcy9hcMLkcBVQ.roa (hash: e8Nsfm4NARCM4kcuUWqaXIOJHBmE9O9GAIR9R4lcjmA=)
2: Us-vXa-60ckWPiugXWQ_x4JuseE.roa (hash: enmgWwaQKeKIKYlxJaQsj5pZN2wULNXLovWU/A2zDQ4=)
3: VuSedNq080u42oe8PtK90QTYvdk.roa (hash: ZZTjW9ToPnYbK8YX5tY0XOAbcYCc6gHAC9O1wsgeddc=)
4: XiqMdLxfKoUjx95VMJtJvMxAZvY.roa (hash: SXoL5HuxIAiQquuEruAdXQNKyAHRVH7HOzbYGfTqh5A=)
5: Z9B94VUuwMzLp1J1_UmV3P3-Bog.roa (hash: b0gWVuQa3wcBnwLUc4jIKMufXEjkfGFHau8pBV9DYlo=)
6: _C8dSNFKG1Xi-1R-R_3md34bDpw.roa (hash: WZZ7cWqQi7jQSZ8IAXwAeAod3QjUmVawfOLpc3RZwY0=)
7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: JUi/AODSsnPYA/vOxJEZkrABxq62vUG7TwhXuP9FVWU=)
8: mYgjhTH0BS3qrs0ZjiO_8_EBYtI.roa (hash: CgpuCBWQUKpo80yS5uyAF0yCv9LrXxgg9n9BYvmd7yM=)
9: nQU1rY2ErLKpGm3xNOk2Vd6maac.roa (hash: I6X6MYBEOfSMB0M7TNs7z1Yj80MN+WqIyp43IIumKAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:ff:a3:1c:13:70:26:0f:de:b4:cb:b0:08:16:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Nov 15 06:01:36 2026 GMT
Not After : Nov 16 06:01:36 2026 GMT
Subject: CN=63496b39fb0a63d2739f1dcada90a857efb5b182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:2f:b1:53:58:c9:6e:17:dc:8a:87:a4:80:
f7:a8:2a:97:6c:7f:3f:21:82:1e:38:d5:1c:bb:b0:
94:1b:e1:8f:f9:dc:5f:44:07:4a:1a:ab:5e:61:93:
c7:b1:d2:42:81:5f:47:e5:fb:82:75:a9:8c:43:ff:
23:30:7c:d5:95:e2:cc:c1:71:2b:05:26:08:9f:01:
ab:98:fe:41:33:36:df:e9:1f:59:b6:34:52:fd:6c:
22:4f:ca:62:5a:f2:aa:fe:b7:5c:16:af:4b:c1:cf:
ad:bc:f0:10:97:33:9b:2b:1c:6e:db:2a:9c:5d:bc:
a2:0c:35:d1:3e:6a:45:b4:47:9f:57:e2:e1:c5:55:
87:d9:8d:41:cc:92:67:a6:df:7e:a6:f4:b4:e4:fa:
1c:4a:e4:81:fc:e1:61:b0:a0:3f:4b:11:4e:f4:94:
e5:fe:68:ae:3f:7a:11:75:be:88:18:fa:84:34:6f:
55:da:8a:3a:03:13:b8:4b:43:27:11:16:a1:d9:85:
33:d0:e8:73:18:31:da:69:a7:a3:56:38:fd:20:5a:
37:86:1d:36:f1:33:15:0a:21:79:26:d8:54:fd:a6:
3d:62:28:9f:d5:1c:56:67:b1:22:95:8d:f2:3e:ed:
e1:1c:07:34:fc:2b:c3:cd:b0:55:cf:59:22:6f:8a:
02:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:49:6B:39:FB:0A:63:D2:73:9F:1D:CA:DA:90:A8:57:EF:B5:B1:82
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:02:2d:c6:d3:9c:fe:74:1a:6e:56:0a:96:80:7e:17:7f:70:
5b:2d:74:47:99:f8:72:17:45:b2:29:02:5b:3e:af:a7:c7:db:
c8:7b:79:10:09:72:28:79:7c:d8:d4:46:ab:0e:a3:23:aa:a8:
ea:ea:d1:1a:a7:e6:1b:04:c1:ab:92:88:d1:95:22:30:6f:c6:
3a:57:84:9d:62:a5:19:84:64:0f:39:70:40:b5:64:7d:c6:0f:
c0:b3:df:6e:f0:64:4f:40:58:94:96:f6:7f:0c:80:df:43:df:
0f:cb:b5:73:40:67:a8:dc:ba:c9:ea:da:f1:4f:4c:af:ee:39:
bb:79:b2:c9:1c:51:09:66:92:0f:29:cb:c1:92:10:4f:7b:6f:
16:0a:91:76:22:5c:62:1b:30:99:dd:e8:a4:75:80:21:08:65:
58:15:b9:bd:b6:78:bf:4e:0f:59:36:7e:df:0f:f6:ce:2c:36:
f9:48:a9:7b:32:33:6a:5d:a6:3d:aa:c5:79:34:d8:a6:21:06:
b5:79:32:2b:67:7c:56:37:e4:6f:52:30:67:52:ad:f8:82:35:
67:e1:71:69:0d:ed:df:72:0e:b5:1d:48:bf:d9:01:a0:66:f7:
b2:fc:73:eb:70:35:f4:9e:36:51:d5:7d:f8:1d:04:a1:9b:c5:
7a:f4:37:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:17:14 2026 by rpki-client