Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
File: Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft (raw, json)
Hash identifier: pvGMTVMFHTpe3mFBjxMH3Fnfdttf9xnILLbxDg7JJ/g=
Subject key identifier: B8:02:4F:84:D1:99:ED:72:78:CC:CC:63:0C:7A:43:5F:58:04:CA:9C
Authority key identifier: 19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
Certificate issuer: /CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Certificate serial: 019D2696119B715A957B9868FF961D117480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
Manifest number: 0935
Signing time: Wed 25 Mar 2026 20:01:02 +0000
Manifest this update: Wed 25 Mar 2026 20:01:02 +0000
Manifest next update: Thu 26 Mar 2026 20:01:02 +0000
Files and hashes: 1: Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl (hash: c2HRjXWncrXt8169utWvr+lCnQR27H5iz21ZD3w5XI4=)
2: yr7773JgZS-hoqRaLKVR30gkXMA.roa (hash: eoiybvDzfPEaKghr3+3isj8k5HkO1EDFC+psSZmz2v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:11:9b:71:5a:95:7b:98:68:ff:96:1d:11:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Validity
Not Before: Mar 25 20:01:02 2026 GMT
Not After : Mar 26 20:01:02 2026 GMT
Subject: CN=b8024f84d199ed7278cccc630c7a435f5804ca9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7a:fe:e9:13:dd:4c:3f:9b:70:c1:cf:de:e0:
37:b4:76:92:24:4d:6a:a5:87:d5:91:c9:49:9c:9c:
fc:98:a8:de:1b:90:8f:e3:92:53:c7:63:7a:2b:b0:
e6:32:c3:46:0d:82:e0:4f:09:a9:e3:c5:43:55:99:
34:6e:a4:ea:78:d1:94:6d:1c:73:19:e1:cb:e2:51:
5d:2b:e5:e1:d0:da:3f:1d:a4:20:04:cd:fb:65:3d:
a8:7a:d0:f4:dd:d3:f3:94:53:cd:b7:ae:5a:80:b9:
64:f9:54:9e:38:e6:64:7c:24:0a:03:29:bb:ef:11:
b6:94:33:5e:6f:b7:37:1a:ae:9a:20:13:e0:85:c6:
95:63:fc:0b:f0:83:16:55:b6:b6:10:e1:ba:53:d5:
3f:9c:67:3a:c5:6a:5f:fb:9c:97:3b:49:44:af:30:
69:6c:7f:f3:b5:b4:13:80:a6:17:8a:1e:95:3f:dd:
c6:b5:8a:4c:d1:ae:a1:71:6b:ca:76:07:3f:a7:48:
57:2f:b5:2c:8c:ee:3a:c2:0d:d2:c9:8e:77:cd:02:
ed:67:73:46:70:ec:8d:11:d6:10:af:6f:02:47:14:
44:42:6b:f3:cd:01:af:62:a2:86:9f:f3:df:e9:8c:
9f:bb:cd:87:47:76:ab:47:5b:70:36:f1:87:93:99:
cf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:02:4F:84:D1:99:ED:72:78:CC:CC:63:0C:7A:43:5F:58:04:CA:9C
X509v3 Authority Key Identifier:
keyid:19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:06:ef:44:50:e1:2b:7a:f1:b0:34:86:a4:dd:34:2b:7b:b0:
86:b6:8c:b8:36:3b:5e:93:20:32:94:8c:c8:14:0e:f9:6c:a1:
41:54:3e:6d:40:89:ad:e9:e4:1a:88:8d:38:f9:27:9c:1e:84:
5d:73:12:1b:43:64:0a:fa:21:53:d4:a6:c5:5c:0c:3b:0f:e5:
1b:10:82:c9:72:85:3e:3d:eb:2a:79:9b:b8:77:bf:e5:fc:e0:
50:fc:d1:24:42:b4:38:3a:a3:57:fe:65:ee:40:6b:db:6b:75:
1c:04:c4:fe:e2:08:90:3b:fc:c0:2c:11:8e:f1:24:c9:d4:08:
1f:f6:09:d3:a3:b8:c3:f7:95:13:2e:b4:96:d8:56:68:74:72:
16:72:0c:6c:67:87:07:18:f7:ff:30:6f:c8:9a:48:9a:f1:bf:
a6:c7:73:66:9d:c2:f7:06:00:23:80:e7:f5:fa:61:6f:3c:71:
82:a0:34:96:44:fc:8f:5d:b0:7d:42:c2:91:a8:13:9f:de:bd:
f4:4b:5c:75:40:3d:6e:e6:c7:05:71:f9:4b:13:d7:d6:02:fe:
cf:0c:c0:69:6f:f4:f6:93:e9:f1:a2:99:8f:55:5e:88:09:58:
53:46:0b:b7:0d:6a:64:3c:c0:aa:09:0d:7e:13:f2:d4:24:7b:
da:46:be:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:26:28 2026 by rpki-client