Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
File: gePml83W4iWsWxFhzfcE3pz8JlU.mft (raw, json)
Hash identifier: EyEUpDyKZ7YKJjHVmdOfGnMRHVCtPLQoeQPjqMFUti8=
Subject key identifier: 9B:8F:00:AA:90:E9:35:B3:8B:33:8F:E7:CE:03:D2:9D:8D:10:8C:54
Authority key identifier: 81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
Certificate issuer: /CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Certificate serial: 019D27DFF0584C6A9351A9C2CB3DEA400F8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
Manifest number: 0C59
Signing time: Thu 26 Mar 2026 02:01:20 +0000
Manifest this update: Thu 26 Mar 2026 02:01:20 +0000
Manifest next update: Fri 27 Mar 2026 02:01:20 +0000
Files and hashes: 1: E7jBDIqyZ11WO82f30hyB6Wv9ok.roa (hash: 4z+3nqji4gh4yjW7JtX0cO45G+UJjdxxeL8xg5cXbQc=)
2: gePml83W4iWsWxFhzfcE3pz8JlU.crl (hash: Jw7KP/3A/N6T698agMdEmSZa4silMYyvgXXWSY46YWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:f0:58:4c:6a:93:51:a9:c2:cb:3d:ea:40:0f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Validity
Not Before: Mar 26 02:01:20 2026 GMT
Not After : Mar 27 02:01:20 2026 GMT
Subject: CN=9b8f00aa90e935b38b338fe7ce03d29d8d108c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fb:42:62:58:4c:84:3d:13:2b:1e:a1:63:72:
32:bb:be:8b:45:ff:7b:a3:55:81:62:3e:0f:98:64:
9a:8e:46:09:80:66:30:b5:36:20:c6:b9:06:1c:e3:
d8:fa:c6:7b:18:d5:43:41:93:62:58:d7:e2:c2:d6:
6f:88:72:c4:e0:ad:a6:13:32:f7:9c:85:57:06:3c:
a4:9c:8f:f3:0b:a7:47:df:78:13:b9:88:31:28:dc:
7e:bd:de:1f:85:7c:8a:5e:7f:0f:eb:89:f4:f5:af:
2c:41:75:5a:37:d2:86:de:35:87:aa:62:84:eb:c7:
51:21:a8:8b:bf:32:8c:9d:dc:74:ae:bf:c0:7c:59:
3f:d9:fa:86:24:76:41:4a:95:9e:2f:bb:ae:89:02:
6d:3f:84:80:21:06:a0:ea:2c:ca:56:55:a2:08:36:
5c:3f:9c:02:99:2a:d3:ae:41:da:18:39:82:d0:46:
58:bb:6a:e8:cb:42:70:8d:72:66:7d:14:ed:6a:79:
ef:40:25:f2:98:d4:8b:31:0b:b0:d3:e9:b9:6a:fd:
fc:70:37:66:d1:c5:73:10:b2:fe:8e:1e:1b:cc:80:
25:18:47:cd:bc:ea:40:d5:10:f3:25:05:5d:c7:62:
c8:0f:87:ff:59:2f:74:08:a3:7a:47:01:0e:9f:be:
0b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8F:00:AA:90:E9:35:B3:8B:33:8F:E7:CE:03:D2:9D:8D:10:8C:54
X509v3 Authority Key Identifier:
keyid:81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:be:07:c9:ea:f6:c9:34:1d:a1:85:9e:f2:ee:7c:d4:b5:7c:
64:2c:72:33:21:8b:6d:18:1b:23:71:75:e8:cd:57:50:4a:fa:
bb:c4:9b:c3:42:b9:b9:63:be:24:31:5e:aa:b4:b3:1a:00:d4:
d9:7a:70:d0:1a:8e:e5:e4:50:fc:54:ac:5a:b6:0c:9b:0f:c8:
8e:27:d8:06:f5:ef:5d:41:58:cf:53:0a:97:d4:1d:da:3d:72:
88:1e:16:7c:cd:cc:b4:96:4f:e1:bb:5e:44:42:0e:19:47:c6:
04:55:76:4f:50:aa:ba:d7:0c:1d:0b:67:d9:6a:11:a4:f0:07:
b8:bc:2c:17:ff:9b:9c:3d:3e:4b:56:40:b3:e9:93:94:72:68:
c2:bf:80:4a:28:62:03:7e:f2:c9:ad:78:0f:39:a8:e6:da:af:
67:04:a0:10:2e:da:6b:2b:2e:5b:f2:62:84:6d:09:d3:f4:eb:
af:ac:d3:8e:9e:29:fd:19:39:04:8b:f4:18:8e:3f:0a:d8:e9:
39:67:22:15:45:d6:32:49:f8:54:d2:f9:b0:89:b0:c8:9c:86:
6a:50:9e:d6:6e:b6:33:a4:d1:0d:d9:2b:2c:58:18:51:0d:e1:
9f:34:82:18:e0:a7:44:17:26:8a:6c:85:23:09:61:45:4d:07:
e8:38:4b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:04 2026 by rpki-client