Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
File: GE0fQIM4P1aJXW4-c6igd63rUMs.mft (raw, json)
Hash identifier: PgSpKEq9Vra9dSIfCyTbRsasplzSx+Lw6nv/o11O4GE=
Subject key identifier: 7E:56:C7:49:29:E7:DB:21:2E:69:E6:F4:7E:EE:97:55:11:24:8C:F6
Authority key identifier: 18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB
Certificate issuer: /CN=184d1f4083383f56895d6e3e73a8a077adeb50cb
Certificate serial: 019D3865F6366692753039F00FA09A98B671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
Manifest number: 0EBC
Signing time: Sun 29 Mar 2026 07:01:39 +0000
Manifest this update: Sun 29 Mar 2026 07:01:39 +0000
Manifest next update: Mon 30 Mar 2026 07:01:39 +0000
Files and hashes: 1: GE0fQIM4P1aJXW4-c6igd63rUMs.crl (hash: VegjLt224Hrec8zMnyu1hk8XbomrqrkRDDEzFMMO4so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f6:36:66:92:75:30:39:f0:0f:a0:9a:98:b6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184d1f4083383f56895d6e3e73a8a077adeb50cb
Validity
Not Before: Mar 29 07:01:39 2026 GMT
Not After : Mar 30 07:01:39 2026 GMT
Subject: CN=7e56c74929e7db212e69e6f47eee975511248cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ae:11:f6:64:5a:f6:80:30:f7:3e:c9:db:72:
ff:da:a9:ff:8a:b8:1d:19:c5:50:82:0f:d2:b5:be:
9b:1b:25:17:ab:e8:28:b3:2e:63:9b:81:57:79:0b:
74:1e:6e:d5:87:46:f2:41:63:47:d4:41:b6:58:3e:
2c:15:b9:79:c5:ba:20:b0:ab:df:55:39:e2:b4:b1:
f4:3a:0d:ed:98:e2:83:00:f6:be:62:cd:19:30:a6:
ad:30:5a:a5:61:47:22:b5:d1:96:aa:35:2f:6b:41:
63:42:73:1a:c5:7f:63:ae:c6:79:75:f8:c8:71:9b:
8a:69:f7:ab:3e:b3:61:72:75:c1:06:79:79:37:c8:
8f:f8:e8:08:d9:bc:d5:fd:15:7c:50:a9:ec:f5:e5:
2a:e0:03:13:dc:a4:1b:1b:a9:37:4a:98:b8:0d:50:
c4:00:88:4f:e1:64:cd:69:1c:c6:42:84:cb:08:54:
0d:9d:be:e8:13:49:3b:c0:7a:ee:45:65:7c:5b:b4:
83:6c:4b:a2:c3:6b:9d:91:d1:b2:5c:26:c8:69:e8:
81:36:20:6a:60:1f:dc:a0:98:12:54:09:35:62:50:
2c:00:07:c3:58:ea:b7:dc:dd:5c:c8:72:d4:e7:e0:
8e:09:27:4c:af:fe:11:dc:34:fa:fb:4d:30:08:e5:
37:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:56:C7:49:29:E7:DB:21:2E:69:E6:F4:7E:EE:97:55:11:24:8C:F6
X509v3 Authority Key Identifier:
keyid:18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:dd:c4:10:40:f3:20:27:32:7f:00:b8:ad:a0:3f:b3:39:e6:
18:f2:60:73:38:24:ea:4a:01:dc:42:08:b5:ee:49:ee:0e:4d:
8b:c5:90:34:87:61:22:15:56:ea:60:6f:9f:9b:c4:eb:79:d3:
c5:51:52:16:74:73:9c:a4:da:c4:b9:1f:e0:37:19:98:9e:26:
43:7c:72:cf:a7:cc:d1:1b:48:1f:01:f7:6e:0b:7f:14:f3:60:
b4:e5:b4:04:7e:ff:36:a8:c8:65:98:15:5a:92:e7:ec:d0:73:
82:15:f0:39:9a:7d:33:2e:b4:a5:d1:d7:71:68:6d:31:dc:1a:
9b:fe:79:3c:30:18:2d:58:d7:1b:4d:74:c0:14:5f:68:dc:6f:
4e:41:85:71:2a:0a:88:f4:ca:d8:72:e8:fa:26:0c:9a:dc:1c:
f0:14:5c:c4:17:4f:b3:47:28:8b:cd:e7:83:ff:5a:c0:0d:d6:
5a:94:cd:67:0b:24:1a:77:8f:ed:97:ab:52:95:b4:42:7d:95:
92:2f:28:d2:0f:04:31:7a:a3:c1:51:86:0c:72:9e:0e:45:45:
56:4a:6d:cf:b9:a3:8d:fa:24:41:54:2e:29:ad:ac:ef:e2:fd:
00:dc:3a:7a:f1:75:bc:c6:94:cd:2a:63:f3:56:a2:2a:c2:cc:
a8:1c:e9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:18 2026 by rpki-client